Threats Tagged 'cve-2026-45447'

Red Hat Advanced Cluster Management for Kubernetes provides the capabilities to address common challenges that administrators and site reliability engineers face as they work across a range of public and private cloud environments. Clusters and applications are all visible and managed from a single console—with security policy built in. This advisory contains the container images for Red Hat Advanced Cluster Management for Kubernetes, which add new features and enhancements, bug fixes, and updated container images. See the following Release Notes documentation, which will be updated shortly for this release, for additional details about this release: https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.13/html-single/release_notes/index#acm-release-notes

The multicluster engine for Kubernetes provides the foundational components that are necessary for the centralized management of multiple Kubernetes-based clusters across data centers, public clouds, and private clouds. You can use the engine to create new Red Hat OpenShift Container Platform clusters or to bring existing Kubernetes-based clusters under management by importing them. After the clusters are managed, you can use the APIs that are provided by the engine to distribute configuration based on placement policy.

A use-after-free vulnerability exists in OpenSSL's PKCS#7 signature verification when processing specially crafted PKCS#7 or S/MIME signed messages with an empty digestAlgorithms ASN.1 SET. This can cause process crashes, heap corruption, or potentially remote code execution. The issue affects applications using OpenSSL PKCS#7 APIs but not those using CMS APIs. The OpenSSL FIPS modules are not affected. The vulnerability is rated critical with a CVSS vector indicating network attack vector, low complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability.