Important: Red Hat Security Advisory: RHTAS 1.2.1 - Red Hat Trusted Artifact Signer Release

The 1.2.1 release of Red Hat Trusted Artifact Signer OpenShift Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.2 The RHTAS Operator can be used with OpenShift Container Platform 4.15, 4.16, 4.17, 4.18...

Important: Red Hat Security Advisory: RHTAS 1.2.1 - Red Hat Trusted Artifact Signer Release

The 1.2.1 release of Red Hat Trusted Artifact Signer OpenShift Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.2 The RHTAS Operator can be used with OpenShift Container Platform 4.15, 4.16, 4.17, 4.18...

Important: Red Hat Security Advisory: RHTAS 1.2.1 - Red Hat Trusted Artifact Signer Release

The 1.2.1 release of Red Hat Trusted Artifact Signer OpenShift Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.2 The RHTAS Operator can be used with OpenShift Container Platform 4.15, 4.16, 4.17, 4.18...

SUSE CVE-2025-55196

External Secrets Operator is a Kubernetes operator that integrates external secret management systems. From version 0.15.0 to before 0.19.2, a vulnerability was discovered where the List calls for Kubernetes Secret and SecretStore resources performed by the PushSecret controller did not apply a...

CVE-2025-8959 vulnerabilities

Vulnerabilities for packages: rancher-fleet, zarf, tflint, wolfictl, terragrunt, trivy, tfsec, terraform, kots, opentofu, steampipe, snyk-cli, grype, conftest, trivy-operator, k9s, zot, xeol, kubescape, syft...

GHSA-WJRX-6529-HCJ3 vulnerabilities

Vulnerabilities for packages: rancher-fleet, zarf, tflint, wolfictl, terragrunt, trivy, tfsec, terraform, kots, opentofu, steampipe, snyk-cli, grype, conftest, trivy-operator, k9s, zot, xeol, kubescape, syft...

CVE-2025-8959 vulnerabilities

Vulnerabilities for packages: terraform-fips, cloudbeat, xeol-fips, opentofu, snyk-cli, tfsec, conftest, xeol, terraform, cloudbeat-fips, trivy, kots, zot, conftest-fips, grype-fips, syft, k9s-fips, trivy-fips, kubescape, steampipe, k9s, tflint, trivy-operator-fips, rancher-fleet-fips, zarf,...

GHSA-WJRX-6529-HCJ3 vulnerabilities

Vulnerabilities for packages: terraform-fips, cloudbeat, xeol-fips, opentofu, snyk-cli, tfsec, conftest, xeol, terraform, cloudbeat-fips, trivy, kots, zot, conftest-fips, grype-fips, syft, k9s-fips, trivy-fips, kubescape, steampipe, k9s, tflint, trivy-operator-fips, rancher-fleet-fips, zarf,...

CVE-2025-38522

In the Linux kernel, the following vulnerability has been resolved: sched/ext: Prevent updatelockedrq calls with NULL rq Avoid invoking updatelockedrq when the runqueue rq pointer is NULL in the SCXCALLOP and SCXCALLOPRET macros. Previously, calling updatelockedrqNULL with preemption enabled coul...

CVE-2025-55196

External Secrets Operator is a Kubernetes operator that integrates external secret management systems. From version 0.15.0 to before 0.19.2, a vulnerability was discovered where the List calls for Kubernetes Secret and SecretStore resources performed by the PushSecret controller did not apply a...

CVE-2025-55199 vulnerabilities

Vulnerabilities for packages: rancher-fleet, pluto, zarf, flux-helm-controller, helm-operator, helm-push, trivy, istio, chartmuseum, kots, flux, trivy-operator, helm-docs, k9s, flux-source-controller, zot, linkerd2, headlamp, nova, k8sgpt, tw, envoy-gateway, helm-mapkubeapis, helm-set-status,...

CVE-2025-55198 vulnerabilities

Vulnerabilities for packages: rancher-fleet, pluto, zarf, flux-helm-controller, helm-operator, helm-push, trivy, istio, chartmuseum, kots, flux, trivy-operator, helm-docs, k9s, flux-source-controller, zot, linkerd2, headlamp, nova, k8sgpt, envoy-gateway, helm-mapkubeapis, helm-set-status, cerbos,...

GHSA-F9F8-9PMF-XV68 vulnerabilities

Vulnerabilities for packages: rancher-fleet, pluto, zarf, flux-helm-controller, helm-operator, helm-push, trivy, istio, chartmuseum, kots, flux, trivy-operator, helm-docs, k9s, flux-source-controller, zot, linkerd2, headlamp, nova, k8sgpt, envoy-gateway, helm-mapkubeapis, helm-set-status, cerbos,...

GHSA-9H84-QMV7-982P vulnerabilities

Vulnerabilities for packages: rancher-fleet, pluto, zarf, flux-helm-controller, helm-operator, helm-push, trivy, istio, chartmuseum, kots, flux, trivy-operator, helm-docs, k9s, flux-source-controller, zot, linkerd2, headlamp, nova, k8sgpt, tw, envoy-gateway, helm-mapkubeapis, helm-set-status,...

Police Bust Crypto Scammers, Nab Smishing SMS Blaster Operator

Thai police arrest SMS Blaster operator in smishing scam and bust crypto laundering gang moving $30M monthly through…...

CVE-2025-8916 vulnerabilities

Vulnerabilities for packages: thingsboard, druid, zipkin, kserve-modelmesh...

GHSA-PRJ3-CCX8-P6X4 vulnerabilities

Vulnerabilities for packages: apicurio-registry, keycloak, spark, tez, wildfly, management-api-for-apache-cassandra-5.0, celeborn, sonarqube, kserve-modelmesh, trino, apache-pulsar, druid, apache-nifi, akhq, flyway, strimzi-kafka-operator, thingsboard...

GHSA-4CX2-FC23-5WG6 vulnerabilities

Vulnerabilities for packages: thingsboard, druid, zipkin, kserve-modelmesh...

CVE-2025-55163 vulnerabilities

Vulnerabilities for packages: apicurio-registry, keycloak, spark, tez, wildfly, management-api-for-apache-cassandra-5.0, celeborn, sonarqube, kserve-modelmesh, trino, apache-pulsar, druid, apache-nifi, akhq, flyway, strimzi-kafka-operator, thingsboard...

CVE-2025-8916 vulnerabilities

Vulnerabilities for packages: opensearch, kayenta-fips, zipkin, thingsboard, pinot-fips, pinot, logstash, elasticsearch-fips, druid, kayenta, hadoop-fips, camunda-zeebe, elasticsearch, neo4j, kserve-modelmesh...