RHEL 8 : resource-agents (RHSA-2026:47092)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:47092 advisory. The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several servic...

OPENSUSE-SU-2026:11403-1 traefik2-2.11.53-1.1 on GA media

These are all security issues fixed in the traefik2-2.11.53-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-65564

A use-after-free condition exists in pglogical's worker signaling code, where a worker structure can be dereferenced after the underlying slot has been freed or recycled during normal worker lifecycle events. The condition is reachable during normal replication operation, including by a...

PT-2026-66342

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.28.0 Description An authenticated RDP client can cause the server-side rdpsnd channel process to terminate by advertising DVI ADPCM with nBlockAlign equal to 8 and nChannels equal to 2. This configuration results in...

The vulnerabilities of the functions bfq_put_stable_ref() and bfq_exit_icq_bfqq() in the block/bfq-iosched.c module support the block-level kernel support in the Linux operating system. These vulnerabilities allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerabilities of the functions bfqputstableref and bfqexiticqbfqq in the block/bfq-iosched.c module are related to the reuse of previously freed memory due to competitive access to resources during the “race condition”. Exploiting these vulnerabilities can allow attackers to compromise the...

PT-2026-65417

An unauthenticated remote attacker can abuse the improper validation of the post-login redirect of the web-UI to trick users to a malicious website. This can result in a loss of confidentiality and availability...

OPENSUSE-SU-2026:11391-1 kubernetes1.36-apiserver-1.36.3-1.1 on GA media

These are all security issues fixed in the kubernetes1.36-apiserver-1.36.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11398-1 tekton-cli-0.45.1-1.1 on GA media

These are all security issues fixed in the tekton-cli-0.45.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11393-1 logcli-3.7.4-1.1 on GA media

These are all security issues fixed in the logcli-3.7.4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11395-1 nsd-4.14.3-1.1 on GA media

These are all security issues fixed in the nsd-4.14.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11404-1 warewulf4-4.7.0-4.1 on GA media

These are all security issues fixed in the warewulf4-4.7.0-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11389-1 kubernetes1.34-apiserver-1.34.10-1.1 on GA media

These are all security issues fixed in the kubernetes1.34-apiserver-1.34.10-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-65617

A deserialization weakness in JFrog Artifactory package handling could allow a low-privileged user to impact confidentiality, integrity, and availability under specific repository conditions...

CVE-2026-65922 Potential unauthorized modification of Artifactory internal metadata

An authorization weakness in JFrog Artifactory internal metadata handling could allow a user with limited repository access to write to restricted internal metadata areas under specific conditions. Successful abuse is limited to integrity and availability impact at a low level; confidentiality is...

CVE-2026-65922

An authorization weakness in JFrog Artifactory internal metadata handling could allow a user with limited repository access to write to restricted internal metadata areas under specific conditions. Successful abuse is limited to integrity and availability impact at a low level; confidentiality is...

EUVD-2026-49583

An authorization weakness in JFrog Artifactory internal metadata handling could allow a user with limited repository access to write to restricted internal metadata areas under specific conditions. Successful abuse is limited to integrity and availability impact at a low level; confidentiality is...

CVE-2026-65617

A deserialization weakness in JFrog Artifactory package handling could allow a low-privileged user to impact confidentiality, integrity, and availability under specific repository conditions...

EUVD-2026-49579

A deserialization weakness in JFrog Artifactory package handling could allow a low-privileged user to impact confidentiality, integrity, and availability under specific repository conditions...

CVE-2026-16812 VeloCloud Orchestrator OS Command Injection

VeloCloud Orchestrator VCO on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by...

CVE-2026-16812

CVE-2026-16812 affects VeloCloud Orchestrator (VCO) On-Prem. The vulnerability is an OS command injection that could allow a remote attacker to access privileged internal functionality and impact the VCO host, compromising confidentiality, integrity, and availability of the orchestrator and manag...