Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 18:58:11 +0000 CVE-2026-16460 — Bootc: ostree: bootc/ostree: staged deployments not revalidated against container signature policy before finalization https://db.gcve.eu/vuln/cve-2026-16460 <p><strong>Affected:</strong> Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Hardened Images, Red Hat OpenShift Container Platform 4</p> <p>A flaw was found in bootc and ostree. Already-staged deployments are finalized without revalidating the deployment&#39;s container image against the current containers signature policy. Unsigned OS content staged under a prior permissive policy can remain bootable after policy is hardened to reject unsigned images, leading to full host compromise on reboot.</p> <p><strong>Affected:</strong> Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Hardened Images, Red Hat OpenShift Container Platform 4</p> <p>A flaw was found in bootc and ostree. Already-staged deployments are finalized without revalidating the deployment&#39;s container image against the current containers signature policy. Unsigned OS content staged under a prior permissive policy can remain bootable after policy is hardened to reject unsigned images, leading to full host compromise on reboot.</p> https://db.gcve.eu/vuln/cve-2026-16460