CLEANSTART-2026-TA16647 Security fix for CVE-2024-38821 applied in: apache-nifi 1.25.0-r1

Security vulnerability affects the apache-nifi package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-RX91523 Security fix for CVE-2026-58043 applied in: nodejs 26.5.0-r0

Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-LA29033 Security fix for CVE-2026-56850 applied in: nodejs 26.5.0-r0

Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-VC78563 Security fix for CVE-2026-84445 applied in: atlantis 0.47.1-r1, boring-registry 0.18.0-r1, cadvisor 0.55.1-r7, cadvisor 0.56.2-r4, cadvisor 0.57.0-r6, cadvisor 0.60.5-r2, cert-manager 1.18.6-r6, cert-manager 1.19.6-r4, cert-manager 1.20.3-r5, cert-manager 1.21.1-r1, cloudnative-pg 1.27.4-r3, cloudnative-pg 1.28.4-r2, cloudnative-pg 1.29.2-r3, cloudnative-pg 1.30.0-r2, cloudnative-pg-fips 1.30.0-r1, dex 2.42.1-r6, dex 2.43.1-r5, dex 2.44.0-r9, dex 2.45.1-r7, dynatrace-operator 1.10.1-r1, dynatrace-operator 1.10.2-r2, dynatrace-operator 1.7.3-r5, dynatrace-operator 1.8.1-r8, dynatrace-operator 1.9.0-r6, gitea 1.27.2-r2, go-discover 0_git20250325-r4, keda 2.17.2-r2, knative-serving 1.21.3-r4, knative-serving 1.22.1-r5, knative-serving 1.23.0-r1, kube-metrics-adapter 0.2.9-r4, kube-state-metrics-fips 2.17.0-r4, kube-state-metrics-fips 2.19.1-r0, kube-vip-fips 0.9.2-r1, kube-vip-fips 1.2.3-r1, metallb 0.16.0-r4, minio-client 0.20250721.052808-r1, opa 1.20.2-r1, opentelemetry-collector 0.154.0-r3, opentelemetry-collector-contrib 0.157.0-r2, prometheus-alertmanager 0.34.0-r2, prometheus-operator 0.91.0-r6, prometheus-operator 0.92.1-r4, rabbitmq-cluster-operator 2.20.1-r7, rabbitmq-cluster-operator 2.21.1-r4, rabbitmq-messaging-topology-operator 1.19.3-r6, rancher-fleet-agent 0.15.6-r1, rclone 1.73.5-r7, rclone 1.74.4-r2, restic 0.18.1-r9, restic-fips 0.18.1-r7, step 0.27.5-r6, step 0.28.7-r7, step 0.29.0-r6, tempo 3.0.3-r1, terraform 1.16.0-r2, vault 1.21.4-r12, vault 2.0.4-r4, velero 1.15.2-r10, velero 1.17.2-r10, velero 1.18.2-r9, velero-plugin-for-aws 1.11.1-r9, velero-plugin-for-aws 1.12.2-r9, velero-plugin-for-aws 1.13.2-r6, velero-plugin-for-csi 0.4.3-r6, velero-plugin-for-csi 0.5.1-r5, velero-plugin-for-csi 0.6.3-r7, velero-plugin-for-csi 0.7.1-r7, victoriametrics-operator 0.71.0-r4, victoriametrics-operator 0.73.1-r1, victoriametrics-operator-fips 0.71.0-r2

CVE-2026-84445 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-FQ72391 Security fix for CVE-2026-84303 applied in: cadvisor 0.55.1-r7, cadvisor 0.56.2-r4, cadvisor 0.57.0-r6, cadvisor 0.60.5-r2, cert-manager 1.18.6-r6, cert-manager 1.21.1-r1, cloudnative-pg 1.27.4-r3, cloudnative-pg 1.28.4-r2, cloudnative-pg 1.29.2-r3, cloudnative-pg 1.30.0-r2, cloudnative-pg-fips 1.30.0-r1, dex 2.42.1-r5, dex 2.43.1-r5, dex 2.44.0-r8, dex 2.45.1-r7, dynatrace-operator 1.7.3-r5, dynatrace-operator 1.8.1-r8, dynatrace-operator 1.9.0-r6, gitea 1.27.2-r2, go-discover 0_git20250325-r4, knative-serving 1.21.3-r4, kube-metrics-adapter 0.2.9-r3, kube-state-metrics-fips 2.17.0-r4, kube-state-metrics-fips 2.19.1-r0, kube-vip-fips 0.9.2-r1, kube-vip-fips 1.2.3-r1, metallb 0.16.0-r4, minio-client 0.20250721.052808-r1, opa 1.20.0-r1, prometheus-alertmanager 0.34.0-r2, prometheus-operator 0.91.0-r6, prometheus-operator 0.92.1-r4, rabbitmq-cluster-operator 2.20.1-r7, rabbitmq-cluster-operator 2.21.1-r4, rabbitmq-messaging-topology-operator 1.19.3-r5, rclone 1.73.5-r7, rclone 1.74.4-r2, restic-fips 0.18.1-r7, tempo 3.0.3-r1, terraform 1.16.0-r1, velero-plugin-for-aws 1.11.1-r9, velero-plugin-for-aws 1.12.2-r9, velero-plugin-for-aws 1.13.2-r6, velero-plugin-for-csi 0.4.3-r5, velero-plugin-for-csi 0.5.1-r5, velero-plugin-for-csi 0.6.3-r6, victoriametrics-operator 0.73.1-r1

