7.4
Élevée
CVE-2026-32589 A flaw was found in Red Hat Quay's container image upload process
Description
A flaw was found in Red Hat Quay's container image upload process. An authenticated user with push access to any repository on the registry can interfere with image uploads in progress by other users, including those in repositories they do not have access to. This could allow the attacker to read, modify, or cancel another user's in-progress image upload.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| mirror registry for Red Hat OpenShift | Versions non publiées | |
| mirror registry for Red Hat OpenShift 2 | Versions non publiées | |
| Red Hat Quay 3 | Versions non publiées | |
| Red Hat Quay 3.16 1779204086 | premières → < 1779204086 | 1779204086 |
| Red Hat Quay 3.14 1779689392 | premières → < 1779689392 | 1779689392 |
| Red Hat Quay 3.17 1779922205 | premières → < 1779922205 | 1779922205 |
| Red Hat Quay 3.12 1779811412 | premières → < 1779811412 | 1779811412 |
| Red Hat Quay 3.1 1779822261 | premières → < 1779822261 | 1779822261 |
| Red Hat Quay 3.9 1779811473 | premières → < 1779811473 | 1779811473 |
Afficher les 3 autres branches Masquer les 3 autres branches
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Red Hat Quay 3.15 1780891395 | premières → < 1780891395 | 1780891395 |
| mirror registry for Red Hat OpenShift 2.0 1782177012 | premières → < 1782177012 | 1782177012 |
| Red Hat Quay 3.10 1779822261 | premières → < 1779822261 | 1779822261 |
Références
- RHSA-2026:19375 access.redhat.com
- RHSA-2026:21017 access.redhat.com
- RHSA-2026:22465 access.redhat.com
- RHSA-2026:22629 access.redhat.com
- RHSA-2026:22840 access.redhat.com
- RHSA-2026:23361 access.redhat.com
- RHSA-2026:24853 access.redhat.com
- RHSA-2026:28441 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2446963 bugzilla.redhat.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de mirror registry for Red Hat OpenShift
Les 20 CVE de mirror registry for Red Hat OpenShift →
CVE-2026-85471
A flaw was found in Quay
6.4
Moyenne
CVE-2026-33811
When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a…
7.5
Élevée
CVE-2026-32591
A flaw was found in Red Hat Quay's Proxy Cache configuration feature
5.2
Moyenne
CVE-2026-32590
A flaw was found in Red Hat Quay's handling of resumable container image layer uploads
7.1
Élevée