CLSA-2026-1786791606 TuxCare security update for @angular (3 CVEs)

TuxCare rebuilt 17 @angular packages to address 3 CVEs. Fixed in 18.2.14-tuxcare.13...

CLSA-2026-1786748284 TuxCare security update for @angular (2 CVEs)

TuxCare rebuilt 17 @angular packages to address 2 CVEs. Fixed in 15.2.10-tuxcare.12...

CLSA-2026-1786746120 TuxCare security update for @angular (2 CVEs)

TuxCare rebuilt 17 @angular packages to address 2 CVEs. Fixed in 14.3.0-tuxcare.10...

CLSA-2026-1786743251 TuxCare security update for @angular (2 CVEs)

TuxCare rebuilt 17 @angular packages to address 2 CVEs. Fixed in 12.2.0-tuxcare.4...

CLSA-2026-1786737301 TuxCare security update for @angular (2 CVEs)

TuxCare rebuilt 19 @angular packages to address 2 CVEs. Fixed in 6.1.10-tuxcare.11...

CLSA-2026-1786737120 TuxCare security update for @angular (2 CVEs)

TuxCare rebuilt 19 @angular packages to address 2 CVEs. Fixed in 6.0.1-tuxcare.5...

CLSA-2026-1786735405 TuxCare security update for @angular (2 CVEs)

TuxCare rebuilt 18 @angular packages to address 2 CVEs. Fixed in 5.2.7-tuxcare.5...

Argo Workflows: ArtifactGC.PodSpecPatch bypasses Strict/Secure template reference allow-list (Incomplete fix for CVE-2026-31892)

Summary The allow-list fix for CVE-2026-31892 GHSA-3wf5-g532-rcrr, and its follow-up coverage of hostNetwork/securityContext/serviceAccountName in GHSA-3775-99mw-8rp4, is incomplete. workflow/util/merge.go ValidateUserOverrides / SanitizeUserWorkflowSpec walk only the top-level fields of...

CLEANSTART-2026-OX46889 Security fixes in kubernetes-dns-node-cache 1.26.0-r1

Package kubernetes-dns-node-cache version 1.26.0-r1 fixes 16 vulnerabilities: CVE-2026-32934, CVE-2026-32936, CVE-2026-33190, CVE-2026-33489, CVE-2026-35579...

CLEANSTART-2026-YY19713 Security fixes in keycloak 26.7.0-r1

Package keycloak version 26.7.0-r1 fixes 13 vulnerabilities: ghsa-rmj7-2vxq-3g9f, ghsa-j3rv-43j4-c7qm, ghsa-9fxm-vc8v-hj55, ghsa-5hh8-q8hv-fr38, ghsa-rcqc-6cw3-h962...

CLEANSTART-2026-SE70344 Security fixes in thingsboard 4.2.2.3-r1

Package thingsboard version 4.2.2.3-r1 fixes 84 vulnerabilities: ghsa-r29c-68gh-xp6x, ghsa-h6fc-48rj-7qqh, ghsa-5m62-pw8w-7w9f, ghsa-gx5v-xp9w-j4cg, ghsa-fv25-8xcx-gqjc...

CLSA-2026-1786594683 TuxCare security update for com.mchange:mchange-commons-java (1 CVE)

TuxCare rebuilt com.mchange:mchange-commons-java to address 1 CVE. Fixed in 0.2.19-tuxcare.2...

OPENSUSE-SU-2026:11502-1 7zip-26.02-2.1 on GA media

These are all security issues fixed in the 7zip-26.02-2.1 package on the GA media of openSUSE Tumbleweed...

CLSA-2026-1786546010 TuxCare security update for guzzlehttp/guzzle (2 CVEs)

TuxCare rebuilt guzzlehttp/guzzle to address 2 CVEs. Fixed in 7.10.0-p3+tuxcare...

CLSA-2026-1786540745 TuxCare security update for org.apache.avro (1 CVE)

TuxCare rebuilt 24 org.apache.avro packages to address 1 CVE. Fixed in 1.11.0-tuxcare.3...

CLSA-2026-1786537061 TuxCare security update for org.apache.httpcomponents.client5 (1 CVE)

TuxCare rebuilt 5 org.apache.httpcomponents.client5 packages to address 1 CVE. Fixed in 5.5.2-tuxcare.1...

RHSA-2026:53452 Red Hat Security Advisory: gstreamer1-plugins-good security update

Bulletin has no description...

CLSA-2026-1786527009 TuxCare security update for guzzlehttp/psr7 (5 CVEs)

TuxCare rebuilt guzzlehttp/psr7 to address 5 CVEs. Fixed in 1.1.0-p1+tuxcare...

CLSA-2026-1786520698 TuxCare security update for org.springframework.retry:spring-retry (1 CVE)

TuxCare rebuilt org.springframework.retry:spring-retry to address 1 CVE. Fixed in 1.3.4-tuxcare.1...

pipewire security update

1.4.11-1 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164828...