Red Hat Security Advisory 2026-55859-03

Red Hat Security Advisory 2026-55859-03 - An update for haproxy is now available for Red Hat Enterprise Linux 8. Issues addressed include a denial of service vulnerability...

CVE-2026-75485: Insertion of Sensitive Information into Log File

A flaw was found in the must-gather component of Red Hat Advanced Cluster Management for Kubernetes. The cluster Proxy object is dumped in raw form, bypassing the oc inspect redaction that would normally sanitize sensitive fields. This exposes proxy basic-auth credentials in the must-gather...

CVE-2026-73834: Cleartext Storage of Sensitive Information

A flaw was found in the must-gather component of Red Hat Advanced Cluster Management for Kubernetes. Certain ACM wrapper Custom Resources that embed Secret data are collected without redaction. When an administrator runs must-gather, credentials and tokens are captured in cleartext in the resulti...

PT-2026-77156

Name of the Vulnerable Software and Affected Versions Red Hat Advanced Cluster Management for Kubernetes affected versions not specified Description A flaw in the must-gather component allows the cluster Proxy object to be dumped in raw form. This process bypasses the oc inspect redaction mechani...

Red Hat Security Advisory 2026-55763-03

Red Hat Security Advisory 2026-55763-03 - An update for kpatch-patch-5140-687101 is now available for Red Hat Enterprise Linux 9...

PT-2026-77144

Name of the Vulnerable Software and Affected Versions Red Hat Advanced Cluster Management for Kubernetes affected versions not specified Description A flaw in the governance-policy-addon-controller component allows a user with permissions to annotate the namespaced ManagedClusterAddOn resource to...

CVE-2026-66793: Improper Input Validation

A flaw was found in the governance-policy-addon-controller component of Red Hat Advanced Cluster Management for Kubernetes. A user with permissions to annotate the namespaced ManagedClusterAddOn resource can override the governance-policy container image. This allows an attacker to run a controll...

Red Hat Security Advisory 2026-55857-03

Red Hat Security Advisory 2026-55857-03 - An update for .NET 10.0 is now available for Red Hat Enterprise Linux 9. Issues addressed include bypass, denial of service, and information leakage vulnerabilities...

Red Hat Security Advisory 2026-56130-03

Red Hat Security Advisory 2026-56130-03 - An update for sg3utils is now available for Red Hat Enterprise Linux 8...

Red Hat Security Advisory 2026-56050-03

Red Hat Security Advisory 2026-56050-03 - An update for the redhat-ds:12 module is now available for Red Hat Directory Server 12.4 E4S for RHEL 9. Issues addressed include buffer overflow and null pointer vulnerabilities...

Red Hat Security Advisory 2026-56048-03

Red Hat Security Advisory 2026-56048-03 - An update for the redhat-ds:12 module is now available for Red Hat Directory Server 12.2 E4S for RHEL 9. Issues addressed include buffer overflow and null pointer vulnerabilities...

Red Hat Security Advisory 2026-55802-03

Red Hat Security Advisory 2026-55802-03 - An update for haproxy is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Issues addressed include denial of service and integer overflow vulnerabilities...

Red Hat Security Advisory 2026-55856-03

Red Hat Security Advisory 2026-55856-03 - An update for .NET 9.0 is now available for Red Hat Enterprise Linux 9. Issues addressed include bypass, denial of service, and information leakage vulnerabilities...

CVE-2026-18963: Weak Password Recovery Mechanism for Forgotten Password

A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity and access management in Red Hat Build of Keycloak. The issue allows an unauthenticated attacker to force the password reset process for any user without needing to click the...

Red Hat Security Advisory 2026-56047-03

Red Hat Security Advisory 2026-56047-03 - An update for the redhat-ds:11 module is now available for Red Hat Directory Server 11.7 E4S for RHEL 8. Issues addressed include buffer overflow and null pointer vulnerabilities...

Red Hat Security Advisory 2026-55618-03

Red Hat Security Advisory 2026-55618-03 - An update for kpatch-patch-6120-211161 is now available for Red Hat Enterprise Linux 10...

Red Hat Security Advisory 2026-33521-03

Red Hat Security Advisory 2026-33521-03 - An update for Red Hat Hardened Images RPMs is now available...

Red Hat Security Advisory 2026-56133-03

Red Hat Security Advisory 2026-56133-03 - An update for attr is now available for Red Hat Enterprise Linux 8. Issues addressed include privilege escalation and traversal vulnerabilities...

Red Hat Security Advisory 2026-55865-03

Red Hat Security Advisory 2026-55865-03 - An update for multiple packages is now available for Red Hat Enterprise Linux 9. Issues addressed include integer overflow, out of bounds read, and out of bounds write vulnerabilities...

Red Hat Security Advisory 2026-55930-03

Red Hat Security Advisory 2026-55930-03 - An update for modhttp2 is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Issues addressed include denial of service and out of bounds read vulnerabilities...