Important: Red Hat Security Advisory: git-lfs security update

An update for git-lfs is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring...

Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-32282 DESCRIPTION: On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the...

CLEANSTART-2026-ZU24394 Security fix for CVE-2026-32282 applied in: apache-nifi 2.10.0-r4, argo-cd 3.0.23-r2, argo-cd-fips 3.0.23-r1, argo-workflows-fips 4.0.4-r0, aws-eks-pod-identity-agent 0.1.36-r0, aws-eks-pod-identity-agent-fips 0.1.36-r0, aws-flb-cloudwatch 1.9.4-r0, aws-flb-firehose 1.7.2-r0, aws-flb-kinesis 1.10.3-r0, aws-load-balancer-controller 3.2.1-r0, aws-privateca-issuer 1.7.0-r0, aws-privateca-issuer-fips 1.7.0-r1, cadvisor 0.56.2-r0, cadvisor-fips 0.55.1-r0, calico 3.30.7-r1, cass-operator 1.28.1-r2, cass-operator-fips 1.30.0-r1, cert-manager 1.20.0-r0, cert-manager 1.20.1-r0, cert-manager-cmctl-fips 2.4.0-r3, cert-manager-fips 1.17.4-r1, cert-manager-webhook-pdns-fips 3.2.3-r2, certificate-transparency-trillian-ctserver 1.3.2-r2, certificate-transparency-trillian-ctserver-fips 1.3.2-r0, cilium 1.17.15-r0, cilium 1.18.9-r0, cilium 1.19.3-r0, cloudnative-pg-fips 1.24.4-r4, cloudnative-pg-fips 1.25.4-r3, cloudnative-pg-fips 1.26.3-r2, cloudnative-pg-fips 1.27.3-r2, cloudnative-pg-fips 1.28.1-r2, cni-plugin-flannel 1.6.0-r0, configmap-reload 0.15.0-r0, confluent-cp-docker-utils 1.0.8-r0, coredns 1.14.2-r1, crossplane-provider-sql-fips 0.13.0-r1, dex 2.45.1-r2, docker 29.3.0-r1, docker-compose 5.1.0-r0, druid-exporter-fips 0.10-r4, druid-exporter-fips 0.11-r5, druid-exporter-fips 0.8-r3, druid-exporter-fips 0.9-r3, eks-distro-kube-apiserver 1.34.2-r0, eks-distro-kube-apiserver-fips 1.34.2-r0, eks-distro-kube-controller-manager-fips 1.34.2-r0, eks-distro-kube-scheduler-fips 1.34.3-r0, external-secrets 2.2.0-r0, external-secrets-fips 0.17.0-r2, external-secrets-fips 2.2.0-r0, fluent-operator-fips 3.2.0-r7, fluent-operator-fips 3.3.0-r8, fluent-operator-fips 3.4.0-r8, fluent-operator-fips 3.6.0-r4, flux-notification-controller-fips 1.5.0-r0, gitness 3.0.1-r1, gitness 3.1.1-r1, gitness 3.2.0-r1, gitness 3.3.0-r2, gostatsd 28.3.0-r2, gpu-operator 24.9.2-r1, grafana-alloy 1.14.2-r2, grafana-alloy 1.15.0-r0, grafana-alloy-fips 1.16.0-r0, grafana-mimir-fips 3.0.5-r1, grafana-rollout-operator 0.36.0-r0, harbor-scanner-trivy 0.35.1-r1, harbor-scanner-trivy-fips 0.35.1-r1, helm 4.0.5-r2, helm 4.1.3-r0, helm-fips 4.1.3-r0, helm-operator 1.42.1-r0, helm-operator 1.42.2-r0, helm-operator-fips 1.41.1-r2, ip-masq-agent 2.12.6-r1, istio 1.28.5-r3, istio 1.29.1-r1, istio-fips 1.25.5-r5, istio-fips 1.26.8-r2, istio-fips 