CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: argo-cd, guac, nemo, grafana-alloy, flux, gitsign, kubevela-fips, gitlab-runner, zarf-fips, argo-events-fips, melange, mapotf-fips, google-osconfig-agent, skaffold, argo-events, xeol, act, nuclei, trufflehog, cerbos-fips, zot, crossplane, chainctl-fips,...

CVE-2026-41907 vulnerabilities

Vulnerabilities for packages: saf, nemo, renovate, jitsucom-jitsu, redisinsight, py3-captum, opensearch-dashboards-fips, azurite, gemini-cli, librechat, opensearch-dashboards, prism, langfuse, sqlpad, actions-runner, drupal, tensorflow-cpu-jupyter, kubeflow-katib, kubeflow-centraldashboard, npm,...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: openssl: openssl-3.5.6-0.3.hum1 aarch64, x8664 openssl-config-fips-3.5.6-0.3.hum1 aarch64, x8664 openssl-devel-3.5.6-0.3.hum1 aarch64, x8664 openssl-devel-engine-3.5.6-0.3.hum1 aarch64, x8664...

Security update for java-25-openjdk

This update for java-25-openjdk fixes the following issues: Update to upstream tag jdk-25.0.3+9 April 2026 CPU. Security issues fixed: CVE-2026-22007: Security: unauthenticated attacker with logon to the infrastructure where java executes can gain unauthorized read access to a subset of accessibl...

SUSE-SU-2026:1704-1 Security update for java-25-openjdk

This update for java-25-openjdk fixes the following issues: Update to upstream tag jdk-25.0.3+9 April 2026 CPU. Security issues fixed: - CVE-2026-22007: Security: unauthenticated attacker with logon to the infrastructure where java executes can gain unauthorized read access to a subset of...

CVE-2026-21728 vulnerabilities

Vulnerabilities for packages: grafana-fips...

CLSA-2026-1778051357 java-21-openjdk: Fix of 8 CVEs

Update to jdk-21.0.11+10 GA - Resolves Oracle April 2026 CPU CVEs: CVE-2026-22007, CVE-2026-22013, CVE-2026-22016, CVE-2026-22018, CVE-2026-22021, CVE-2026-34268, CVE-2026-34282 - CVE-2026-23865: integer overflow in ttvarloaditemvariationstore in bundled FreeType fixed via bump to 2.14.2 - Update...

GHSA-J452-XHG8-QG39 vulnerabilities

Vulnerabilities for packages: tileserver-gl-fips, wazuh-dashboard, opensearch-dashboards-fips, wazuh-dashboard-fips, opensearch-dashboards, tileserver-gl...

CVE-2026-5758 vulnerabilities

Vulnerabilities for packages: tileserver-gl-fips, wazuh-dashboard, opensearch-dashboards-fips, wazuh-dashboard-fips, opensearch-dashboards, tileserver-gl...

GHSA-RGGM-JJMC-3394 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips...

GHSA-Q2MW-FVJ9-VVCW vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, logstash, kube-fluentd-operator, kube-logging-operator, ruby3.2-net-imap, ruby3.4-net-imap, logstash-fips, gitlab-rails-ce, gitlab-rails-ce-fips, ruby4.0-net-imap, ruby3.4-rails, ruby4.0-rails, jruby, truffleruby, ruby3.3-net-imap, ruby3.3-rails...

CVE-2026-42246 vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, logstash, kube-fluentd-operator, kube-logging-operator, ruby3.2-net-imap, ruby3.4-net-imap, logstash-fips, gitlab-rails-ce, gitlab-rails-ce-fips, ruby4.0-net-imap, ruby3.4-rails, ruby4.0-rails, jruby, truffleruby, ruby3.3-net-imap, ruby3.3-rails...

CVE-2026-42256 vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, logstash, ruby3.2-net-imap, kube-logging-operator, ruby3.4-net-imap, logstash-fips, gitlab-rails-ce, gitlab-rails-ce-fips, ruby4.0-net-imap, ruby3.4-rails, ruby4.0-rails, jruby, truffleruby, ruby3.3-net-imap, ruby3.3-rails...

GHSA-87PF-FPWV-P7M7 vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, logstash, ruby3.2-net-imap, kube-logging-operator, ruby3.4-net-imap, logstash-fips, gitlab-rails-ce, gitlab-rails-ce-fips, ruby4.0-net-imap, ruby3.4-rails, ruby4.0-rails, jruby, truffleruby, ruby3.3-net-imap, ruby3.3-rails...

GHSA-VCGP-9326-PQCP vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, logstash, kube-fluentd-operator, kube-logging-operator, ruby3.2-net-imap, ruby3.4-net-imap, logstash-fips, gitlab-rails-ce, gitlab-rails-ce-fips, ruby4.0-net-imap, ruby3.4-rails, ruby4.0-rails, jruby, truffleruby, ruby3.3-net-imap, ruby3.3-rails...

CVE-2026-42038 vulnerabilities

Vulnerabilities for packages: saf, prism, langfuse-fips, langfuse, kibana, awx, nextcloud-server, wazuh-dashboard, jitsucom-jitsu, gitlab-rails-ce, gitlab-rails-ce-fips, redisinsight, opensearch-dashboards-fips, wazuh-dashboard-fips, lerna, opensearch-dashboards, kubeflow-katib,...

CVE-2026-42039 vulnerabilities

Vulnerabilities for packages: saf, prism, langfuse-fips, langfuse, kibana, awx, nextcloud-server, wazuh-dashboard, jitsucom-jitsu, gitlab-rails-ce, gitlab-rails-ce-fips, redisinsight, opensearch-dashboards-fips, wazuh-dashboard-fips, lerna, opensearch-dashboards, kubeflow-katib,...

CVE-2026-42044 vulnerabilities

Vulnerabilities for packages: saf, jitsucom-jitsu, redisinsight, opensearch-dashboards-fips, librechat, opensearch-dashboards, prism, langfuse, kubeflow-katib, kubeflow-centraldashboard, langfuse-fips, wazuh-dashboard, awx, gitlab-rails-ce-fips, nextcloud-server, kibana, gitlab-rails-ce,...

CVE-2026-42264 vulnerabilities

Vulnerabilities for packages: saf, jitsucom-jitsu, redisinsight, opensearch-dashboards-fips, librechat, opensearch-dashboards, prism, langfuse, kubeflow-katib, kubeflow-centraldashboard, langfuse-fips, wazuh-dashboard, awx, gitlab-rails-ce-fips, nextcloud-server, kibana, gitlab-rails-ce,...

CVE-2026-42033 vulnerabilities

Vulnerabilities for packages: saf, prism, langfuse-fips, langfuse, kibana, awx, nextcloud-server, wazuh-dashboard, jitsucom-jitsu, gitlab-rails-ce, gitlab-rails-ce-fips, redisinsight, opensearch-dashboards-fips, wazuh-dashboard-fips, lerna, opensearch-dashboards, kubeflow-katib,...