Threats Tagged 'cve-2026-27139'

The fluent-bit-plugin-loki package version 3.6.5-r0 addresses five security vulnerabilities, including CVE-2026-27139. A patch is available for these issues. No CVSS score or detailed technical information about the vulnerabilities is provided.

The fluent-operator-fips package version 3.4.0-r7 addresses four security vulnerabilities, including CVE-2026-27139. This release provides security fixes to mitigate these issues. No CVSS score or detailed technical impact information is available for CVE-2026-27139. There are no known exploits in the wild for this vulnerability. The affected version is specifically 3.4.0-r7.

The postgres-operator-fips package version 1.15.1-r0 addresses three security vulnerabilities including CVE-2026-27139. A patch is available in this version to fix these issues. There is no CVSS score provided for CVE-2026-27139, and no known exploits in the wild have been reported. The vulnerabilities affect the postgres-operator-fips product and are fixed in version 1.15.1-r0.

The yunikorn-web package version 1.7.0-r0 addresses 21 security vulnerabilities, including CVE-2026-27139. This release provides security fixes to mitigate these issues. No CVSS score is available for CVE-2026-27139, and there is no indication of known exploits in the wild. The patch is available and should be applied to remediate the vulnerabilities.

The kyverno-policy-reporter-kyverno-plugin-fips package version 1.5.2-r3 addresses three security vulnerabilities including CVE-2026-27139. This release provides security fixes to mitigate these issues. No detailed technical information or CVSS scores are available for these vulnerabilities. There are no known exploits in the wild related to these vulnerabilities at this time.

The dcgm-exporter package version 4.5.1-r0 addresses seven security vulnerabilities, including CVE-2026-27139. A patch is available in this version to fix these issues. No CVSS score or detailed technical impact information is provided for CVE-2026-27139 specifically. There are no known exploits in the wild at this time.

The fluent-operator package version 3.6.0-r0 addresses three security vulnerabilities identified as CVE-2026-27139, CVE-2026-27142, and CVE-2026-25679. A patch is available in this version to fix these issues. No CVSS score or detailed technical impact information is provided for these vulnerabilities.

The DevWorkspace Operator extends OpenShift to provide DevWorkspace support.

Red Hat OpenShift Service Mesh 3.0.10, which is based on the open source Istio project, addresses a variety of problems in a microservice architecture by creating a centralized point of control in an application. Fixes/Improvements: Security Fix(es): * istio-rhel9-operator: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679) * istio-cni-rhel9: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679) * istio-pilot-rhel9: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679) * istio-proxyv2-rhel9: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679) * istio-proxyv2-rhel9: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (CVE-2026-33186) * istio-proxyv2-rhel9: BuildKit: Arbitrary file write and code execution via untrusted frontend (CVE-2026-33747) * istio-proxyv2-rhel9: BuildKit: Unauthorized file access via Git URL fragment subdir components (CVE-2026-33748)

An update is now available for Red Hat Lightspeed (formerly Insights) for Runtimes on RHEL 9. Security fix(es): * crypto/x509: Incorrect enforcement of email constraints in crypto/x509 (CVE-2026-27137) * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.