Threats Tagged 'cve-2026-56852'

Red Hat has issued a security advisory for Red Hat Hardened Images RPMs addressing multiple vulnerabilities in the helm4 package version 4.2.3-0.1.2.hum1 for aarch64 and x86_64 architectures. The advisory highlights CVE-2026-63308 among other CVEs with a high severity rating. No newer patched version is explicitly stated, and no active exploitation in the wild has been reported. The update is relevant to Migration Toolkit for Virtualization components using this helm4 package version.

Red Hat has issued a security advisory addressing multiple vulnerabilities, including the high-severity CVE-2026-41178, affecting Red Hat Advanced Cluster Management for Kubernetes and related products such as the Migration Toolkit for Applications and Red Hat Trusted Artifact Signer. These vulnerabilities impact various versions of Red Hat's Kubernetes management and application migration components. A patch is available to remediate these issues.

Red Hat has issued a security advisory for Red Hat Hardened Images including golang1.26 packages, addressing multiple vulnerabilities. The update provides new RPM packages for golang1.26 version 1.26.6-0.1.hum1 across various architectures. The advisory references several CVEs including CVE-2026-33818 and others. The update is classified as a security fix with high severity. No detailed technical information or exploitation details are provided in the advisory.

A medium severity heap out-of-bounds read vulnerability (CVE-2026-2303) was found in the GSSAPI error handling of the go.mongodb.org mongo-driver dependency used by Apptainer. The vulnerability is addressed by removing this dependency in a security update for the alloy component. The update also adds support for building the SUID starter on SLES 15. A patch is available for affected versions.

Red Hat Quay versions prior to 3.9.26 contain multiple security vulnerabilities affecting the logging subsystem for Red Hat OpenShift and related components. These issues are addressed in the Red Hat Quay 3.9.26 update. The advisory emphasizes the importance of applying this update to remediate the vulnerabilities.

Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the container images for Red Hat OpenShift Container Platform 4.18.55. See the following advisory for the RPM packages for this release: https://access.redhat.com/errata/RHSA-2026:66385 Space precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes: https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/

Red Hat Advanced Cluster Management for Kubernetes has a security advisory addressing multiple vulnerabilities including CVE-2026-41178. This update includes new features, bug fixes, and updated container images to improve security and functionality. The advisory highlights fixes for issues such as image override regressions and other security concerns. The update is rated as important by Red Hat Product Security and affects specific versions of the product. A patch is available to remediate these vulnerabilities.

Red Hat multicluster global hub is a set of components that enable you to import one or more hub clusters and manage them from a single hub cluster.

yggdrasil-worker-package-manager is a simple package manager yggd worker. It knows how to install and remove packages, add, remove, enable and disable repositories, and does rudimentary detection of the host it is running on to guess the package manager to use. It only installs packages that match one of the provided allow-pattern regular expressions. Security Fix(es): * golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root (CVE-2026-32282) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Red Hat issued a security advisory for Multicluster Global Hub 1.8.2 addressing a high severity vulnerability identified as CVE-2026-17106. The vulnerability affects the component that manages multiple hub clusters from a single hub cluster. The advisory also includes updates to Red Hat Hardened Images RPMs, specifically podman packages. A fix is available in updated packages including podman-6.0.2-2.2.hum1. No CVSS score is provided. The advisory provides instructions for applying the update.