1.27.8-r3, istio-fips 1.28.5-r3, istio-fips 1.29.1-r2, istio-pilot-discovery-fips 1.28.3-r1, jitsucom-bulker 2.10.0-r2, jitsucom-bulker 2.11.0-r0, jitsucom-bulker 2.8.6-r0, jitsucom-bulker 2.9.0-r0, k8ssandra-client-fips 0.5.0-r8, k8ssandra-client-fips 0.6.4-r7, k8ssandra-client-fips 0.7.0-r5, k8ssandra-client-fips 0.8.10-r1, k8ssandra-client-fips 0.8.9-r0, k8ssandra-operator 1.26.0-r0, k8ssandra-operator-fips 1.29.0-r1, kafka_exporter-fips 1.6.0-r1, kafka_exporter-fips 1.7.0-r2, karma 0.122-r0, karpenter 1.9.0-r0, karpenter-fips 1.9.0-r0, keda 2.19.0-r3, keda-fips 2.18.3-r3, kserve 0.16.0-r2, kserve-modelmesh-serving 0.12.0-r2, kube-fluentd-operator 1.18.2-r1, kube-rbac-proxy 0.20.2-r1, kube-rbac-proxy-fips 0.20.2-r1, kube-state-metrics 2.10.1-r1, kube-state-metrics 2.16.0-r3, kube-state-metrics-fips 2.18.0-r1, kube-vip 1.1.0-r0, kubernetes 1.34.1-r3, kubernetes 1.34.6-r1, kubernetes 1.35.3-r1, kubernetes-csi-driver-nfs-fips 4.12.1-r2, kubernetes-csi-external-attacher 4.10.0-r0, kubernetes-csi-external-attacher-fips 4.10.0-r0, kubernetes-csi-external-provisioner-fips 6.2.0-r2, kubernetes-csi-external-resizer 2.0.0-r0, kubernetes-csi-external-resizer-fips 2.0.0-r1, kubernetes-csi-external-resizer-fips 2.1.0-r1, kubernetes-csi-livenessprobe-fips 2.18.0-r2, kubernetes-csi-node-driver-registrar 2.13.0-r0, kubernetes-csi-node-driver-registrar-fips 2.15.0-r3, kubernetes-csi-node-driver-registrar-fips 2.16.0-r2, kubernetes-dashboard 7.14.0-r1, kubernetes-dashboard-api 1.14.0-r1, kubernetes-dashboard-api-fips 1.14.0-r1, kubernetes-dashboard-auth 1.4.0-r1, kubernetes-dashboard-auth-fips 1.4.0-r2, kubernetes-dashboard-fips 7.14.0-r0, kubernetes-dashboard-metrics-scraper 1.2.2-r2, kubernetes-dashboard-metrics-scraper-fips 1.2.2-r1, kubernetes-dashboard-web 1.7.0-r0, kubernetes-event-exporter 1.7-r1, kubernetes-event-exporter-fips 1.7-r0, kumactl 2.11.12-r0, kumactl 2.12.9-r0, kumactl 2.13.4-r0, kured 1.20.0-r0, kustomize-fips 5.8.1-r0, kyverno-fips 1.13.6-r10, kyverno-fips 1.16.3-r6, kyverno-fips 1.17.1-r5, kyverno-policy-reporter-fips 3.3.3-r5, kyverno-policy-reporter-fips 3.4.2-r5, kyverno-policy-reporter-fips 3.5.0-r5, kyverno-policy-reporter-fips 3.7.3-r2, kyverno-policy-reporter-kyverno-plugin-fips 1.3.1-r10, kyverno-policy-reporter-kyverno-plugin-fips 1.4.2-r8, kyverno-policy-reporter-kyverno-plugin-fips 1.5.2-r4, linkerd2 25.12.3-r0, local-static-provisioner 2.8.0-r2, logstash-fips 9.2.7-r1, logstash-fips 9.3.2-r0, lvm-driver 1.7.0-r1, minio-operator-fips 5.0.19-r1, minio-operator-fips 7.1.1-r9, mongodb 7.0.30-r1, mongodb 7.0.31-r0, mongodb 8.0.20-r0, mongodb 8.2.5-r0, mountpoint-s3-csi-driver 