CLEANSTART-2026-UM67329 Security fixes for CVE-2025-61729, CVE-2026-27140, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39822, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42505, CVE-2026-56852, ghsa-p77j-4mvh-x3m3 applied in versions: 0.9.2-r0, 1.0.1-r0, 1.1.0-r0

Multiple security vulnerabilities affect the kube-vip package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RV11606 Security fixes for CVE-2025-47911, CVE-2025-47912, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-58190, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61729, CVE-2026-25679, CVE-2026-27137, CVE-2026-27138, CVE-2026-27139, CVE-2026-27142, CVE-2026-39822, CVE-2026-42505, CVE-2026-46600, CVE-2026-56852 applied in versions: 1.4.10-r0, 1.4.13-r0, 1.4.14-r0, 1.4.19-r0, 1.4.8-r0

Multiple security vulnerabilities affect the stakater-reloader package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-MZ40522 Security fixes for CVE-2026-39822, CVE-2026-42504, CVE-2026-42505 applied in versions: 0.22.1-r0, 0.24.6-r2

Multiple security vulnerabilities affect the nats-streaming package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CR75797 Security fixes for CVE-2026-25645, CVE-2026-39822, CVE-2026-42505, CVE-2026-59884, CVE-2026-59885, CVE-2026-59886 applied in versions: 2.20.0-r0, 2.20.0-r1

Multiple security vulnerabilities affect the tensorflow-gpu-jupyter package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-LB41442 Security fixes for CVE-2021-0341, CVE-2022-1471, CVE-2023-3635, CVE-2025-67735, CVE-2026-33870, CVE-2026-33871, CVE-2026-41417, CVE-2026-42578, CVE-2026-42579, CVE-2026-42580, CVE-2026-42581, CVE-2026-42583, CVE-2026-42584, CVE-2026-42585, CVE-2026-42587, CVE-2026-44249, CVE-2026-45416, CVE-2026-45536, CVE-2026-45673, CVE-2026-45674, CVE-2026-47244, CVE-2026-47691, CVE-2026-48043, CVE-2026-50010, CVE-2026-50020, CVE-2026-50560, CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, CVE-2026-54515, ghsa-38f8-5428-x5cv, ghsa-3cqm-mf7h-prrj, ghsa-3qp7-7mw8-wx86, ghsa-45q3-82m4-75jr, ghsa-563q-j3cm-6jxm, ghsa-57rv-r2g8-2cj3, ghsa-5jmj-h7xm-6q6v, ghsa-5pvg-856g-cp85, ghsa-5x3r-wrvg-rp6q, ghsa-676x-f7gg-47vc, ghsa-72hv-8253-57qq, ghsa-84h7-rjj3-6jx4, ghsa-c2gf-v879-257j, ghsa-c653-97m9-rcg9, ghsa-cm33-6792-r9fm, ghsa-f6hv-jmp6-3vwv, ghsa-hgj6-7826-r7m5, ghsa-hvcg-qmg6-jm4c, ghsa-j3rv-43j4-c7qm, ghsa-m4cv-j2px-7723, ghsa-mj4r-2hfc-f8p6, ghsa-mjmj-j48q-9wg2, ghsa-pwqr-wmgm-9rr8, ghsa-rmj7-2vxq-3g9f, ghsa-v8h7-rr48-vmmv, ghsa-w33c-445m-f8w7, ghsa-w573-9ffj-6ff9, ghsa-w9fj-cfpg-grvv, ghsa-x4gw-5cx5-pgmh, ghsa-xmv7-r254-6q78, ghsa-xxqh-mfjm-7mv9 applied in versions: 3.3.0-r1, 3.3.0-r2

Multiple security vulnerabilities affect the s3proxy package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-PH23874 Security fixes for CVE-2025-61729, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-32952, CVE-2026-39821, CVE-2026-39822, CVE-2026-39883, CVE-2026-42502, CVE-2026-42505, CVE-2026-42506, CVE-2026-46600, CVE-2026-56852, ghsa-hfvc-g4fc-pqhx, ghsa-mh2q-q3fh-2475, ghsa-mpwr-8vm7-h73f, ghsa-pjcq-xvwq-hhpj applied in versions: 1.1.0-r0, 2.4.1-r0, 2.5.0-r0, 2.6.0-r1, 2.6.0-r3, 2.7.0-r1

Multiple security vulnerabilities affect the external-secrets-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZA15834 Security fixes for CVE-2026-39822, CVE-2026-42504, CVE-2026-42505, CVE-2026-56852 applied in versions: 1.11.1-r7

Multiple security vulnerabilities affect the velero-plugin-for-aws package. These issues are resolved in later releases. See references for individual vulnerability details...

OPENSUSE-SU-2026:11322-1 python313-Js2Py-0.74-6.1 on GA media

These are all security issues fixed in the python313-Js2Py-0.74-6.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11319-1 7zip-26.02-1.1 on GA media

These are all security issues fixed in the 7zip-26.02-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11320-1 libntfs-3g-devel-2022.10.3-8.1 on GA media

These are all security issues fixed in the libntfs-3g-devel-2022.10.3-8.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-63451

These are all security issues fixed in the perl-YAML-1.320.0-1.1 package on the GA media of openSUSE Tumbleweed...

Oracle Linux 10 : xorg-x11-server-Xwayland (ELSA-2026-19125)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19125 advisory. - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263 Resolve...

PT-2026-63492

Name of the Vulnerable Software and Affected Versions MPG WordPress plugin versions prior to 4.1.8 Description An issue exists where the software fails to sanitize and escape parameters before reflecting them in the response. This allows an unauthenticated attacker to execute reflected cross-site...

hplip security update

3.23.12-10.5 - RHEL-192007 CVE-2026-14544 hplip: Incomplete Fix for CVE-2026-8631 3.23.12-10.4 - Fix more leaks in hpcups 3.23.12-10.3 - OSH fixes after CVE-2026-8631 3.23.12-10.2 - CVE-2026-8631 hplip: Arbitrary code execution and privilege escalation via integer overflow in hpcups 3.23.12-10.1 ...

OPENSUSE-SU-2026:11321-1 perl-YAML-1.320.0-1.1 on GA media

These are all security issues fixed in the perl-YAML-1.320.0-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-62011

Name of the Vulnerable Software and Affected Versions Malcolm versions prior to 26.07.0 Description The safe-extract.py script fails to implement traversal protection when creating directory entries using the os.makedirsos.path.joindest, entry.pathname function. An attacker can upload a malicious...

PT-2026-63452

These are all security issues fixed in the python313-Js2Py-0.74-6.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-62010

Name of the Vulnerable Software and Affected Versions Malcolm versions prior to 26.07.0 Description The safe-extract.py script extracts uploaded archives without imposing limits on the number of entries, directory depth, total entries, or output size. An attacker can use a small malicious archive...

PT-2026-64437

Name of the Vulnerable Software and Affected Versions libsrt1 5 versions prior to 1.5.6-1.1 Description A heap-based buffer overflow occurs during the handling of KMREQ. A heap-based buffer overflow is a memory corruption issue where a program writes more data to a heap-allocated buffer than it c...

PT-2026-63450

These are all security issues fixed in the libntfs-3g-devel-2022.10.3-8.1 package on the GA media of openSUSE Tumbleweed...