Important: Red Hat Build of Apache Camel 4.18.4 for Spring Boot release.

Important: python-cryptography security update

Important: python-cryptography security update

Important: kernel-rt security update

Important: acl security update

Red Hat Hardened Images RPMs Security Update

Important: firefox security update

Important: gstreamer1-plugins-good security update

Important: kernel security update

Important: gstreamer1-plugins-good security update

Important: libxml2 security update

Red Hat Hardened Images RPMs Security Update

Important: host-metering security update

Critical: unbound security update

Critical: unbound security update

Red Hat Hardened Images RPMs Security Update

Important: perl-DBI security update

An authorization bypass was found in the Ansible Automation Platform (AAP) gateway. The gateway API allows an authenticated administrator to create a new service key for the Controller service cluster. Because service-key creation is not restricted to the installer-provisioned provisioning path, an administrator-issued key is cryptographically indistinguishable from a legitimate one and can be used to forge a service-authentication token that impersonates the Controller service. Combined with the gateway OIDC workload-identity endpoint (enabled via FEATUREOIDCWORKLOADIDENTITYENABLED), the attacker can drive the gateway to sign Workload Identity Tokens (WITs) for arbitrary Controller workloads. A downstream resource server such as HashiCorp Vault that trusts the gateway OIDC key will accept the forged WIT and return the AAP credentials bound to that workload, disclosing secrets beyond the attacker's authorization boundary.

Important: kernel-rt security update

Important: kernel security update

Important: kernel security update

A flaw was found in the Admin REST API of Keycloak, an identity and access management solution. The endpoints used to retrieve groups associated with a specific role do not properly check for individual group visibility permissions. This allows a delegated administrator with basic search privileges to view detailed information about all groups assigned to a role, bypassing intended security restrictions that should limit their view to specific groups.

Important: kernel security update

Important: kernel security update

Moderate: OpenShift Container Platform 4.14.74 bug fix and security update

Important: tesseract security update

Important: OpenShift Container Platform 4.16.71 bug fix and security update

Important: tesseract security update

Important: kernel security update

Important: cockpit-image-builder security update