2.3.0-r1, newrelic-nri-kube-events 2.16.4-r2, nginx-prometheus-exporter 1.5.1-r2, nginx-prometheus-exporter-fips 1.5.1-r1, nvidia-container-toolkit 1.19.0-r0, openbao-fips 2.1.1-r9, openbao-fips 2.2.2-r7, openbao-fips 2.4.4-r5, openbao-fips 2.5.1-r1, openbao-fips 2.5.1-r2, openbao-fips 2.5.2-r0, opensearch-k8s-operator-fips 2.5.1-r3, opensearch-k8s-operator-fips 2.6.1-r8, opensearch-k8s-operator-fips 2.8.0-r3, opentofu-fips 1.10.9-r5, opentofu-fips 1.11.5-r4, opentofu-fips 1.7.10-r4, opentofu-fips 1.8.11-r4, opentofu-fips 1.9.4-r5, paranoia 0.2.1-r0, paranoia 0.3.1-r0, paranoia 0.4.0-r0, percona-xtradb-cluster-operator 1.19.0-r0, percona-xtradb-cluster-operator-fips 1.18.0-r4, pmm 3.5.0-r0, prom-mysqld-exporter-fips 0.18.0-r3, prometheus 3.11.0-r2, prometheus 3.5.1-r1, prometheus-blackbox-exporter 0.28.0-r2, prometheus-mongodb-exporter 0.47.2-r1, prometheus-mongodb-exporter-fips 0.47.2-r1, prometheus-mysqld-exporter 0.15.0-r1, prometheus-mysqld-exporter-fips 0.19.0-r1, prometheus-operator 0.69.1-r1, prometheus-operator 0.87.1-r2, prometheus-redis-exporter-fips 1.77.0-r4, prometheus-redis-exporter-fips 1.78.0-r4, prometheus-redis-exporter-fips 1.79.0-r4, prometheus-redis-exporter-fips 1.80.2-r2, prometheus-redis-exporter-fips 1.81.0-r1, prometheus-redis-exporter-fips 1.82.0-r0, rabbitmq-cluster-operator 2.18.0-r0, rabbitmq-cluster-operator 2.20.0-r1, rabbitmq-messaging-topology-operator 1.16.0-r0, renovate 43.123.8-r1, restic 0.18.0-r0, sealed-secrets 0.33.1-r0, sealed-secrets 0.34.0-r0, sealed-secrets 0.36.1-r0, spark-operator 2.1.1-r6, stakater-reloader-fips 1.2.1-r3, stakater-reloader-fips 1.3.0-r2, step-issuer 0.10.2-r1, step-issuer 0.9.11-r1, tempo 2.10.3-r0, tempo 2.7.2-r1, tempo 2.8.3-r2, tempo 2.9.1-r0, tempo-fips 2.10.3-r0, tempo-fips 2.7.2-r0, tempo-fips 2.8.3-r0, tempo-fips 2.9.1-r0, temporal 1.5.1-r0, terragrunt-fips 0.94.0-r3, terragrunt-fips 0.95.1-r3, terragrunt-fips 0.96.1-r3, terragrunt-fips 0.97.2-r5, terragrunt-fips 0.98.0-r5, tigera-operator 1.41.1-r0, timoni 0.25.2-r0, trust-manager-fips 0.20.3-r1, trust-manager-fips 0.21.1-r1, vault 1.20.4-r2, vault 1.21.4-r2, vault-csi-provider 1.7.0-r0, velero 1.17.2-r2, velero-fips 1.17.2-r5, velero-plugin-for-aws 1.10.1-r3, velero-plugin-for-aws 1.12.2-r4, velero-plugin-for-aws 1.13.1-r3, velero-plugin-for-aws 1.14.0-r1, velero-plugin-for-csi 0.7.1-r2, velero-plugin-for-microsoft-azure-fips 1.14.0-r1, victoriametrics-vmauth 1.138.0-r0, wave 0.11.0-r1, wave-fips 0.9.0-r3, whereabouts 0.9.2-r2, yunikorn-k8shim 1.7.0-r2, yunikorn-k8shim-fips 1.7.0-r1, yunikorn-web 1.7.0-r0, yunikorn-web-fips 1.7.0-r0, zot 2.1.13-r2

