Red Hat Multicluster Engine for Kubernetes.

Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers

• Red Hat Confidential Compute Attestation
• Red Hat DPU kit for NVIDIA
• Denial of service

Maestro: maestro: grpc broker has no auth interceptor and client mtls is optional

• Red Hat Multicluster Engine for Kubernetes
• Authentication bypass

Maestro: maestro: rest api write endpoints registered without authentication middleware

• Red Hat Multicluster Engine for Kubernetes
• Authentication bypass

Maestro: sql identifier injection via properties.* search filter and orderby field

• Red Hat Multicluster Engine for Kubernetes
• SQL injection

Hypershift: hypershift: unsanitized kubeconfig passthrough from tenant namespace to control plane

• Red Hat Multicluster Engine for Kubernetes
• CWE-20

Managed-serviceaccount: managed-serviceaccount: hub addon-manager clusterrole grants cluster-wide secret read/write and csr approval

• Red Hat Multicluster Engine for Kubernetes
• Red Hat Advanced Cluster Management for Kubernetes 2
• Privilege escalation

Hypershift: konnectivity proxy-server accepts agent connections without validating client certificates

• Red Hat multicluster engine for Kubernetes 2.1
• Red Hat multicluster engine for Kubernetes 2.11
• Authentication bypass

Networkmanager: networkmanager: local privilege escalation via malformed mud urls in dhclient backend

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
• Command injection

Assisted-service: assisted-service: infraenv status leaks referenced pull-secret contents to namespace view users

• Red Hat Multicluster Engine for Kubernetes
• Information disclosure

Mce: privilege escalation via excessive /etc/passwd permissions

• Red Hat Multicluster Engine for Kubernetes
• Broken access control