SUSE-SU-2026:0571-1 Security update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer

This update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer fixes the following issues: Update to version 1.64.0 - Release notes...

IBM MQ 安全漏洞

IBM MQ is a messaging middleware product from International Business Machines IBM. The product focuses on providing a reliable, proven messaging backbone for Service Oriented Architecture SOA. IBM-supplied MQ Advanced container images are standard container images officially provided by IBM,...

PT-2026-20223

IBM MQ Operator SC2 v3.2.0–3.8.1, LTS v2.0.0–2.0.29 and IBM‑supplied MQ Advanced container images across affected SC2, CD, and LTS 9.3.x–9.4.x releases contain a vulnerability where log messages are not properly neutralized before being written to log files. This flaw could allow an unauthorized...

PT-2026-23548

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.2.2 Description The software contains an authorization bypass issue where clients with operator.write scope can approve or deny exec approval requests by sending the /approve chat command. The /approve command...

PT-2026-20338

Name of the Vulnerable Software and Affected Versions emp3r0r versions prior to 3.21.2 Description The software accesses multiple shared maps without consistent synchronization across goroutines. Concurrent activity can trigger a fatal error: concurrent map read and map write, leading to a C2...

GHSA-33MH-2634-FWR2 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, cinc-auditor, kube-fluentd-operator, logstash...

CVE-2026-25765 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, cinc-auditor, kube-fluentd-operator, logstash...

GHSA-33MH-2634-FWR2 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, cinc-auditor, kube-fluentd-operator, gitlab-rails-ce, gitlab-rails-ce-fips, logstash, gitlab-cng...

CVE-2026-25765 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, cinc-auditor, kube-fluentd-operator, gitlab-rails-ce, gitlab-rails-ce-fips, logstash, gitlab-cng...

GHSA-W4GW-W5JQ-G9JH vulnerabilities

Vulnerabilities for packages: k3s, aws-load-balancer-controller, etcd-fips, terraform, runc, cilium-envoy-fips, gitlab-rails-ce, fuse-overlayfs-snapshotter, rke2-runtime, etcd, rke2-runtime-fips, gitness, cilium-envoy, gendesk, backup-restore-operator, k8s-device-plugin,...

CLEANSTART-2026-TR92727 During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succ...

Multiple security vulnerabilities affect the prometheus-operator-fips package. During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should ha...

CLEANSTART-2026-CA79883 Security fixes for GHSA-6V2P-P943-PHR9, GHSA-C6GW-W398-HV78, GHSA-F6X5-JH6R-WRFV, GHSA-HCG3-P754-CR77, GHSA-J5W8-Q4QC-RX2X, GHSA-QXP5-GW88-XV66, GHSA-V778-237X-GJRC, GHSA-VVGC-356P-C3XW applied in versions: 1.15.0-r1

Multiple security vulnerabilities affect the rabbitmq-messaging-topology-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

Arbitrary Command Injection

Overview Affected versions of this package are vulnerable to Arbitrary Command Injection via the interpolation of untrusted agent metadata into tmux shell command strings executed through /bin/sh -c. An attacker can execute arbitrary commands on the operator host by supplying crafted metadata...

CVE-2026-2360

CVE-2026-2360 affects PostgreSQL Anonymizer. A vulnerability lets a user gain superuser privileges by creating a custom operator in the public schema, placing malicious code there, which is executed with superuser rights when the extension is created. Risk is higher on PostgreSQL 14 or when upgra...

CVE-2026-2360 Improper search_path protection in PostgreSQL Anonymizer 2.5 allows any user to gain superuser privileges in PostgreSQL 14

PostgreSQL Anonymizer contains a vulnerability that allows a user to gain superuser privileges by creating a custom operator in the public schema and place malicious code in that operator. This operator will later be executed with superuser privileges when the extension is created. The risk is...

CVE-2026-2360

PostgreSQL Anonymizer contains a vulnerability that allows a user to gain superuser privileges by creating a custom operator in the public schema and place malicious code in that operator. This operator will later be executed with superuser privileges when the extension is created. The risk is...

PT-2026-7633

Name of the Vulnerable Software and Affected Versions PostgreSQL Anonymizer versions prior to 3.0.1 Description The software contains a flaw that could allow a user to obtain superuser privileges. This is achieved by creating a custom operator within the public schema and embedding malicious code...

GHSA-37CX-329C-33X3 vulnerabilities

Vulnerabilities for packages: k9s, tfsec, teleport, argocd-image-updater, argo-cd, crossplane, gitea, pulumi, kots, goreleaser, scorecard, guac, osv-scanner, cerbos, argo-workflows, zarf, chezmoi, gptscript, argo-events, pulumi-language-dotnet, snyk-cli, pulumi-language-java, rancher-fleet,...

CVE-2026-25934 vulnerabilities

Vulnerabilities for packages: k9s, tfsec, teleport, argocd-image-updater, argo-cd, crossplane, gitea, pulumi, kots, goreleaser, scorecard, guac, osv-scanner, cerbos, argo-workflows, zarf, chezmoi, gptscript, argo-events, pulumi-language-dotnet, snyk-cli, pulumi-language-java, rancher-fleet,...

Important: Red Hat Security Advisory: DevWorkspace Operator 0.39.0 release.

DevWorkspace Operator 0.39.0 has been released. The DevWorkspace Operator extends OpenShift to provide DevWorkspace support...