Threats Tagged 'cve-2026-33376'

A local binary for building customized OS artifacts such as VM images and OSTree commits. Uses osbuild under the hood. Security Fix(es): * golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass (CVE-2026-27136) * golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting (CVE-2026-25681) * golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering (CVE-2026-42502) * github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers (CVE-2026-41178) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Red Hat issued a critical security advisory for Multicluster Global Hub version 1.4.8, which is a component set enabling management of multiple hub clusters from a single hub cluster. The advisory addresses multiple vulnerabilities identified by CVE identifiers including CVE-2026-33376. The update includes security fixes and updated container images. No explicit patch details are provided in the advisory text, but the update to version 1.4.8 is the security fix. No known exploits are reported in the wild.

Multiple security vulnerabilities have been identified and fixed in Grafana as packaged for Red Hat Enterprise Linux 10. These include privilege escalation via dashboard overwrite, unauthorized access due to an incorrect IPv6 allow-list default in the Auth Proxy, and denial of service through unbounded memory growth in the OAuth login route and excessive memory allocation from large API request payloads. Red Hat has released updates addressing these issues in Grafana version 10.2.6 and related packages.

The Web Terminal provides a way to access a fully in-browser terminal emulator within the OpenShift Console. Command-line tools for interacting with the OpenShift cluster are pre-installed.

When using an IPv6 allow-list for the Auth Proxy feature, it defaults to /32 addresses. Addresses specifying a mask explicitly are not affected; to mitigate easily, add the desired mask (usually /128) to the addresses. Only auth proxy is affected; Okta, SAML, LDAP, etc are unaffected here.