ALSA-2026:33285 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: net: atm: fix crash due to unvalidated vcc pointer in sigdsend CVE-2026-31411 kernel: tcp: fix potential race in tcpv6synrecvsock CVE-2026-43198 Bug Fixes and Enhancements: AlmaLinux 9.8...

CVE-2026-48496 vulnerabilities

Vulnerabilities for packages: elastic-agent, elastic-agent-fips...

GHSA-F2R5-5M7W-P5CX vulnerabilities

Vulnerabilities for packages: elastic-agent, elastic-agent-fips...

CVE-2026-46604 vulnerabilities

Vulnerabilities for packages: rclone-fips, listmonk, hugo, rclone, seaweedfs-operator-fips, seaweedfs-fips, mattermost-fips, seaweedfs-operator, seaweedfs, mattermost, gitlab-workhorse-ce...

GHSA-QVQC-4C52-X6QP vulnerabilities

Vulnerabilities for packages: guac, kube-arangodb, kube-arangodb-fips, gpu-operator, gpu-operator-fips...

CVE-2026-49349 vulnerabilities

Vulnerabilities for packages: guac, kube-arangodb, kube-arangodb-fips, gpu-operator, gpu-operator-fips...

CVE-2025-8101 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips...

GHSA-95JQ-XPH2-CX9H vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips...

CVE-2026-39395 vulnerabilities

Vulnerabilities for packages: crossplane, commercial-kyverno, crossplane-fips, ratify-fips, trivy-operator, kubescape-server-fips, cloudbeat, kubescape, chainctl-fips, policy-controller-fips, ratify, aactl, teleport, chainctl, kyverno-notation-aws, trivy-fips, slsa-verifier, trivy-operator-fips,...

EulerOS 2.0 SP15 : openssl (EulerOS-SA-2026-2497)

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: Applications using RSASVE key encapsulation to establishx000D a secret encryption key can send contents of an uninitialized memory...

CVE-2026-30405 vulnerabilities

Vulnerabilities for packages: kube-vip-fips, kube-vip, cilium-cli...

GHSA-4P9M-8GC4-RW2H vulnerabilities

Vulnerabilities for packages: kube-vip-fips, kube-vip, cilium-cli...

CVE-2026-46601 vulnerabilities

Vulnerabilities for packages: bento, gitea, seaweedfs-operator-fips, gitea-fips, seaweedfs-fips, mailpit, kubescape-server-fips, seaweedfs, bento-fips, mattermost, rclone-fips, kubescape, rclone, ollama, mattermost-fips, seaweedfs-operator, gitlab-workhorse-ce, pdfcpu, ollama-fips,...

CVE-2026-46602 vulnerabilities

Vulnerabilities for packages: rclone-fips, hugo, listmonk, rclone, filebrowser, mailpit-fips, seaweedfs-operator-fips, seaweedfs-rocksdb, seaweedfs-fips, seaweedfs-rocksdb-fips, mailpit, mattermost-fips, seaweedfs-operator, seaweedfs, mattermost, gitlab-workhorse-ce, hugo-fips, hugo-extended...

GHSA-PWFV-328H-75X9 vulnerabilities

Vulnerabilities for packages: rclone-fips, hugo, listmonk, rclone, filebrowser, mailpit-fips, seaweedfs-operator-fips, seaweedfs-rocksdb, seaweedfs-fips, seaweedfs-rocksdb-fips, mailpit, mattermost-fips, seaweedfs-operator, seaweedfs, mattermost, gitlab-workhorse-ce, hugo-fips, hugo-extended...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: crossplane, tbot, commercial-kyverno, crossplane-fips, ratify-fips, trivy-operator, kubescape-server-fips, tkn-fips, tekton-chains-fips, tflint, cloudbeat, kubescape, ko, chainctl-fips, policy-controller-fips, neuvector-sigstore-interface-fips, ratify, aactl, telepor...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: crossplane, tbot, commercial-kyverno, crossplane-fips, ratify-fips, trivy-operator, kubescape-server-fips, tkn-fips, tekton-chains-fips, tflint, cloudbeat, kubescape, ko, chainctl-fips, policy-controller-fips, neuvector-sigstore-interface-fips, ratify, aactl, telepor...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: istio, traefik, gitea, rancher-agent, commercial-kyverno, argo-cd, argo-cd-fips, argo-workflows-fips, containerd, etcd, kube-state-metrics, helm, cilium-cli, cloudbeat, kubescape, prometheus-elasticsearch-exporter, commercial-grafana, gitlab-workhorse-ce,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: istio, traefik, gitea, rancher-agent, commercial-kyverno, argo-cd, argo-cd-fips, argo-workflows-fips, containerd, etcd, kube-state-metrics, helm, cilium-cli, cloudbeat, kubescape, prometheus-elasticsearch-exporter, commercial-grafana, gitlab-workhorse-ce,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: istio, traefik, gitea, nuclei, trufflehog-fips, rancher-agent, commercial-kyverno, teleport-operator-fips, mapotf-fips, argo-cd, chainloop-cli-fips, argo-cd-fips, argo-workflows-fips, containerd, etcd, kube-state-metrics, helm, cilium-cli, redpanda-console,...