CLEANSTART-2026-GB48358 Security fixes in logstash-fips 9.3.0-r1

Package logstash-fips version 9.3.0-r1 fixes 2 vulnerabilities: ghsa-j4pr-3wm6-xx2r, ghsa-72hv-8253-57qq...

CLEANSTART-2026-II62284 Security fixes in k8ssandra-operator-fips 1.29.0-r1

Package k8ssandra-operator-fips version 1.29.0-r1 fixes 34 vulnerabilities: ghsa-p77j-4mvh-x3m3, CVE-2026-33186, CVE-2026-25679, CVE-2026-39820, CVE-2025-61726...

CLEANSTART-2026-GF99050 Security fixes in wave-fips 0.10.0-r1

Package wave-fips version 0.10.0-r1 fixes 9 vulnerabilities: CVE-2025-61726, CVE-2025-61730, CVE-2025-68121, CVE-2025-61728, CVE-2025-68119...

CLEANSTART-2026-AG86451 Security fixes in tomcat9 9.0.68-r0

Package tomcat9 version 9.0.68-r0 fixes 1 vulnerabilities: CVE-2022-42252...

CLEANSTART-2026-YB08694 Security fixes in metacontroller 4.13.1-r0

Package metacontroller version 4.13.1-r0 fixes 9 vulnerabilities: CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39836, CVE-2026-42499...

CLEANSTART-2026-FG71338 Security fixes in opentofu-fips 1.8.11-r5

Package opentofu-fips version 1.8.11-r5 fixes 9 vulnerabilities: CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288...

CLEANSTART-2026-RX81683 Security fixes in terragrunt-fips 0.99.5-r0

Package terragrunt-fips version 0.99.5-r0 fixes 9 vulnerabilities: CVE-2026-32280, ghsa-92mm-2pjq-r785, ghsa-78h2-9frx-2jm8, ghsa-w8rr-5gcm-pp58, ghsa-w8rr-5gcm-pp58...

CLEANSTART-2026-RZ67002 Security fixes in opentofu-fips 1.10.9-r2

Package opentofu-fips version 1.10.9-r2 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139...

CLEANSTART-2026-KT93959 Security fixes in tomcat9 9.0.80-r0

Package tomcat9 version 9.0.80-r0 fixes 1 vulnerabilities: CVE-2023-41080...

CLEANSTART-2026-SA98192 Security fixes in rabbitmq-messaging-topology-operator 1.19.2-r0

Package rabbitmq-messaging-topology-operator version 1.19.2-r0 fixes 9 vulnerabilities: CVE-2026-27145, CVE-2026-42504, CVE-2026-42507, CVE-2026-25681, CVE-2026-27136...

CLEANSTART-2026-KH99344 Security fixes in jitsucom-jitsu 2.11.0-r0

Package jitsucom-jitsu version 2.11.0-r0 fixes 9 vulnerabilities: ghsa-mwv6-3258-q52c, ghsa-w37m-7fhw-fmv9, CVE-2025-30218, CVE-2025-49005, CVE-2025-65945...

CLEANSTART-2026-BX73994 Security fixes in prometheus-redis-exporter-fips 1.78.0-r5

Package prometheus-redis-exporter-fips version 1.78.0-r5 fixes 9 vulnerabilities: CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825...

CLEANSTART-2026-BY85133 Security fixes in logstash-fips 9.3.0-r3

Package logstash-fips version 9.3.0-r3 fixes 2 vulnerabilities: CVE-2026-33210, ghsa-3m6g-2423-7cp3...

CLEANSTART-2026-JY49884 Security fixes in kibana 9.3.2-r3

Package kibana version 9.3.2-r3 fixes 45 vulnerabilities: ghsa-2w6w-674q-4c4q, ghsa-xq3m-2v4x-88gg, ghsa-pf86-5x62-jrwf, ghsa-6chq-wfr3-2hj9, ghsa-v9p9-hfj2-hcw8...

CLEANSTART-2026-QJ89264 Security fixes in wave-fips 0.9.0-r3

Package wave-fips version 0.9.0-r3 fixes 23 vulnerabilities: CVE-2025-68121, CVE-2025-61726, CVE-2025-61728, CVE-2025-61729, CVE-2026-25679...

CLEANSTART-2026-AW87167 Security fixes in logstash-fips 9.2.7-r1

Package logstash-fips version 9.2.7-r1 fixes 7 vulnerabilities: CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288...

CLEANSTART-2026-LA63432 Security fixes in tomcat9 9.0.71-r0

Package tomcat9 version 9.0.71-r0 fixes 1 vulnerabilities: CVE-2023-24998...

CLEANSTART-2026-WW37475 Security fixes in weaviate 1.36.11-r1

Package weaviate version 1.36.11-r1 fixes 9 vulnerabilities: CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825...

SUSE-SU-2026:3419-1 Security update for tomcat

This update for tomcat fixes the following issues: Update to Tomcat 9.0.120. Security issues fixed: - CVE-2026-59083: incorrect URL decoding in RewriteValve may allow security control bypass bsc1271397. - CVE-2026-59084: EncryptInterceptor requirements are not clearly documented bsc1271398. Other...

EUVD-2026-50967

The Admin and Site Enhancements ASE Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 8.9.0 via the recursivehtml function. This is due to the frontend save handler enforces only a publicly emitted nonce with no authentication check, CAPTCHA...