Threats Tagged 'cve-2026-67214'

This update includes the following RPMs: nodejs24: * nodejs24-24.18.1-0.1.hum1 (aarch64, x86_64) * nodejs24-bin-24.18.1-0.1.hum1 (noarch) * nodejs24-devel-24.18.1-0.1.hum1 (aarch64, x86_64) * nodejs24-docs-24.18.1-0.1.hum1 (noarch) * nodejs24-full-i18n-24.18.1-0.1.hum1 (aarch64, x86_64) * nodejs24-libs-24.18.1-0.1.hum1 (aarch64, x86_64) * nodejs24-npm-11.16.0-1.24.18.1.0.1.hum1 (noarch) * nodejs24-npm-bin-24.18.1-0.1.hum1 (noarch) * v8-13.6-devel-13.6.233.17-1.24.18.1.0.1.hum1 (aarch64, x86_64) * nodejs24-24.18.1-0.1.hum1.src (src)

Red Hat Quay versions prior to 3.9.26 contain multiple security vulnerabilities addressed in the Red Hat Quay 3.9.26 update. These vulnerabilities affect the logging subsystem for Red Hat OpenShift and related components. The advisory highlights the availability of an important security update to fix these issues.

Red Hat Ansible Automation Platform 2.6 has multiple critical security vulnerabilities affecting its automation-controller, automation-gateway-proxy, and automation-platform-ui components. These include remote code execution, privilege escalation, information disclosure, denial of service, cross-site scripting, and unauthorized access issues. The vulnerabilities impact the ability to execute arbitrary code, escalate privileges, disclose sensitive credentials, and disrupt service availability. Red Hat has released a security update addressing these issues for Ansible Automation Platform 2.6 on RHEL 9 and RHEL 10.

Red Hat Developer Hub (RHDH) versions prior to 1.9.9 contain a security vulnerability identified as CVE-2026-19534. This vulnerability affects the enterprise-grade, self-managed developer portal based on Backstage.io, supported on Kubernetes platforms including OpenShift. Red Hat has released version 1.9.9 which addresses this and other issues. No CVSS score is provided for this vulnerability, but it is classified as high severity by the source.

A security advisory from Red Hat addresses vulnerabilities in Red Hat Hardened Images RPMs, including the Ansible Automation Platform components. The update includes fixes for the jaeger package version 2.20.0-0.6.hum1 for aarch64 and x86_64 architectures. This advisory relates to CVE-2026-67213 and indicates a high severity level. The update is available and should be applied to affected systems to mitigate the vulnerabilities.

Red Hat Ansible Automation Platform 2.1 and 2.2 include Ansible plug-ins for Red Hat Developer Hub that enhance the automation experience. A security advisory (RHSA-2026:65118) was issued describing updates to these plug-ins. The advisory lists multiple CVEs including CVE-2026-5079 but does not provide specific details or fixes for these vulnerabilities. The advisory states updated images are available with new features and bug fixes but does not explicitly confirm patches for the listed CVEs.

Red Hat Quay versions from 3.15.0 up to but not including 3.15.8 contain multiple security vulnerabilities including CVE-2026-15927. Red Hat has released Quay 3.15.8 to address these issues. The vulnerabilities are rated as high severity. No known exploits are reported in the wild. Users should apply the official update to remediate these vulnerabilities.

Red Hat Discovery, also known as Discovery, is an inspection and reporting tool that finds, identifies, and reports environment data, or facts, such as the number of physical and virtual systems on a network, their operating systems, and relevant configuration data stored within them. Discovery also identifies and reports more detailed facts for some versions of key Red Hat packages and products that it finds in the network.

Red Hat Discovery, also known as Discovery, is an inspection and reporting tool that finds, identifies, and reports environment data, or facts, such as the number of physical and virtual systems on a network, their operating systems, and relevant configuration data stored within them. Discovery also identifies and reports more detailed facts for some versions of key Red Hat packages and products that it finds in the network.

Red Hat Advanced Cluster Management for Kubernetes version 2.13.11 includes a security update addressing multiple vulnerabilities. This update provides new features, enhancements, bug fixes, and updated container images. The advisory rates the security impact as Important. No specific CVSS scores are provided for the vulnerabilities. The update is intended to improve security and stability for administrators managing Kubernetes clusters across cloud environments.