org.apache.camel.kafkaconnector:camel-consul-kafka-connector (>=0.1.0, <=0.11.5), org.apache.camel.karaf:camel-consul (>=4.7.0, <=4.14.5) +7 more potentially affected by CVE-2026-27172 via org.apache.camel:camel-consul (>=3.0.0, <=4.14.5)

org.apache.camel:camel-consul MAVEN version =3.0.0, =0.1.0, =4.7.0, =4.8.1, =1.0.0-m3, =1.0.0-m3, =1.0.0-m3, =4.6.0, =3.0.0, =4.14.5 - org.wildfly.camel:wildfly-camel-itests-standalone-docker 12.0.0 Source cves: CVE-2026-27172 Source advisory: OSV:GHSA-5RC6-9QFP-8VWG...

org.apache.camel.springboot:camel-infinispan-cluster-service-starter (4.19.0), org.apache.camel.springboot:camel-infinispan-starter (4.19.0) potentially affected by CVE-2026-40858 via org.apache.camel:camel-infinispan (4.19.0)

org.apache.camel:camel-infinispan MAVEN version 4.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-infinispan and may be impacted: - org.apache.camel.springboot:camel-infinispan-cluster-service-starter 4.19.0 -...

org.apache.camel.quarkus:camel-quarkus-consul (>=3.29.0, <=3.33.0), org.apache.camel.quarkus:camel-quarkus-consul-deployment (>=3.29.0, <=3.33.0) +3 more potentially affected by CVE-2026-27172 via org.apache.camel:camel-consul (>=4.15.0, <=4.18.0)

org.apache.camel:camel-consul MAVEN version =4.15.0, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.15.0, =4.18.0 Source cves: CVE-2026-27172 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-16321641...

org.apache.camel.kafkaconnector:camel-infinispan-sink-kafka-connector (>=4.0.0, <=4.14.5), org.apache.camel.kafkaconnector:camel-infinispan-source-kafka-connector (>=4.0.0, <=4.14.5) +8 more potentially affected by CVE-2026-40858 +1 more via org.apache.camel:camel-infinispan (>=4.0.0-m1, <=4.14.6)

org.apache.camel:camel-infinispan MAVEN version =4.0.0-m1, =4.0.0, =4.0.0, =4.7.0, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =4.6.0, =4.0.0-m1, =4.14.6 Source cves: CVE-2026-40858, CVE-2026-6857 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-16321656...

org.apache.camel.springboot:camel-infinispan-cluster-service-starter (4.19.0), org.apache.camel.springboot:camel-infinispan-starter (4.19.0) potentially affected by CVE-2026-40858 +1 more via org.apache.camel:camel-infinispan (4.19.0)

org.apache.camel:camel-infinispan MAVEN version 4.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-infinispan and may be impacted: - org.apache.camel.springboot:camel-infinispan-cluster-service-starter 4.19.0 -...

RHSA-2026:10710 Red Hat Security Advisory: pcs security update

Bulletin has no description...

org.apache.camel.springboot:camel-infinispan-cluster-service-starter (4.19.0), org.apache.camel.springboot:camel-infinispan-starter (4.19.0) potentially affected by CVE-2026-40858 via org.apache.camel:camel-infinispan (4.19.0)

org.apache.camel:camel-infinispan MAVEN version 4.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-infinispan and may be impacted: - org.apache.camel.springboot:camel-infinispan-cluster-service-starter 4.19.0 -...

Apache Storm Prometheus Reporter Trust Management Vulnerability

Apache Storm Prometheus Reporter is a monitoring component developed by the Apache Foundation that converts metrics from distributed stream processing systems into Prometheus format. Versions 2.6.3 to 2.8.6 of Apache Storm Prometheus Reporter contain vulnerabilities related to trust management...

ocfs2: fix possible deadlock between unlink and dio_end_io_write

...

[SECURITY] Fedora 44 Update: corosync-3.1.10-5.fc44

This package contains the Corosync Cluster Engine Executive, several default APIs and libraries, default configuration files, and an init script...

Security Bulletin: IBM Turbonomic Prometurbo agent used by IBM Turbonomic Application Resource Management is affected by a single vulnerability (CVE-2026-6389)

Summary IBM Turbonomic Prometurbo is an agent used by IBM Turbonomic Application Resource Management to integrate with Prometheus to collect application metrics and send them to Turbonomic for analysis and generation of optimization plans. A security vulnerability has been addressed in the IBM...

CVE-2026-31596

A flaw was found in the OCFS2 Oracle Cluster File System, version 2 component of the Linux kernel. A local attacker with control over a specially crafted filesystem could exploit a vulnerability in the ocfs2groupextend function. This flaw arises from an insufficient validation of a global bitmap...

CVE-2026-31596 ocfs2: handle invalid dinode in ocfs2_group_extend

In the Linux kernel, the following vulnerability has been resolved: ocfs2: handle invalid dinode in ocfs2groupextend BUG kernel BUG at fs/ocfs2/resize.c:308! Oops: invalid opcode: 0000 1 SMP KASAN NOPTI RIP: 0010:ocfs2groupextend+0x10aa/0x1ae0 fs/ocfs2/resize.c:308 Code: 8b8520ff ffff83f8 860f858...

SUSE-SU-2026:1604-1 Security update for tomcat

This update for tomcat fixes the following issues: Security fixes: - CVE-2026-24880: Request smuggling via invalid chunk extension bsc1261850. - CVE-2026-25854: Occasionally open redirect bsc1261851. - CVE-2026-29129: TLS cipher order is not preserved bsc1261852. - CVE-2026-29145: OCSP checks...

CVE-2026-41485

Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to versions 1.17.2 and 1.16.4, an unchecked type assertion in the forEach mutation handler allows any user with permission to create a Policy or ClusterPolicy to crash the cluster-wide background controller int...

CVE-2026-41323

Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to versions 1.18.0-rc1, 1.17.2-rc1, and 1.16.4, Kyverno's apiCall feature in ClusterPolicy automatically attaches the admission controller's ServiceAccount token to outgoing HTTP requests. The service URL has n...

CVE-2026-41485

Kyverno statement: Prior to versions 1.17.2 and 1.16.4, an unchecked type assertion in the forEach mutation handler can be triggered by a user with policy creation rights, causing the cluster-wide background controller to crash into a persistent CrashLoopBackOff and the admission controller to dr...

CVE-2026-41485 Kyverno Controller Denial of Service via forEach Mutation Panic

Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to versions 1.17.2 and 1.16.4, an unchecked type assertion in the forEach mutation handler allows any user with permission to create a Policy or ClusterPolicy to crash the cluster-wide background controller int...

EUVD-2026-25392

Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to versions 1.17.2 and 1.16.4, an unchecked type assertion in the forEach mutation handler allows any user with permission to create a Policy or ClusterPolicy to crash the cluster-wide background controller int...

CVE-2026-41485 Kyverno Controller Denial of Service via forEach Mutation Panic

Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to versions 1.17.2 and 1.16.4, an unchecked type assertion in the forEach mutation handler allows any user with permission to create a Policy or ClusterPolicy to crash the cluster-wide background controller int...