Threats Tagged 'cve-2026-33748'

The multicluster engine for Kubernetes v2.8 images The multicluster engine for Kubernetes provides the foundational components that are necessary for the centralized management of multiple Kubernetes-based clusters across data centers, public clouds, and private clouds. You can use the engine to create new Red Hat OpenShift Container Platform clusters or to bring existing Kubernetes-based clusters under management by importing them. After the clusters are managed, you can use the APIs that are provided by the engine to distribute configuration based on placement policy.

This security update for docker-stable addresses four vulnerabilities affecting the BuildKit component and plugin privilege validation. The issues include the ability for malicious frontends to write files outside the BuildKit state directory, insufficient validation of Git URL fragments allowing access to files outside the checked-out repository, privilege validation bypass during plugin operations, and an authorization regression related to zero-length checks. These vulnerabilities are rated high severity by the SUSE Product Security Team.