Red Hat OpenShift 5 reaches general availability for hybrid clouds
The release adds Lightspeed agent troubleshooting, post-quantum control-plane cryptography and a five-year lifecycle.
Stories per day · 30 days
2 RSS
Relatedrhel4openshift3ansible2apache-kafka1canada1cve-2026-799921emacs1hybrid-cloud1incomplete-fix1keycloak1kubernetes1linux-kernel1mptcp1oss-security1php1post-quantum1streamshub1tcp1
21 stories, newest first · one card per story
Stories tagged #red-hat
Red Hat products listed as vulnerable in advisory AV26-1136
The November 9 notice covers many Red Hat products, mostly all versions, and tells admins to apply updates.
Linux TCP use-after-free scored 9.8; Ubuntu and RHEL unfixed
Anthropic says Claude built a remote root exploit via MPTCP, a link absent from the CVE and fix.
6
Red Hat lists RHEL and Kafka products in advisory AV26-1084
The October 26 notice names affected lines but gives no CVE identifiers, impact, or fixed RHEL versions.
Red Hat says default RHEL 7 PHP 5.4.16 is vulnerable to CVE-2026-109619
An October 23 note says updated RHSB-2026-013 and VEX data reverse an earlier PHP 5 risk claim.
Canadian Cyber Centre flags vulnerabilities across many Red Hat products
Advisory AV26-1061 lists every named product as affected in all versions and states no CVEs.
Re: Incomplete fix for Emacs CVE-2026-79992
Maintainers say the Emacs fix for CVE-2026-79992 is incomplete and request another CVE.
Lightwell project filters out 400 Java library vulnerabilities
IBM and Red Hat's Lightwell says it found more than 400 new vulnerabilities in widely used Java libraries.
Java library vulnerabilities: IBM and Red Hat fix 400+ previously unknown flaws
IBM and Red Hat say Lightwell fixed more than 400 previously unknown Java library flaws without naming them.
4
Critical Red Hat Satellite Flaw Could Enable Root Password Theft and Code Execution Attacks
Red Hat fixed Satellite flaw CVE-2026-96659, which can leak host root passwords and enable Foreman command execution.
Sudo Vulnerability Lets Attackers Bypass Time-Based Authorization Controls
CVE-2026-96512 lets local users skew Sudo time-based authorization windows via the TZ variable.
5
Re: Emacs arbitrary code execution: incomplete fix for CVE-2024-53920
Bas Alberts asks Red Hat to assign a CVE for an incomplete Emacs fix of CVE-2024-53920.
Red Hat OpenShift Flaw Lets Attackers Bypass PGP Checks and Push Malicious Releases
Red Hat OpenShift oc-mirror can accept forged PGP signatures, letting attackers mirror malicious release images into disconnected registries.
Red Hat OpenShift Flaw Lets Attackers Poison Disconnected Registries With Malicious Releases
OpenShift oc-mirror flaw CVE-2026-75939 can bypass release signature checks and poison disconnected registries.
CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild
CISA added three actively exploited Linux kernel flaws (CVE-2025-39682, CVE-2026-53266, CVE-2025-39964) to KEV; federal patch deadline September 21, 2026.
1
Re: bubblewrap 0.12.0 fixes writes outside sandbox
Red Hat Product Security allocated CVE-2026-87766 for a bubblewrap flaw fixed in 0.12.0 that allowed writes outside the sandbox.
FreeIPA Flaw Chain Lets Anonymous Clients Create Reusable Administrator Credentials
Critical FreeIPA flaw chain (CVE-2026-76578, CVSS 9.8) lets anonymous clients create reusable admin credentials on default installs; fixed in 4.13.4.
U.S. CISA adds Red Hat, Linux Kernel, Ajax.NET Professional, Microsoft SQL Server, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog
CISA added six flaws, including actively exploited CVE-2026-8452 in Citrix NetScaler, to its Known Exploited Vulnerabilities catalog with federal patch deadlines.
2
CISA Warns of Six Exploited Flaws in Microsoft, Linux, Red Hat and Citrix Products
CISA added six actively exploited vulnerabilities in Microsoft, Linux, Red Hat and Citrix products to its KEV catalog on August 26.
2
CISA Adds Six Exploited Flaws to KEV, Including NetScaler, Linux, and SQL Server Bugs
CISA added six actively exploited flaws to KEV, led by Citrix NetScaler CVE-2026-8452, with federal patch deadlines set.
Critical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any Account
Red Hat patched critical Keycloak flaw CVE-2026-18963 (CVSS 9.1) allowing unauthenticated attackers to take over any account, including administrative ones.
5