firefox: thunderbird: Use-after-free in the JavaScript: GC component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the JavaScript: GC component...

Important: Red Hat Security Advisory: opentelemetry-collector security update

An update for opentelemetry-collector is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

RHEL 9 : opentelemetry-collector (RHSA-2026:4267)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:4267 advisory. Collector with the supported components for a Red Hat build of OpenTelemetry Security Fixes: golang: net/url: Memory exhaustion in query...

AlmaLinux 10 : opentelemetry-collector (ALSA-2026:4174)

The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:4174 advisory. golang: net/url: Memory exhaustion in query parameter parsing in net/url CVE-2025-61726 crypto/tls: Unexpected session resumption in crypto/tls...

RockyLinux 9 : opentelemetry-collector (RLSA-2026:4177)

The remote RockyLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RLSA-2026:4177 advisory. golang: net/url: Memory exhaustion in query parameter parsing in net/url CVE-2025-61726 crypto/tls: Unexpected session resumption in crypto/tls...

Important: Red Hat Security Advisory: opentelemetry-collector security update

An update for opentelemetry-collector is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-pubsub, yunikorn-web, grafana-pyroscope, helm-docs, sbom-convert, kyverno-policy-reporter-ui, terragrunt, falco-no-driver, coredns, authservice, nri-mongodb, kyverno, knative-client, crossplane-provider-aws-sns, kuberlr, cloudprober, cluster-autoscaler,...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: azuredisk-csi, crossplane-provider-aws-cloudformation, sftpgo-plugin-pubsub, flux-image-reflector-controller, tflint, zarf, external-secrets-operator, cluster-api-gcp-controller, knative-operator, grafana-pyroscope, thanos, pulumi, crossplane-provider-aws-firehose,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: mockgen, sftpgo-plugin-pubsub, yunikorn-web, grafana-pyroscope, helm-docs, sbom-convert, kyverno-policy-reporter-ui, terragrunt, falco-no-driver, coredns, authservice, nri-mongodb, kyverno, knative-client, crossplane-provider-aws-sns, kuberlr, kratos, cloudprober,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-pubsub, yunikorn-web, grafana-pyroscope, helm-docs, sbom-convert, kyverno-policy-reporter-ui, terragrunt, falco-no-driver, coredns, authservice, nri-mongodb, kyverno, knative-client, crossplane-provider-aws-sns, kuberlr, cloudprober, cluster-autoscaler,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: azuredisk-csi, crossplane-provider-aws-cloudformation, sftpgo-plugin-pubsub, flux-image-reflector-controller, tflint, zarf, external-secrets-operator, cluster-api-gcp-controller, knative-operator, grafana-pyroscope, thanos, pulumi, crossplane-provider-aws-firehose,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: aws-s3-controller, teleport-operator-fips, secrets-store-csi-driver-provider-azure-fips, postgres-operator, cortex-fips, cloud-provider-aws, influx, rabbitmq-messaging-topology-operator-fips, restic, vault-csi-provider-fips, spilo, gitlab-pages, thanos,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: teleport-operator-fips, secrets-store-csi-driver-provider-azure-fips, cortex-fips, restic, vault-csi-provider-fips, spilo, gitlab-pages, thanos, flux-helm-controller, prometheus-operator, sftpgo-plugin-pubsub, crossplane-provider-aws-dynamodb, terraform-provider-time...

Important: Red Hat Security Advisory: opentelemetry-collector security update

An update for opentelemetry-collector is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

firefox: thunderbird: Use-after-free in the JavaScript: GC component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the JavaScript: GC component...

Linux Distros Unpatched Vulnerability : CVE-2025-13350

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux 6.8 GA retains the legacy AFUNIX garbage collector but backports upstream commit 8594d9b85c07 afunix: Don't call skbget for OOB skb. When orphaned...

ALSA-2026:4177 Important: opentelemetry-collector security update

Collector with the supported components for a AlmaLinux build of OpenTelemetry Security Fixes: golang: net/url: Memory exhaustion in query parameter parsing in net/url CVE-2025-61726 crypto/tls: Unexpected session resumption in crypto/tls CVE-2025-68121 For more details about the security issues,...

RHEL 10 : opentelemetry-collector (RHSA-2026:4174)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:4174 advisory. Collector with the supported components for a Red Hat build of OpenTelemetry Security Fixes: golang: net/url: Memory exhaustion in query...

RHEL 9 : opentelemetry-collector (RHSA-2026:4177)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:4177 advisory. Collector with the supported components for a Red Hat build of OpenTelemetry Security Fixes: golang: net/url: Memory exhaustion in query...

ALSA-2026:4174 Important: opentelemetry-collector security update

Collector with the supported components for a AlmaLinux build of OpenTelemetry Security Fixes: golang: net/url: Memory exhaustion in query parameter parsing in net/url CVE-2025-61726 crypto/tls: Unexpected session resumption in crypto/tls CVE-2025-68121 For more details about the security issues,...