CLEANSTART-2026-ZQ57784 Security fixes in knative-serving 1.21.3-r0

Package knative-serving version 1.21.3-r0 fixes 5 vulnerabilities: CVE-2026-33186, CVE-2026-24051, CVE-2026-29181, CVE-2026-39882, CVE-2026-39883...

CLEANSTART-2026-FE38987 Security fixes in schema-registry 8.1.2-r0

Package schema-registry version 8.1.2-r0 fixes 5 vulnerabilities: CVE-2025-12383, CVE-2026-34477, CVE-2026-34478, CVE-2026-34479, CVE-2026-34480...

CLEANSTART-2026-IV57525 Security fixes in clamav 0.99.4-r0

Package clamav version 0.99.4-r0 fixes 5 vulnerabilities: CVE-2012-6706, CVE-2017-6419, CVE-2017-11423, CVE-2018-0202, CVE-2018-1000085...

CLEANSTART-2026-ZW95372 Security fixes in kubernetes-csi-external-snapshotter-fips 8.5.0-r2

Package kubernetes-csi-external-snapshotter-fips version 8.5.0-r2 fixes 8 vulnerabilities: CVE-2026-27143, CVE-2026-32281, CVE-2026-32280, CVE-2026-27140, CVE-2026-32283...

CLEANSTART-2026-UF04910 Security fixes in node-problem-detector 0.8.19-r2

Package node-problem-detector version 0.8.19-r2 fixes 5 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139, CVE-2026-27137, CVE-2026-27138...

CLEANSTART-2026-JY49884 Security fixes in kibana 9.3.2-r3

Package kibana version 9.3.2-r3 fixes 45 vulnerabilities: ghsa-2w6w-674q-4c4q, ghsa-xq3m-2v4x-88gg, ghsa-pf86-5x62-jrwf, ghsa-6chq-wfr3-2hj9, ghsa-v9p9-hfj2-hcw8...

CLEANSTART-2026-QH30636 Security fixes in karpenter 1.9.0-r0

Package karpenter version 1.9.0-r0 fixes 5 vulnerabilities: CVE-2026-32283, CVE-2026-32281, CVE-2026-32280, CVE-2026-25679, CVE-2026-32282...

CLEANSTART-2026-YN06108 Security fixes in yunikorn-k8shim 1.7.0-r0

Package yunikorn-k8shim version 1.7.0-r0 fixes 5 vulnerabilities: ghsa-vvgc-356p-c3xw, CVE-2025-68121, CVE-2025-61732, CVE-2025-47911, CVE-2025-58190...

CLEANSTART-2026-ZD86302 Security fixes in neuvector-fips 5.4.8-r0

Package neuvector-fips version 5.4.8-r0 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139...

CLEANSTART-2026-UX42844 Security fixes in metrics-server 0.8.0-r0

Package metrics-server version 0.8.0-r0 fixes 5 vulnerabilities: CVE-2025-61727, CVE-2025-61729, CVE-2025-47907, CVE-2025-0913, CVE-2025-4673...

CLEANSTART-2026-AA33691 Security fixes in calico-fips 3.28.5-r4

Package calico-fips version 3.28.5-r4 fixes 5 vulnerabilities: CVE-2026-33186, CVE-2026-25679, CVE-2026-27142, CVE-2026-27139, CVE-2025-13281...

CLEANSTART-2026-AA56293 Security fixes in fluent-bit-plugin-loki 3.6.5-r0

Package fluent-bit-plugin-loki version 3.6.5-r0 fixes 5 vulnerabilities: CVE-2026-27139, CVE-2026-27142, CVE-2026-24051, CVE-2026-25679, CVE-2026-33186...

EUVD-2026-50973

When enabling Spring Boot DevTools support for a remote application target for example a Docker container or Cloud Foundry app from the Spring Tools Boot Dashboard, Spring Tools generates a shared secret that authenticates DevTools remote-restart uploads to the deployed application. This secret w...

CVE-2026-67247

A path traversal vulnerability was found in the IHM Log handling of ADM. The vulnerability occurs because user-controlled disk serial input is not sufficiently validated before being used to construct the path of an IHM log database file. An authenticated attacker can exploit this issue to cause...

EUVD-2026-50965

A stack-based buffer overflow vulnerability was found in the File Explorer on the ADM. The vulnerability occurs because user-controlled input is not properly validated before being decoded and copied into a fixed-size stack buffer. An authenticated attacker can exploit this issue to cause denial ...

EUVD-2026-50964

A path traversal vulnerability was found in the IHM Log handling of ADM. The vulnerability occurs because user-controlled disk serial input is not sufficiently validated before being used to construct the path of an IHM log database file. An authenticated attacker can exploit this issue to cause...

CVE-2026-67245 A path traversal vulnerability was found in the VPN Clients on the ADM

A path traversal vulnerability was found in the VPN Clients on the ADM. The vulnerability occurs because user-controlled certificate name input is not sufficiently validated before being used to construct the upload destination path. An authenticated attacker can exploit this issue to write an...

CVE-2026-67244

A format string vulnerability in ADM’s Notification OAuth settings is triggered by user-controlled notification configuration input that is processed via an unsafe format-string operation. Exploitation requires authenticated administrator privileges and can disclose memory information or cause de...

EUVD-2026-50954

A format string vulnerability was found in the Internal Backup on the ADM. The vulnerability occurs because user-controlled task input may be included in an error response and processed through an unsafe format string operation. An authenticated attacker can exploit this issue to disclose memory...

EUVD-2026-50957

A stored format string vulnerability was found in the FTP Backup on the ADM. The vulnerability occurs because user-controlled backup configuration data may be written into a task log and later processed through an unsafe format string operation. An authenticated attacker can exploit this issue to...