Moderate: Red Hat Security Advisory: resource-agents security update

An update for resource-agents is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

Moderate: Red Hat Security Advisory: fence-agents security update

An update for fence-agents is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common...

RLSA-2026:49927 Moderate: fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fixes: urllib3: urllib3: Information disclosure via cross-origin redirects...

resource-agents security update

4.9.0-54.36 - bundled urllib3: fix CVE-2026-44431 Resolves: RHEL-178598...

Oracle Linux 8 : fence-agents (ELSA-2026-49927)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-49927 advisory. 4.2.1-129.28 - bundled urllib3: fix CVE-2026-44431 Resolves: RHEL-178594 Tenable has extracted the preceding description block directly from the Oracle Linux...

Security Bulletin:Cross-Origin Redirect Headers Vulnerability in urllib3 Prior to 2.7.0

Summary urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level API via ProxyManager.connectionfromurl.urlopen..., assertsamehost=False still forward these sensitive headers. This vulnerability is fixed in 2.7.0. Vulnerability...

Security Bulletin: IBM Edge Data Collector uses multiple dependencies which are vulnerable to multiple CVEs.

Summary IBM Edge Data Collector uses pillow-12.2.0-cp314-cp314-manylinux227x8664.manylinux228x8664.whl, immutable-4.3.8.tgz, urllib3-2.6.3-py3-none-any.whl, form-data-4.0.5.tgz, pyjwt-2.12.1-py3-none-any.whl which are vulnerable to CVE-2026-54059, CVE-2026-54060, CVE-2026-55379, CVE-2026-55380,...

CLEANSTART-2026-RQ52450 Security fixes in k8s-sidecar 2.6.0-r0

Package k8s-sidecar version 2.6.0-r0 fixes 10 vulnerabilities: CVE-2026-44431, CVE-2026-44432, ghsa-mf9v-mfxr-j63j, ghsa-qccp-gfcp-xxvc, CVE-2026-3219...

CLEANSTART-2026-KS40314 Security fixes in k8s-sidecar 1.25.2-r1

Package k8s-sidecar version 1.25.2-r1 fixes 12 vulnerabilities: CVE-2026-44431, CVE-2026-44432, ghsa-mf9v-mfxr-j63j, ghsa-qccp-gfcp-xxvc, CVE-2026-3219...

CLEANSTART-2026-BC05591 Security fixes in k8s-sidecar 2.4.0-r0

Package k8s-sidecar version 2.4.0-r0 fixes 10 vulnerabilities: CVE-2026-44431, CVE-2026-44432, ghsa-mf9v-mfxr-j63j, ghsa-qccp-gfcp-xxvc, CVE-2026-3219...

CLEANSTART-2026-IK62257 Security fixes in miniforge3 25.11.0.1-r1

Package miniforge3 version 25.11.0.1-r1 fixes 6 vulnerabilities: ghsa-mf9v-mfxr-j63j, ghsa-qccp-gfcp-xxvc, CVE-2026-44431, CVE-2026-44432, ghsa-jp4c-xjxw-mgf9...

CLEANSTART-2026-BK16122 Security fixes in jupyterhub-k8s-hub 4.3.3-r0

Package jupyterhub-k8s-hub version 4.3.3-r0 fixes 2 vulnerabilities: CVE-2026-44432, CVE-2026-44431...

CLEANSTART-2026-SC87032 Security fixes in k8s-sidecar 2.5.4-1

Package k8s-sidecar version 2.5.4-1 fixes 4 vulnerabilities: CVE-2026-39892, CVE-2026-45409, CVE-2026-44431, CVE-2026-44432...

CLEANSTART-2026-JW02028 Security fixes in az 2.84.0-r2

Package az version 2.84.0-r2 fixes 4 vulnerabilities: CVE-2026-44432, CVE-2026-44431, CVE-2026-39892, CVE-2026-45409...

Oracle Linux 8 : resource-agents (ELSA-2026-47126)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-47126 advisory. 4.9.0-54.36 - bundled urllib3: fix CVE-2026-44431 Resolves: RHEL-178598 Tenable has extracted the preceding description block directly from the Oracle Linux...

RLSA-2026:36732 Moderate: python-urllib3 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

python-urllib3 security update

An update is available for python-urllib3. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming...

MiracleLinux 9 : python3.12-urllib3-1.26.19-3.el9_8 (AXSA:2026-1380:04)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-1380:04 advisory. urllib3: urllib3: Denial of Service due to excessive HTTP response decompression CVE-2026-44432 urllib3: urllib3: Information disclosure via...

RockyLinux 8 : python-urllib3 (RLSA-2026:36732)

The remote RockyLinux 8 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2026:36732 advisory. urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers CVE-2026-44431 Tenable has extracted the preceding description...

Moderate: Red Hat Security Advisory: resource-agents security update

An update for resource-agents is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common...