capslock

Capslock es una CLI de análisis de capacidades para paquetes Go que informa a los usuarios de las operaciones privilegiadas a las que puede acceder un paquete determinado. Esto funciona clasificando las capacidades de los paquetes Go mediante el seguimiento de llamadas transitivas a operaciones...

golang-x-text

Go Text Este repositorio contiene paquetes Go complementarios para el procesamiento de texto, muchos de los cuales involucran Unicode. Versiones de CLDR Es importante que la versión de Unicode utilizada en x/text coincida con la utilizada por tu compilador de Go. El repositorio x/text soporta...

RHEL 8 : osbuild-composer (RHSA-2026:67148)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:67148 advisory. A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building...

AlmaLinux 10 : git-lfs (ALSA-2026:64788)

The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:64788 advisory. encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-33818 net/url: golang: golang net/url: Denial o...

Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-39883 DESCRIPTION: OpenTelemetry-Go is the Go implementation of OpenTelemetry. From 1.15.0 to 1.42.0, the fix for CVE-2026-24051 changed the Darwin iore...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.17.57 security and extras update

Red Hat OpenShift Container Platform release 4.17.57 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.17. Red Hat Product Security has rated this update as having a security impact of...

RHCOS 4 : OpenShift Container Platform 4.17.57 (RHSA-2026:60018)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:60018 advisory. - crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption CVE-2025-68121 - net/url: Incorrect parsin...

GO-2026-6293 vulnerabilities

Vulnerabilities for packages: falcosidekick-ui-fips, kube-metrics-adapter, temporal, kube-metrics-adapter-fips, listmonk, temporal-ui-server-fips, temporal-fips, falcosidekick-ui, temporal-ui-server...

GO-2026-6255 vulnerabilities

Vulnerabilities for packages: trivy-operator-fips, guac, skaffold-fips, podman, conftest, zot, cloudbeat, conftest-fips, livekit-cli, kaniko-fips, kaniko, skaffold, cloudbeat-fips, podman-fips, scorecard, kubescape, trivy, trivy-fips, kubescape-server, kubescape-server-fips, docker-fips...

RHCOS 4 : OpenShift Container Platform 4.15.68 (RHSA-2026:56910)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:56910 advisory. - crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption CVE-2025-68121 - net/url: Incorrect parsin...

RHEL 9 : osbuild-composer (RHSA-2026:57541)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:57541 advisory. A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building...

GO-2026-4770 vulnerabilities

Vulnerabilities for packages: datadog-agent-fips, opencost, datadog-agent, gitlab-workhorse-ce, glab, flux-operator, livekit-cli, flux-operator-fips, ferretdb, gitlab-workhorse-ce-fips, opencost-fips, osv-scanner, jaeger-fips, jaeger...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib-fips, guac, cert-manager-cmctl, cert-manager-cmctl-fips, spire-server-fips, step-fips, vault, opa-fips, prometheus, fulcio-fips, conftest-fips, gomplate, kaniko, spegel, spicedb, terraform-docs, grpc-health-probe, kots,...

GO-2026-5597 vulnerabilities

Vulnerabilities for packages: chainloop-cli-fips, external-secrets-operator, syft, telegraf, skaffold-fips, cerbos-fips, nemo, syft-fips, argo-cd-fips, teleport, rclone-fips, kyverno-fips, external-secrets-operator-fips, gitlab-rails-ce-fips, flux, scorecard, rancher-fleet-fips, grafana,...

GO-2024-2659 vulnerabilities

Vulnerabilities for packages: syft, loki, aactl, spire-server-fips, melange, grype, crossplane, conftest, cilium-cli, up, prometheus, zot, wolfictl, conftest-fips, kaniko, buildkitd, cadvisor, kubescape, trivy, ko, buf, cadvisor-fips, kargo, ctop, docker-compose, spire-server, dagger, tkn...

GO-2026-5851 vulnerabilities

Vulnerabilities for packages: tekton-chains-fips, trivy-operator-fips, trivy-operator, aactl, spire-server-fips, neuvector-sigstore-interface-fips, neuvector-sigstore-interface, crossplane, teleport, policy-controller, cloudbeat, goreleaser, kyverno-fips, kyverno-notation-aws-fips, tbot, zarf-fip...

GO-2024-2718 vulnerabilities

Vulnerabilities for packages: tekton-chains-fips, vexctl, aactl, spire-server-fips, melange, neuvector-sigstore-interface, apko, policy-controller, ko-fips, zot, goreleaser, wolfictl, slsa-verifier, tekton-chains, skaffold, chainctl, zarf, kubescape, flux-source-controller, gitsign, falcoctl,...

GO-2025-3887 vulnerabilities

Vulnerabilities for packages: flux-source-controller, helm-mapkubeapis, linkerd2, nova, kargo, flux, trivy, chartmuseum, cilium-cli, helm-push, cluster-api-helm-controller, k8sgpt, chart-testing, cerbos, k9s, helm-set-status, zarf, helm-docs, headlamp, envoy-gateway, istio, cert-manager-cmctl,...

GO-2024-2719 vulnerabilities

Vulnerabilities for packages: tekton-chains, ko, flux-source-controller, aactl, wolfictl, slsa-verifier, skaffold, neuvector-sigstore-interface, spire-server, tkn, zarf, policy-controller, kubescape, melange, falcoctl, vexctl, goreleaser, gitsign, apko, zot...

Updated golang packages fix security vulnerabilities

The updated packages fix security vulnerabilities: mime: quadratic complexity in WordDecoder.DecodeHeader. CVE-2026-42504 net/textproto: arbitrary input are included in errors without any escaping. CVE-2026-42507 crypto/x509: split candidate hostname only once. CVE-2026-27145 os: Root escape via...