CLSA-2026-1772756021 TuxCare security update for bl (19 CVEs)

TuxCare rebuilt bl to address 19 CVEs. Fixed in 1.0.0-tuxcare.1...

CLSA-2026-1772496678 TuxCare security update for trim-newlines (19 CVEs)

TuxCare rebuilt trim-newlines to address 19 CVEs. Fixed in 1.0.0-tuxcare.1...

CLSA-2025-1759795579 TuxCare security update for 4 packages (18 CVEs)

TuxCare rebuilt 4 packages to address 18 CVEs. Fixed in 9.0.83-tuxcare.1...

RockyLinux 9 : java-25-openjdk (RLSA-2026:42899)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:42899 advisory. JDK: Enhance TLS certificate handling CVE-2026-46968 JDK: Improve DTLS handshaking CVE-2026-46917 JDK: Enhance JPEG handling CVE-2026-47010 JDK: Enhance...

org.apache.camel/camel-mail: Apache Camel Mail Component: Credential exposure and information disclosure via improper input validation of mail headers

A flaw was found in the Apache Camel Mail Component. This vulnerability, due to improper input validation, allows a remote attacker to exploit routes that channel untrusted input into the mail producer without proper header stripping. Before version 4.19.0, this could lead to the redirection of...

CLEANSTART-2026-SD61348 Security fixes in istio-fips 1.26.8-r4

Package istio-fips version 1.26.8-r4 fixes 19 vulnerabilities: CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...

CLEANSTART-2026-IV23706 Security fixes in kube-state-metrics 2.19.1-r0

Package kube-state-metrics version 2.19.1-r0 fixes 2 vulnerabilities: CVE-2026-42505, CVE-2026-39822...

CLEANSTART-2026-RT21199 Security fixes in consul 1.21.5-r3

Package consul version 1.21.5-r3 fixes 19 vulnerabilities: CVE-2026-39835, CVE-2026-46598, CVE-2026-25681, CVE-2026-27136, CVE-2026-42502...

CLEANSTART-2026-YN68631 Security fixes in percona-xtradb-cluster-operator 1.19.1-r0

Package percona-xtradb-cluster-operator version 1.19.1-r0 fixes 2 vulnerabilities: ghsa-pc3f-x583-g7j2, CVE-2026-35469...

CLEANSTART-2026-AW81963 Security fixes in vault 1.21.4-r4

Package vault version 1.21.4-r4 fixes 19 vulnerabilities: CVE-2026-39820, CVE-2026-42499, CVE-2026-39836, CVE-2026-33814, CVE-2026-33811...

CLEANSTART-2026-DY03272 Security fixes in calico 3.31.5-r1

Package calico version 3.31.5-r1 fixes 19 vulnerabilities: CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-39827...

CLEANSTART-2026-GX93192 Security fixes in kube-state-metrics 2.10.1-r2

Package kube-state-metrics version 2.10.1-r2 fixes 19 vulnerabilities: CVE-2026-39835, CVE-2026-39828, CVE-2026-39827, CVE-2026-25681, CVE-2026-27136...

CLEANSTART-2026-CX37919 Security fixes in prometheus-mysqld-exporter-fips 0.19.0-r0

Package prometheus-mysqld-exporter-fips version 0.19.0-r0 fixes 1 vulnerabilities: CVE-2026-26958...

CLEANSTART-2026-VQ54070 Security fixes in logstash-fips 9.2.4-r2

Package logstash-fips version 9.2.4-r2 fixes 19 vulnerabilities: CVE-2025-61770, CVE-2025-61771, CVE-2025-61772, CVE-2025-61919, CVE-2025-61780...

CLEANSTART-2026-IV17968 Security fixes in mongodb 7.0.32-r1

Package mongodb version 7.0.32-r1 fixes 19 vulnerabilities: CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831...

CLEANSTART-2026-AK78194 Security fixes in yunikorn-k8shim-fips 1.7.0-r1

Package yunikorn-k8shim-fips version 1.7.0-r1 fixes 19 vulnerabilities: CVE-2026-27139, CVE-2026-39825, CVE-2026-32288, CVE-2026-27142, CVE-2026-32289...

CLEANSTART-2026-MN62848 Security fixes in jitsucom-bulker 2.10.0-r2

Package jitsucom-bulker version 2.10.0-r2 fixes 19 vulnerabilities: ghsa-9jj7-4m8r-rfcm, CVE-2026-33815, CVE-2026-33816, ghsa-78h2-9frx-2jm8, ghsa-hfvc-g4fc-pqhx...

CLEANSTART-2026-IW40229 Security fixes in airflow-3 3.1.8-r5

Package airflow-3 version 3.1.8-r5 fixes 19 vulnerabilities: CVE-2026-42526, CVE-2026-27173, CVE-2026-41018, CVE-2026-46745, CVE-2026-50203...

CVE-2026-3093

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an attacker to execute arbitrary JavaScript in another user's browser via a crafted URL, due to improper...

CVE-2026-66724

MWDB Core versions =2.0.0 and 2.19.0 contain a missing authorization vulnerability in the deprecated config and blob upload endpoints. These endpoints accept the undocumented POST method, which bypasses the capability checks applied to the documented PUT method. This allows any authenticated user...