Threats Tagged 'cve-2026-75931'

This update includes the following RPMs: nodejs24: * nodejs24-24.18.1-0.1.hum1 (aarch64, x86_64) * nodejs24-bin-24.18.1-0.1.hum1 (noarch) * nodejs24-devel-24.18.1-0.1.hum1 (aarch64, x86_64) * nodejs24-docs-24.18.1-0.1.hum1 (noarch) * nodejs24-full-i18n-24.18.1-0.1.hum1 (aarch64, x86_64) * nodejs24-libs-24.18.1-0.1.hum1 (aarch64, x86_64) * nodejs24-npm-11.16.0-1.24.18.1.0.1.hum1 (noarch) * nodejs24-npm-bin-24.18.1-0.1.hum1 (noarch) * v8-13.6-devel-13.6.233.17-1.24.18.1.0.1.hum1 (aarch64, x86_64) * nodejs24-24.18.1-0.1.hum1.src (src)

A security advisory from Red Hat addresses vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes and related products, including the Migration Toolkit for Applications. The advisory highlights a high-severity vulnerability identified as CVE-2026-41178 among others. The vulnerabilities affect multiple versions of Red Hat products and components related to Kubernetes management and application migration. A patch is available to address these issues.

A security advisory from Red Hat addresses vulnerabilities including CVE-2026-75899 affecting Red Hat Hardened Images RPMs, specifically related to the satellite/iop-vulnerability-frontend-rhel9 container image. The advisory updates packages such as grafana13.2 to fix these issues. Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to local data. The vulnerabilities are rated as high severity. No known exploits are reported in the wild at this time.

Red Hat Satellite 6.16.14 and related versions contain multiple critical security vulnerabilities including command injection, unauthenticated information disclosure, server-side template injection, SQL injection, denial of service, cross-site scripting, and authorization bypass. These vulnerabilities affect various components such as rubygem-foreman_remote_execution, foreman, rubygem-hammer_cli, python3.12-dynaconf, yggdrasil-worker-forwarder, nodejs-sanitize-html, python-sqlparse, rubygem-katello, and others. The vulnerabilities allow for potential arbitrary code execution, denial of service, information disclosure, and privilege escalation. Red Hat has released security updates addressing these issues in Red Hat Satellite 6.19.5 for RHEL 9 and other related versions.

Red Hat Advanced Cluster Management for Kubernetes has a security advisory addressing multiple vulnerabilities including CVE-2026-41178. This update includes new features, bug fixes, and updated container images to improve security and functionality. The advisory highlights fixes for issues such as image override regressions and other security concerns. The update is rated as important by Red Hat Product Security and affects specific versions of the product. A patch is available to remediate these vulnerabilities.

The multicluster engine for Kubernetes provides the foundational components that are necessary for the centralized management of multiple Kubernetes-based clusters across data centers, public clouds, and private clouds. You can use the engine to create new Red Hat OpenShift Container Platform clusters or to bring existing Kubernetes-based clusters under management by importing them. After the clusters are managed, you can use the APIs that are provided by the engine to distribute configuration based on placement policy.

Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams, while automation developers retain the freedom to write tasks that leverage existing knowledge without the overhead. Ansible Automation Platform makes it possible for users across an organization to share, vet, and manage automation content by means of a simple, powerful, and agentless language. For details about this release, refer to the release notes listed in the References section.

Red Hat has released a new container image for the satellite/iop-host-inventory-frontend-rhel9 component used in Red Hat Satellite. This component is part of Red Hat Lightspeed in Satellite, which analyzes system health and configuration locally without sending data to Red Hat services. Multiple CVEs including CVE-2026-59879 are associated with this advisory. A patch is available for affected versions, and users are advised to update accordingly.

Red Hat Developer Hub (RHDH) versions prior to 1.9.9 contain a security vulnerability identified as CVE-2026-19534. This vulnerability affects the enterprise-grade, self-managed developer portal based on Backstage.io, supported on Kubernetes platforms including OpenShift. Red Hat has released version 1.9.9 which addresses this and other issues. No CVSS score is provided for this vulnerability, but it is classified as high severity by the source.

OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform. This advisory contains OpenShift Virtualization v4.22 images.