CVE-2026-84303 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-YH52150 Security fix for CVE-2026-90560 applied in: spark-sc213-jdk17-py312 4.1.3-r2

Security vulnerability affects the spark-sc213-jdk17-py312 package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-XJ29486 Security fix for CVE-2026-85525 applied in: opentelemetry-collector-contrib 0.157.0-r2, vault 2.0.4-r5

CVE-2026-85525 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: syft: syft-1.52.0-0.1.hum1 aarch64, x8664 syft-1.52.0-0.1.hum1.src src...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grype: grype-0.119.0-0.1.hum1 aarch64, x8664 grype-0.119.0-0.1.hum1.src src...

CLEANSTART-2026-YQ30478 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

Multiple security vulnerabilities affect the dynatrace-operator package. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See referenc...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana13.1: grafana13.1-13.1.6-0.1.hum1 aarch64, x8664 grafana13.1-13.1.6-0.1.hum1.src src...

UBUNTU-CVE-2026-54626

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. In 0.9.10 and earlier, the TGAINDEXEDRLE path selected by imagetype == 9 allocates an image buffer using the one-byte-per-pixel SAILPIXELFORMATBPP8INDEXED format returned by...

CVE-2026-54626 SAIL: Heap out-of-bounds write in SAIL TGA decoder (indexed-RLE bpp/stride mismatch)

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. In 0.9.10 and earlier, the TGAINDEXEDRLE path selected by imagetype == 9 allocates an image buffer using the one-byte-per-pixel SAILPIXELFORMATBPP8INDEXED format returned by...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.13.71 bug fix and security update

Red Hat OpenShift Container Platform release 4.13.71 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a...

CVE-2026-90091

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix race l2capsockcleanuplisten vs. putchan For L2CAP sockets without owning sk-sksocket, reading l2cappisk-chan may race against concurrent l2capsockkill - l2capsockputchan. This excludes simultaneous protoops...

CLEANSTART-2026-AA21675 Security fix for CVE-2026-54516 applied in: activemq 6.1.8-r1, activemq 6.2.8-r1, activemq 6.3.1-r1, apache-nifi 2.10.0-r3, apache-nifi 2.9.0-r5, apache-nifi-registry 2.9.0-r3, confluent-kafka 8.3.0-r1, elasticsearch 9.4.4-r4, hazelcast 5.7.0-r1, kafka 4.3.1-r1, logstash-fips 9.4.3-r1, rundeck 6.0.0-r2, rundeck 6.0.1-r0, sonarqube 26.3.0.120487-r4, strimzi-kafka-operator 1.1.0-r1, trino 480-r7

CVE-2026-54516 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

Apache Tomcat: Apache Tomcat: Improper Input Validation vulnerability due to incomplete fix

A flaw was found in Apache Tomcat. This improper input validation vulnerability stems from an incomplete fix for a previous security issue CVE-2025-66614. This flaw may allow an attacker to bypass security controls or cause unexpected behavior within the application...

Apache Tomcat: Apache Tomcat: Improper Input Validation vulnerability due to incomplete fix

A flaw was found in Apache Tomcat. This improper input validation vulnerability stems from an incomplete fix for a previous security issue CVE-2025-66614. This flaw may allow an attacker to bypass security controls or cause unexpected behavior within the application...

Apache Tomcat: Apache Tomcat: Improper Input Validation vulnerability due to incomplete fix

A flaw was found in Apache Tomcat. This improper input validation vulnerability stems from an incomplete fix for a previous security issue CVE-2025-66614. This flaw may allow an attacker to bypass security controls or cause unexpected behavior within the application...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: opentelemetry-collector-k8s: opentelemetry-collector-k8s-0.161.0-0.1.hum1 aarch64, x8664 opentelemetry-collector-k8s-0.161.0-0.1.hum1.src src...