https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 22:32:00 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-16460 <p>A flaw was found in bootc and ostree. Already-staged deployments are finalized without revalidating the deployment&#39;s container image against the current containers signature policy. Unsigned OS content staged under a prior permissive policy can remain bootable after policy is hardened to reject unsigned images, leading to full host compromise on reboot.</p> <p>A flaw was found in bootc and ostree. Already-staged deployments are finalized without revalidating the deployment&#39;s container image against the current containers signature policy. Unsigned OS content staged under a prior permissive policy can remain bootable after policy is hardened to reject unsigned images, leading to full host compromise on reboot.</p> https://db.gcve.eu/vuln/fkie_cve-2026-16460 https://db.gcve.eu/vuln/ghsa-72gj-m9xp-j6qc <p>A flaw was found in bootc and ostree. Already-staged deployments are finalized without revalidating the deployment&#39;s container image against the current containers signature policy. Unsigned OS content staged under a prior permissive policy can remain bootable after policy is hardened to reject unsigned images, leading to full host compromise on reboot.</p> <p>A flaw was found in bootc and ostree. Already-staged deployments are finalized without revalidating the deployment&#39;s container image against the current containers signature policy. Unsigned OS content staged under a prior permissive policy can remain bootable after policy is hardened to reject unsigned images, leading to full host compromise on reboot.</p> https://db.gcve.eu/vuln/ghsa-72gj-m9xp-j6qc