Threats Tagged 'cve-2026-46600'

CVE-2026-33818 affects the External Secrets Operator for Red Hat OpenShift, which integrates external secret management systems into Kubernetes. The vulnerability involves the Go net/http library used by the operator, specifically in handling unencrypted HTTP/2 connections where the ReadHeaderTimeout is not properly enforced during client preface reading. This flaw can allow a remote attacker to maintain open connections indefinitely, potentially leading to denial of service (DoS) by exhausting server resources. Red Hat has released patches addressing this issue in updated versions of the affected components.

The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to developers working within your Kubernetes cluster.

Red Hat Advanced Cluster Management for Kubernetes versions 2.16.0 through 2.16.4 contain multiple security vulnerabilities addressed in the v2.16.4 update. This update includes security fixes, bug fixes, and updated container images to improve the security posture of the product. The vulnerabilities span a wide range of common weakness enumerations (CWEs), indicating multiple potential security issues. No known exploits in the wild have been reported for these vulnerabilities. The update is rated as important by Red Hat Product Security.

Red Hat Advanced Cluster Management for Kubernetes version 2.13.11 includes a security update addressing multiple vulnerabilities. The update provides new features, enhancements, bug fixes, and updated container images. The advisory rates the security impact as Important (high severity). No known exploits are reported in the wild. Users should apply this update after ensuring all previous relevant errata are applied.

Red Hat Advanced Cluster Management for Kubernetes versions 2.14.0 through 2.14.4 contain multiple security vulnerabilities addressed in the v2.14.4 update. This update includes security fixes, bug fixes, and updated container images. The vulnerabilities affect the management of Kubernetes clusters and applications across public and private cloud environments. The update is rated as having an important security impact by Red Hat Product Security. Users are advised to apply this update after ensuring all previous relevant errata are applied.

Red Hat Advanced Cluster Management for Kubernetes versions 2.15.0 through 2.15.6 contain multiple security vulnerabilities addressed in the v2.15.6 update. This update includes security fixes, bug fixes, and updated container images. The product enables centralized management of Kubernetes clusters and applications across cloud environments with built-in security policy. The vendor rates the update as having an important security impact.

Red Hat Advanced Cluster Management for Kubernetes versions 2.11.0 through 2.11.11 contain multiple security vulnerabilities addressed in the v2.11.11 update. This update includes security fixes, bug fixes, and updated container images. The product enables centralized management of Kubernetes clusters and applications across cloud environments with integrated security policies. The update is rated as having an important security impact by Red Hat Product Security.

Red Hat Advanced Cluster Management for Kubernetes versions 2.17.0 up to but not including 2.17.1 contain multiple security vulnerabilities addressed in the 2.17.1 update. This update includes security fixes, bug fixes, and updated container images. The vulnerabilities affect the management of Kubernetes clusters and applications from a single console with built-in security policies. The update is rated as having an important security impact by Red Hat Product Security.

This release of the Red Hat build of OpenTelemetry provides new features, security improvements, and bug fixes. Breaking changes: * None Deprecations: * None Technology Preview features: * None Enhancements: * None Bug fixes: * None Known issues: * None

This release of the Red Hat build of OpenTelemetry provides new features, security improvements, and bug fixes. Breaking changes: * None Deprecations: * None Technology Preview features: * None Enhancements: * None Bug fixes: * None Known issues: * None