https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T18:41:48.374328+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-07552 bdu:2026-07552 2026-10-02T18:41:48.563276+00:00 bdu:2026-07552 https://cve.radiocsirt.org/vuln/bit-distribution-2026-35172 BIT-distribution-2026-35172 — Distribution has stale blob access resurrection via repo-scoped redis descriptor cache invalidation 2026-10-02T18:41:48.563323+00:00

Affected: Bitnami: distribution

Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.0, distribution can restore read access in repo a after an explicit delete when storage.cache.blobdescriptor: redis and storage.delete.enabled: true are both enabled. The delete path clears the shared digest descriptor but leaves stale repo-scoped membership behind, so a later Stat or Get from repo b repopulates the shared descriptor and makes the deleted blob readable from repo a again. This vulnerability is fixed in 3.1.0.

 https://cve.radiocsirt.org/vuln/cleanstart-2026-ac01087 Withdrawn: CLEANSTART-2026-AC01087 — During chain building, the amount of work that is done is not correctly limited when a large number of intermediate cer… 2026-10-02T18:41:48.563359+00:00

Withdrawn by the publisher.

Affected: CleanStart: gitness

Multiple security vulnerabilities affect the gitness package. During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-365487 EUVD-2026-365487 2026-10-02T18:41:48.563382+00:00 EUVD-2026-365487 https://cve.radiocsirt.org/vuln/fkie_cve-2026-35172 fkie_cve-2026-35172 2026-10-02T18:41:48.563395+00:00

Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.0, distribution can restore read access in repo a after an explicit delete when storage.cache.blobdescriptor: redis and storage.delete.enabled: true are both enabled. The delete path clears the shared digest descriptor but leaves stale repo-scoped membership behind, so a later Stat or Get from repo b repopulates the shared descriptor and makes the deleted blob readable from repo a again. This vulnerability is fixed in 3.1.0.

 https://cve.radiocsirt.org/vuln/ghsa-f2g3-hh2r-cwgc GHSA-f2g3-hh2r-cwgc — Distribution: stale blob access resurrection via repo-scoped redis descriptor cache invalidation 2026-10-02T18:41:48.563417+00:00

Affected: Go: github.com/distribution/distribution/v3, Go: github.com/distribution/distribution

## summary: distribution can restore read access in `repo a` after an explicit delete when `storage.cache.blobdescriptor: redis` and `storage.delete.enabled: true` are both enabled. the delete path clears the shared digest descriptor but leaves stale repo-scoped membership behind, so a later `Stat` or `Get` from `repo b` repopulates the shared descriptor and makes the deleted blob readable from `repo a` again.

## Severity

HIGH

justification: this is a repo-local authorization bypass after explicit delete, with concrete confidentiality impact and no requirement for write access after the delete event. CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N (7.5). CWE-284.

# affected version

- repository: https://github.com/distribution/distribution - commit: ab67ffa0bda3712991194841d0fde727464feeb9 - affected versions: \<= 3.0.x, \<= 2.8.x when redis blob descriptor cache and delete are both enabled - affected file: - https://github.com/distribution/distribution/blob/ab67ffa0bda3712991194841d0fde727464feeb9/registry/storage/cache/redis/redis.go#L212-L226 - related callsites: - https://github.com/distribution/distribution/blob/ab67ffa0bda3712991194841d0fde727464feeb9/registry/storage/cache/cachedblobdescriptorstore.go#L66-L76 - https://github.com/distribution/distribution/blob/ab67ffa0bda3712991194841d0fde727464feeb9/registry/storage/linkedblobstore.go#L218-L224 - https://github.com/distribution/distribution/blob/ab67ffa0bda3712991194841d0fde727464feeb9/registry/storage/link…

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10631-1 openSUSE-SU-2026:10631-1 — distribution-registry-3.1.0-1.1 on GA media 2026-10-02T18:41:48.563474+00:00

distribution-registry-3.1.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:23234 RHSA-2026:23234 — Red Hat Security Advisory: OpenShift Container Platform 4.15.65 bug fix and security update 2026-10-02T18:41:48.563494+00:00

google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation github.com/distribution/distribution: Distribution: Information disclosure via stale references after content deletion

 https://cve.radiocsirt.org/vuln/suse-su-2026:21560-1 SUSE-SU-2026:21560-1 — Security update for distribution 2026-10-02T18:41:48.563511+00:00

Security update for distribution

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-35172 UBUNTU-CVE-2026-35172 2026-10-02T18:41:48.563527+00:00

Affected: Ubuntu:Pro:16.04:LTS: docker-registry, Ubuntu:Pro:18.04:LTS: docker-registry, Ubuntu:20.04:LTS: docker-registry, Ubuntu:Pro:22.04:LTS: docker-registry, Ubuntu:24.04:LTS: docker-registry, Ubuntu:25.10: docker-registry, Ubuntu:Pro:26.04:LTS: docker-registry

Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.0, distribution can restore read access in repo a after an explicit delete when storage.cache.blobdescriptor: redis and storage.delete.enabled: true are both enabled. The delete path clears the shared digest descriptor but leaves stale repo-scoped membership behind, so a later Stat or Get from repo b repopulates the shared descriptor and makes the deleted blob readable from repo a again. This vulnerability is fixed in 3.1.0.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2072 WID-SEC-W-2026-2072 — Red Hat OpenShift: Mehrere Schwachstellen 2026-10-02T18:41:48.563557+00:00

Ein Angreifer kann mehrere Schwachstellen in Red Hat OpenShift ausnutzen, um beliebigen Programmcode auszuführen, und um Informationen offenzulegen.