Low [CVE-2026-87056] No automated dependency-update configuration for submodules or Containerfile
This low-severity Red Hat Linux advisory covers CVE-2026-87056.
Android app · Google Play
Monitor future Red Hat Linux CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Summary
No automated dependency-update configuration for submodules or Containerfile. Red Hat rates this low (CVSS 2.6).
Weakness: CWE-1104.
Affected versions
No affected-version range was extracted from the source record. The vendor advisory is authoritative — check it before change work.
Official advisory · high-confidence parse· fetched 8 hours ago·verify at source
Fixed versions
No fixed release is recorded yet. That does not prove no patch exists — confirm against the vendor advisory.
Official advisory · high-confidence parse· fetched 8 hours ago·verify at source
Mitigation checklist
- To mitigate the risk of stale or vulnerable dependencies, configure automated dependency updates for the `operator-sdk-builder` component. This can be achieved by adding a `renovate.json` file or enabling Konflux MintMaker rules to cover `git-submodules`, `dockerfile`, and `tekton` managers. Implementing these configurations will ensure that submodule SHAs and base-image digests receive automated update pull requests, proactively addressing potential future vulnerabilities.
Official advisory · high-confidence parse· fetched 8 hours ago·verify at source
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.