CVE-2025-47910 vulnerabilities

Vulnerabilities for packages: opa, cert-manager, rclone, src, kyverno, ko, fulcio, undock, harbor-registry, nri-rabbitmq, guac, nri-mysql, polaris, gptscript, k3s, rancher-system-upgrade-controller, fzf, node-problem-detector, opentofu, tekton-pipelines, azure-service-operator,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: opa, cert-manager, rclone, src, kyverno, ko, fulcio, undock, harbor-registry, nri-rabbitmq, guac, nri-mysql, polaris, gptscript, k3s, rancher-system-upgrade-controller, fzf, node-problem-detector, opentofu, tekton-pipelines, azure-service-operator,...

Migrating Veeam Kasten for Kubernetes to the Red Hat Certified Operators Catalog

Challenge One or more of the following symptoms may be observed in a Red Hat OpenShift environment running Veeam Kasten for Kubernetes : Upgrades are no longer available for the Veeam Kasten operator installed from the Red Hat Operator Marketplace catalog. Veeam Kasten Enterprise - Term or Veeam...

Moderate: Red Hat Security Advisory: Red Hat build of Keycloak 26.2.9 Images Security Update

New images are available for Red Hat build of Keycloak 26.2.9 and Red Hat build of Keycloak 26.2.9 Operator, running on OpenShift Container Platform Red Hat build of Keycloak is an integrated sign-on solution, available as a Red Hat JBoss Middleware for OpenShift containerized image. The Red Hat...

openSUSE Security Advisory (SUSE-SU-2025:03278-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-58767 vulnerabilities

Vulnerabilities for packages: jruby, kube-fluentd-operator...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-pubsub, git-lfs, rancher-machine, mongodb-kubernetes-operator, dagdotdev, nats, custom-pod-autoscaler-operator, php-fpmexporter, confluent-common-docker, kube-vip-cloud-provider, ctop, newrelic-fluent-bit-output, hivemind,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-pubsub, git-lfs, rancher-machine, mongodb-kubernetes-operator, dagdotdev, nats, custom-pod-autoscaler-operator, php-fpmexporter, confluent-common-docker, kube-vip-cloud-provider, ctop, newrelic-fluent-bit-output, hivemind,...

GHSA-C2F4-JGMC-Q2R5 vulnerabilities

Vulnerabilities for packages: jruby, kube-fluentd-operator...

CVE-2025-58767 vulnerabilities

Vulnerabilities for packages: truffleruby, logstash, gitlab-rails-ce-fips, ruby3.3-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset, kube-fluentd-operator, jruby, gitlab-rails-ce...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: wazero-fips, newrelic-fluent-bit-output, cloud-provider-aws-fips, addon-resizer, sftpgo-plugin-geoipfilter, vault-k8s, nemo, karpenter, custom-pod-autoscaler-operator, newrelic-nri-statsd, prometheus-beat-exporter-fips, yace-fips, nvidia-nsight-compute-13.1,...

GHSA-C2F4-JGMC-Q2R5 vulnerabilities

Vulnerabilities for packages: truffleruby, logstash, gitlab-rails-ce-fips, ruby3.3-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset, kube-fluentd-operator, jruby, gitlab-rails-ce...

weblogic-monitoring-exporter

This is a Java-based project for exporting metrics from WebLogic Server WLS instances to Prometheus. The project is available in two forms: a web application and a separate process. The web application is deployed to the server from which metrics are to be extracted, while the separate process is...

Security update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-t

This update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container fixes the following issues: This...

SUSE-SU-2025:03278-1 Security update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container

This update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container fixes the following issues: This...

Moderate: Red Hat Security Advisory: Custom Metrics Autoscaler Operator for Red Hat OpenShift 2.17.2-1 Update

Custom Metrics Autoscaler Operator for Red Hat OpenShift updates. The following updates for the Custom Metric Autoscaler operator for Red Hat OpenShift are now available: custom-metrics-autoscaler-adapter-container custom-metrics-autoscaler-admission-webhooks-container...

Important: Red Hat Security Advisory: VolSync v0.12 security fixes and container updates

VolSync v0.12 General Availability release images, which provide enhancements, security fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

CVE-2025-10374

A security flaw has been discovered in Shenzhen Sixun Business Management System 7/11. This affects an unknown part of the file /Adm/OperatorStop. Performing manipulation results in improper authorization. The attack is possible to be carried out remotely. The exploit has been released to the...

MAL-2025-47193 Malicious code in newrelic-infra-operator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d13f7915d1227dc54cc2f1481a151b94b159d4ec2941d00db71133b636b5ed1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in newrelic-infra-operator

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...