Amazon Linux 2023 : iscsi-initiator-utils, iscsi-initiator-utils-devel, iscsi-initiator-utils-iscsiuio (ALAS2023-2026-2066)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2066 advisory. An Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in open- iscsi allows remote MITM attackers to create root-owned files outside the database and...

Amazon Linux 2023 : freerdp, freerdp-devel, freerdp-libs (ALAS2023-2026-2053)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2053 advisory. FreeRDP before 3.28.0 affected outlength, so out-of-bounds bytes are written before the bounds check. On the server side, when a client selects RDP Standard Security, the encrypted client rand...

Amazon Linux 2023 : libssh2, libssh2-devel (ALAS2023-2026-2056)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2056 advisory. libssh2 through 1.11.1, fixed in commit 5e47761, contains a double-free vulnerability in the sftpopen function in src/sftp.c that allows a malicious SSH server to corrupt the heap of any...

Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2026-2058)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2058 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSv4/flexfiles: reject zero filehandle version count CVE-2026-53392 In the Linux kernel, the following vulnerability has be...

Important: docker

Issue Overview: A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Affected Packages: docker Issue Correction: Run dnf update docker --releasever 2023.12.20260817 or dnf update --advisory ALAS2023-2026-2062 --releasever 2023.12.20260817 to...

Important: javapackages-bootstrap

Issue Overview: Uncontrolled Resource Consumption vulnerability in the HTTP/1.1 message parser in Apache HttpComponents Core 5.4.2 and earlier, 5.5-beta1 and earlier allows an remote attacker to cause a denial of service through memory exhaustion by sending messages with excessive number of heade...

Important: gnome-remote-desktop

Issue Overview: A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. When the daemon is running in system mode with RDP enabled, the incoming connection handler bypasses the connection throttler, allowing an unauthenticated remote attacker to open many parallel...

openSUSE 16 Security Update : amazon-ecs-init (openSUSE-SU-2026:21574-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21574-1 advisory. This update for amazon-ecs-init fixes the following issue: Update to version 1.106.0. Security issues fixed: - CVE-2026-10722: github.com/cilium/ebpf:...

GO-2026-4405 vulnerabilities

Vulnerabilities for packages: amazon-ssm-agent, cg, chainctl, dagdotdev...

GO-2026-5422 vulnerabilities

Vulnerabilities for packages: dagdotdev, amazon-ssm-agent-fips...

GO-2026-5497 vulnerabilities

Vulnerabilities for packages: dagdotdev, amazon-ssm-agent-fips...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: temporal-fips, localstack, metacontroller, flux-source-controller, aws-ebs-csi-driver, go, flux-image-automation-controller, grafana-fips, terragrunt, omnictl-multiarch, flux-operator, gotenberg, aws-ebs-csi-driver-fips, flux-notification-controller,...

GO-2026-4406 vulnerabilities

Vulnerabilities for packages: amazon-ssm-agent, cg, chainctl, dagdotdev...

GO-2024-3311 vulnerabilities

Vulnerabilities for packages: prometheus, promxy-fips, amazon-cloudwatch-agent-operator, pulumi, vault, amazon-cloudwatch-agent-operator-fips, promxy...

GO-2025-4123 vulnerabilities

Vulnerabilities for packages: jitsucom-bulker, sqlexporter, grafana-alloy, bento, opentelemetry-collector-contrib, amazon-cloudwatch-agent, cluster-api-aws-controller, argo-events, splunk-otel-collector...

GO-2024-3311 vulnerabilities

Vulnerabilities for packages: promxy, amazon-cloudwatch-agent-operator, pulumi...

GO-2024-3305 vulnerabilities

Vulnerabilities for packages: promxy, pulumi, kubevela, amazon-cloudwatch-agent-operator, rancher-agent...

GO-2025-3525 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector, grafana-alloy, opentelemetry-collector-contrib, amazon-cloudwatch-agent, argo-workflows, nats, kubeflow-pipelines, argo-rollouts, kargo, splunk-otel-collector, k8sgpt...

GO-2026-5264 vulnerabilities

Vulnerabilities for packages: minio, prometheus-operator, node-problem-detector, datadog-agent, istio, mc, certificate-transparency, prometheus, keda, grafana, jaeger, prometheus-pushgateway, opentelemetry-collector, tempo, trillian, karma, aws-otel-collector, fluent-bit-plugin-loki,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: cloud-provider-gcp-cloud-controller-manager, cluster-api-azure-controller, kind, kubernetes-dashboard-web, terraform, nri-redis, rabbitmq-default-user-credential-updater, cis-operator, polaris, dex, delve, regclient, aws-application-networking-k8s, zot, ip-masq-agent...