CLEANSTART-2026-AY80745 Security fixes in cluster-autoscaler 1.35.2-r4

Package cluster-autoscaler version 1.35.2-r4 fixes 3 vulnerabilities: CVE-2026-56864, CVE-2026-56865, CVE-2026-41178...

CLEANSTART-2026-BG12778 Security fixes in cluster-autoscaler 1.35.2-r1

Package cluster-autoscaler version 1.35.2-r1 fixes 29 vulnerabilities: CVE-2026-42508, CVE-2026-39835, CVE-2026-46598, CVE-2026-39828, CVE-2026-39829...

CLEANSTART-2026-CW06250 Security fixes in rabbitmq-cluster-operator 2.22.4-r0

Package rabbitmq-cluster-operator version 2.22.4-r0 fixes 8 vulnerabilities: CVE-2026-39821, CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600...

CLEANSTART-2026-DB39840 Security fixes in cluster-autoscaler 1.36.1-r1

Package cluster-autoscaler version 1.36.1-r1 fixes 7 vulnerabilities: ghsa-hrxh-6v49-42gf, CVE-2026-56864, CVE-2026-56865, CVE-2026-39883, CVE-2026-56852...

CLEANSTART-2026-IW50648 Security fixes in cluster-autoscaler 1.36.1-r2

Package cluster-autoscaler version 1.36.1-r2 fixes 4 vulnerabilities: CVE-2026-56864, CVE-2026-56865, CVE-2026-73500, ghsa-gcjh-h69q-9w9g...

CLEANSTART-2026-NG38964 Security fixes in cluster-autoscaler 1.36.1-r4

Package cluster-autoscaler version 1.36.1-r4 fixes 2 vulnerabilities: CVE-2026-56864, CVE-2026-56865...

CLEANSTART-2026-MA24667 Security fixes in cluster-autoscaler 1.35.2-r2

Package cluster-autoscaler version 1.35.2-r2 fixes 26 vulnerabilities: CVE-2026-42508, CVE-2026-39835, CVE-2026-46598, CVE-2026-39828, CVE-2026-39829...

CLEANSTART-2026-LW70656 Security fixes in cluster-autoscaler 1.36.1-r3

Package cluster-autoscaler version 1.36.1-r3 fixes 2 vulnerabilities: CVE-2026-56864, CVE-2026-56865...

CLEANSTART-2026-UF80970 Security fixes in cluster-autoscaler 1.35.2-r3

Package cluster-autoscaler version 1.35.2-r3 fixes 3 vulnerabilities: CVE-2026-56864, CVE-2026-56865, CVE-2026-41178...

CVE-2026-84372: Improper Neutralization of CRLF Sequences

Predis is a flexible and feature-complete Redis and Valkey client for PHP. From version 3.0.0-RC1 until version 3.3.0, pipeline handling on aggregate cluster and replication connections reparses an already serialized RESP buffer in AbstractAggregateConnection::write by splitting it with...

SUSE CVE-2026-72164

In the Linux kernel, the following vulnerability has been resolved: ocfs2: avoid moving extents to occupied clusters For non-auto OCFS2IOCMOVEEXT operations, userspace supplies a physical megoal. ocfs2moveextent initializes newphyscpos from that goal and expects ocfs2probeallocgroup to replace it...

Important: Red Hat Security Advisory: Cluster Observability Operator 1.5.2

The Cluster Observability Operator COO is a Red Hat OpenShift Container Platform Operator that you can deploy to manage observability component stacks by using custom resource descriptions CRDs. The 1.5.2 release of COO...

CVE-2026-55678

Arc is an open, SQL-native time-series database for telemetry. From 26.02.1 until 26.06.2, Arc Enterprise clustering accepts cluster join requests without authentication when cluster.enabled is true but cluster.sharedsecret is not configured. The defaults in internal/config/config.go set...

arc has unauthenticated cluster node admission when `cluster.shared_secret` is unset

Summary Arc Enterprise clustering accepts cluster join requests without authentication when cluster.enabled=true but cluster.sharedsecret is not configured. The coordinator validates HMAC authentication only if a shared secret is non-empty; otherwise, a network attacker who can reach the...

GHSA-P378-JP5R-GPGW arc has unauthenticated cluster node admission when `cluster.shared_secret` is unset

Summary Arc Enterprise clustering accepts cluster join requests without authentication when cluster.enabled=true but cluster.sharedsecret is not configured. The coordinator validates HMAC authentication only if a shared secret is non-empty; otherwise, a network attacker who can reach the...

CVE-2026-55678 Arc: Unauthenticated cluster node admission when `cluster.shared_secret` is unset

Arc is an open, SQL-native time-series database for telemetry. From 26.02.1 until 26.06.2, Arc Enterprise clustering accepts cluster join requests without authentication when cluster.enabled is true but cluster.sharedsecret is not configured. The defaults in internal/config/config.go set...

EUVD-2026-67945

Arc is an open, SQL-native time-series database for telemetry. From 26.02.1 until 26.06.2, Arc Enterprise clustering accepts cluster join requests without authentication when cluster.enabled is true but cluster.sharedsecret is not configured. The defaults in internal/config/config.go set...

CVE-2026-55678

Arc is an open, SQL-native time-series database for telemetry. In Enterprise cluster deployments from v26.02.1 to v26.06.2 , the coordinator accepts cluster join requests without authentication when cluster.enabled=true but cluster.shared_secret is empty. The HMAC validation in coordinator.go is ...

CVE-2026-55678 Arc: Unauthenticated cluster node admission when `cluster.shared_secret` is unset

Arc is an open, SQL-native time-series database for telemetry. From 26.02.1 until 26.06.2, Arc Enterprise clustering accepts cluster join requests without authentication when cluster.enabled is true but cluster.sharedsecret is not configured. The defaults in internal/config/config.go set...

CVE-2026-55678 Arc: Unauthenticated cluster node admission when `cluster.shared_secret` is unset

Arc is an open, SQL-native time-series database for telemetry. From 26.02.1 until 26.06.2, Arc Enterprise clustering accepts cluster join requests without authentication when cluster.enabled is true but cluster.sharedsecret is not configured. The defaults in internal/config/config.go set...