GO-2024-2947 vulnerabilities

Vulnerabilities for packages: aactl, flux-kustomize-controller, gomplate, kubevela, flux, goreleaser, pulumi, sigstore-scaffolding, timestamp-authority, flux-notification-controller, kubernetes-event-exporter, tekton-chains, falcoctl, opentelemetry-collector-contrib,...

CLEANSTART-2026-QH85825 Security fixes in opentelemetry-collector-contrib 0.153.0-r2

Package opentelemetry-collector-contrib version 0.153.0-r2 fixes 5 vulnerabilities: CVE-2026-2303, CVE-2026-46384, ghsa-mc57-h6j3-3hmv, CVE-2026-46385, ghsa-w8j3-pq8g-8m7w...

CLEANSTART-2026-OC99762 Security fixes in opentelemetry-collector-contrib 0.153.0-r1

Package opentelemetry-collector-contrib version 0.153.0-r1 fixes 6 vulnerabilities: CVE-2026-2303, ghsa-cp6g-7hqx-qxhp, CVE-2026-45287, ghsa-995v-fvrw-c78m, CVE-2026-48496...

CLEANSTART-2026-ZS03179 Security fixes in opentelemetry-collector-contrib 0.153.0-r3

Package opentelemetry-collector-contrib version 0.153.0-r3 fixes 1 vulnerabilities: ghsa-259r-337f-4rfw...

Vulnerability in contrib module (CVE-2026-14671)

PostgreSQL refint plan cache type confusion executes arbitrary code Type confusion in PostgreSQL module "refint" allows an object creator to execute arbitrary code as the operating system user running the database. The fix for this emerged as a non-security bug report, and the fix appear in the g...

Diff - Moderately critical - Access bypass - SA-CONTRIB-2026-096

This module enables you to view the differences between revisions on any entity type. The module doesn't sufficiently restrict access to non-node entity revision diffs. This vulnerability is mitigated by the fact that an attacker must have a role with the permission to view the entity...

Entity Share Websub - Moderately critical - Server-side request forgery (SSRF) - SA-CONTRIB-2026-097

This module enables you to share content between sites in a hub - subscriber model. Certain inputs were not sufficiently validated, allowing an attacker to achieve server-side request forgery attacks...

javapackages-tools:201801 security update

ant-contrib 1.0-0.32.b3 - Rebuilt for https://fedoraproject.org/wiki/Fedora28MassRebuild 1.0-0.31.b3 - Rebuilt for https://fedoraproject.org/wiki/Fedora27MassRebuild 1.0-0.30.b3 - Rebuilt for https://fedoraproject.org/wiki/Fedora26MassRebuild 1.0-0.29.b3 - Rebuilt for...

CLEANSTART-2026-CD66609 Security fixes in opentelemetry-collector-contrib 0.144.0-r3

Package opentelemetry-collector-contrib version 0.144.0-r3 fixes 1 vulnerabilities: ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-SW69995 Security fixes in opentelemetry-collector-contrib 0.150.0-r0

Package opentelemetry-collector-contrib version 0.150.0-r0 fixes 8 vulnerabilities: CVE-2026-46595, CVE-2026-33816, CVE-2026-39821, CVE-2026-41602, CVE-2026-34986...

CLEANSTART-2026-SL88227 Security fixes in opentelemetry-collector-contrib-fips 0.144.0-r3

Package opentelemetry-collector-contrib-fips version 0.144.0-r3 fixes 8 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139, CVE-2026-33186, CVE-2020-8912...

CLEANSTART-2026-HZ36625 Security fixes in opentelemetry-collector-contrib-fips 0.142.0-r0

Package opentelemetry-collector-contrib-fips version 0.142.0-r0 fixes 1 vulnerabilities: ghsa-cfpf-hrx2-8rv6...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: opentelemetry-collector-contrib: opentelemetry-collector-contrib-0.157.0-0.1.hum1 aarch64, x8664 opentelemetry-collector-contrib-0.157.0-0.1.hum1.src src...

Media Folders - Moderately critical - Cross site scripting - SA-CONTRIB-2026-080

This module provides a better UI for managing and selecting Media entities in a folder structure. The module doesn't sufficiently sanitize the names and descriptions of media items and folders when they are displayed in the media browser, resulting in a stored cross-site scripting XSS...

CLEANSTART-2026-MA24172 Security fixes for CVE-2026-2303, CVE-2026-27145, CVE-2026-33816, CVE-2026-34986, CVE-2026-39821, CVE-2026-39822, CVE-2026-39824, CVE-2026-39883, CVE-2026-41602, CVE-2026-42504, CVE-2026-42505, CVE-2026-42507, CVE-2026-46595, CVE-2026-48496, ghsa-6g7g-w4f8-9c9x, ghsa-mpwr-8vm7-h73f, ghsa-p77j-4mvh-x3m3, ghsa-xmrv-pmrh-hhx2 applied in versions: 0.144.0-r3, 0.144.0-r4, 0.150.0-r0, 0.150.0-r1, 0.152.0-r0

Multiple security vulnerabilities affect the opentelemetry-collector-contrib package. These issues are resolved in later releases. See references for individual vulnerability details...

EUVD-2026-44852

Dulwich through 1.1.0 was found to be missing SSH host key verification in contrib/paramikovendor.py...

DEBIAN-CVE-2026-38974

Dulwich through 1.1.0 was found to be missing SSH host key verification in contrib/paramikovendor.py...

CVE-2026-38974

Dulwich through 1.1.0 was found to be missing SSH host key verification in contrib/paramikovendor.py...

CVE-2026-38974

Dulwich through 1.1.0 was found to be missing SSH host key verification in contrib/paramikovendor.py...

CVE-2026-38974

CVE-2026-38974 affects Dulwich up to 1.1.0, where the SSH host key verification is missing in contrib/paramiko_vendor.py. The flaw enables a remote attacker to impersonate a legitimate Git server during SSH connections, potentially exposing sensitive data or enabling code execution on the client....