8180 matches found
GHSA-G6CJ-PR64-35W5 vulnerabilities
Vulnerabilities for packages: crossplane-function-pythonic, airflow, ansible-operator-fips, dagster, ggshield, openstack-horizon-2025.2, openstack-kolla-toolbox-2026.1, k8s-sidecar, in-toto, openstack-placement-2025.1, openstack-tempest-2025.2, openstack-tempest-2026.1, ansible-operator, prefect,...
CVE-2026-69247 vulnerabilities
Vulnerabilities for packages: crossplane-function-pythonic, airflow, ansible-operator-fips, dagster, ggshield, openstack-horizon-2025.2, openstack-kolla-toolbox-2026.1, k8s-sidecar, in-toto, openstack-placement-2025.1, openstack-tempest-2025.2, openstack-tempest-2026.1, ansible-operator, prefect,...
[SECURITY] Fedora 43 Update: restic-0.19.1-1.fc43
Fast, secure, efficient backup program. restic supports the following backends for storing backups natively: Local directory sftp server via SSH HTTP REST server protocol, rest-server Amazon S3 either from Amazon or using the Minio server OpenStack Swift BackBlaze B2 Microsoft Azure Blob Storage...
[SECURITY] Fedora 44 Update: restic-0.19.1-1.fc44
Fast, secure, efficient backup program. restic supports the following backends for storing backups natively: Local directory sftp server via SSH HTTP REST server protocol, rest-server Amazon S3 either from Amazon or using the Minio server OpenStack Swift BackBlaze B2 Microsoft Azure Blob Storage...
GHSA-J5G9-F88F-GFJ3 vulnerabilities
Vulnerabilities for packages: openstack-keystone-2025.2-fips, openstack-nova-2026.1, openstack-placement-2025.1, openstack-glance-2025.2-fips, apache-beam-python-3.11-sdk, authentik, openstack-horizon-2025.2, apache-beam-python-3.12-sdk, openstack-placement-2026.1-fips,...
CVE-2026-59939 vulnerabilities
Vulnerabilities for packages: openstack-keystone-2025.2-fips, openstack-nova-2026.1, openstack-placement-2025.1, openstack-glance-2025.2-fips, apache-beam-python-3.11-sdk, authentik, openstack-horizon-2025.2, apache-beam-python-3.12-sdk, openstack-placement-2026.1-fips,...
Linux Distros Unpatched Vulnerability : CVE-2026-54422
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenStack Ironic Python Agent through 11.5.0, a malicious bootc container, when deployed using ironic- python-agent, may be able to extract the credentials...
Linux Distros Unpatched Vulnerability : CVE-2026-66139
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenStack Zaqar through 22.0.0 allows authentication bypass via an EXTRA-SPEC header when a UUID is known. CVE-2026-66139 Note that Nessus relies on the presenc...
CVE-2026-54422
A flaw was found in OpenStack ironic-python-agent's bootc container deployment support. During bootc image deployment, the OCI registry pull secret was exposed to tenant-controlled container code running with host PID namespace visibility. A malicious bootc container image could read the operator...
CVE-2026-66138
In OpenStack Ironic Python Agent through 11.6.0, a project-scoped user with the manager role can achieve arbitrary code execution on a running Ironic-Python-Agent via a maliciously constructed configuration, because the value of ntpserver is passed to a shell...
DEBIAN-CVE-2026-66139
OpenStack Zaqar through 22.0.0 allows authentication bypass via an EXTRA-SPEC header when a UUID is known...
CVE-2026-66139
OpenStack Zaqar through 22.0.0 allows authentication bypass via an EXTRA-SPEC header when a UUID is known...
CVE-2026-54422
In OpenStack Ironic Python Agent through 11.5.0, a malicious bootc container, when deployed using ironic-python-agent, may be able to extract the credentials used to download it...
DEBIAN-CVE-2026-54422
In OpenStack Ironic Python Agent through 11.5.0, a malicious bootc container, when deployed using ironic-python-agent, may be able to extract the credentials used to download it...
UBUNTU-CVE-2026-66138
In OpenStack Ironic Python Agent through 11.6.0, a project-scoped user with the manager role can achieve arbitrary code execution on a running Ironic-Python-Agent via a maliciously constructed configuration, because the value of ntpserver is passed to a shell...
UBUNTU-CVE-2026-66139
OpenStack Zaqar through 22.0.0 allows authentication bypass via an EXTRA-SPEC header when a UUID is known...
UBUNTU-CVE-2026-54422
In OpenStack Ironic Python Agent through 11.5.0, a malicious bootc container, when deployed using ironic-python-agent, may be able to extract the credentials used to download it...
CVE-2026-66139
OpenStack Zaqar