CVE-2026-32282 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

Oracle Linux 10 : osbuild-composer (ELSA-2026-22450)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-22450 advisory. 176-1.0.1 - Track github upstream Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

RHEL 7 : rhc-worker-script (RHSA-2026:54191)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:54191 advisory. Remote Host Configuration rhc worker for executing scripts on hosts managed by Red Hat Lightspeed. Security Fixes: net/url: Incorrect parsi...

osbuild-composer security update

An update is available for osbuild-composer. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list A service for building customized OS artifacts, such as VM images an...

RHEL 8 : osbuild-composer (RHSA-2026:48790)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:48790 advisory. A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building...

CLEANSTART-2026-BT76231 Security fixes in kubernetes 1.34.1-r3

Package kubernetes version 1.34.1-r3 fixes 8 vulnerabilities: CVE-2026-32280, CVE-2026-32289, CVE-2026-32282, CVE-2026-27140, CVE-2026-32288...

CLEANSTART-2026-ZF69342 Security fixes in kyverno-fips 1.16.3-r6

Package kyverno-fips version 1.16.3-r6 fixes 10 vulnerabilities: CVE-2026-39883, ghsa-hfvc-g4fc-pqhx, CVE-2026-32280, CVE-2026-32289, CVE-2026-32282...

CLEANSTART-2026-KL10922 Security fixes in druid-exporter-fips 0.8-r3

Package druid-exporter-fips version 0.8-r3 fixes 8 vulnerabilities: CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32283...

CLEANSTART-2026-BZ34358 Security fixes in gpu-operator 24.9.2-r1

Package gpu-operator version 24.9.2-r1 fixes 8 vulnerabilities: CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32283...

RHEL 9 : golang (RHSA-2026:47719)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:47719 advisory. The golang packages provide the Go programming language compiler. Security Fixes: crypto/tls: Unexpected session resumption in crypto/tls...

RHEL 9 : grafana-pcp (RHSA-2026:47716)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:47716 advisory. The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and...

Important: Red Hat Security Advisory: grafana-pcp security, bug fix, and enhancement update

An update for grafana-pcp is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CLEANSTART-2026-TE81995 Security fixes for CVE-2024-51744, CVE-2025-30204, CVE-2025-47912, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61729, CVE-2026-27139, CVE-2026-32282, CVE-2026-32288, CVE-2026-32289, CVE-2026-33186, CVE-2026-39817, CVE-2026-39819, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-42502, CVE-2026-42506, ghsa-p77j-4mvh-x3m3 applied in versions: 0.6.3-r1, 0.7.1-r0, 0.7.1-r1, 0.7.1-r2

Multiple security vulnerabilities affect the velero-plugin-for-csi package. These issues are resolved in later releases. See references for individual vulnerability details...

grafana-pcp security update

5.3.0-7 - Resolves RHEL-183688: CVE-2026-39821 5.3.0-6 - Resolves RHEL-183688: CVE-2026-39821 5.3.0-5 - Resolves RHEL-166460: CVE-2026-32282 - Resolves RHEL-167495: CVE-2026-32283...

Oracle Linux 10 : grafana-pcp (ELSA-2026-19136)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-19136 advisory. - Resolves RHEL-183688: CVE-2026-39821 - Resolves RHEL-183688: CVE-2026-39821 - Resolves RHEL-166460: CVE-2026-32282 Tenable has extracted the...

Oracle Linux 10 : grafana (ELSA-2026-19134)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19134 advisory. - Resolves: RHEL-183694: CVE-2026-39821 - Resolves RHEL-161791: CVE-2026-27877 - Resolves RHEL-166459: CVE-2026-32282 Tenable has extracted the...

Oracle Linux 10 : go-fdo-client (ELSA-2026-19139)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-19139 advisory. - Rebuild to fix CVE-2026-32282 and CVE-2025-68121 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Not...

Oracle Linux 10 : grafana (ELSA-2026-35827)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-35827 advisory. - Resolves: RHEL-183694: CVE-2026-39821 - Resolves RHEL-161791: CVE-2026-27877 - Resolves RHEL-166459: CVE-2026-32282 Tenable has extracted the preceding...