Important: Red Hat Security Advisory: RHTAS 1.2.1 - Red Hat Trusted Artifact Signer Release

The 1.2.1 release of Red Hat Trusted Artifact Signer OpenShift Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.2 The RHTAS Operator can be used with OpenShift Container Platform 4.15, 4.16, 4.17, 4.18...

SUSE CVE-2025-55196

External Secrets Operator is a Kubernetes operator that integrates external secret management systems. From version 0.15.0 to before 0.19.2, a vulnerability was discovered where the List calls for Kubernetes Secret and SecretStore resources performed by the PushSecret controller did not apply a...

CVE-2025-8959 vulnerabilities

Vulnerabilities for packages: trivy-operator, rancher-fleet, trivy, steampipe, tflint, zot, terraform, opentofu, terragrunt, k9s, snyk-cli, zarf, kots, xeol, grype, wolfictl, conftest, syft, tfsec, kubescape...

GHSA-WJRX-6529-HCJ3 vulnerabilities

Vulnerabilities for packages: trivy-operator, rancher-fleet, trivy, steampipe, tflint, zot, terraform, opentofu, terragrunt, k9s, snyk-cli, zarf, kots, xeol, grype, wolfictl, conftest, syft, tfsec, kubescape...

CVE-2025-8959 vulnerabilities

Vulnerabilities for packages: terragrunt, xeol-fips, terraform-fips, zot, conftest, kots, syft, opentofu, syft-fips, cloudbeat-fips, snyk-cli, steampipe, tfsec, grype-fips, trivy-operator-fips, chainctl, cloudbeat, conftest-fips, grype-db, wolfictl, opentofu-fips, trivy-operator, zarf, trivy,...

GHSA-WJRX-6529-HCJ3 vulnerabilities

Vulnerabilities for packages: terragrunt, xeol-fips, terraform-fips, zot, conftest, kots, syft, opentofu, syft-fips, cloudbeat-fips, snyk-cli, steampipe, tfsec, grype-fips, trivy-operator-fips, chainctl, cloudbeat, conftest-fips, grype-db, wolfictl, opentofu-fips, trivy-operator, zarf, trivy,...

CVE-2025-38522

In the Linux kernel, the following vulnerability has been resolved: sched/ext: Prevent updatelockedrq calls with NULL rq Avoid invoking updatelockedrq when the runqueue rq pointer is NULL in the SCXCALLOP and SCXCALLOPRET macros. Previously, calling updatelockedrqNULL with preemption enabled coul...

CVE-2025-55196

External Secrets Operator is a Kubernetes operator that integrates external secret management systems. From version 0.15.0 to before 0.19.2, a vulnerability was discovered where the List calls for Kubernetes Secret and SecretStore resources performed by the PushSecret controller did not apply a...

CVE-2025-55199 vulnerabilities

Vulnerabilities for packages: eksctl, flux-helm-controller, headlamp, trivy-operator, k8sgpt, rancher-fleet, chart-testing, k8ssandra-client, trivy, helm-mapkubeapis, helm-set-status, zot, linkerd2, cerbos, cilium-cli, helm-push, pluto, k9s, chartmuseum, flux-source-controller, zarf,...

CVE-2025-55198 vulnerabilities

Vulnerabilities for packages: eksctl, flux-helm-controller, headlamp, trivy-operator, k8sgpt, rancher-fleet, chart-testing, k8ssandra-client, trivy, helm-mapkubeapis, helm-set-status, zot, linkerd2, cerbos, cilium-cli, helm-push, pluto, k9s, chartmuseum, flux-source-controller, zarf,...

GHSA-F9F8-9PMF-XV68 vulnerabilities

Vulnerabilities for packages: eksctl, flux-helm-controller, headlamp, trivy-operator, k8sgpt, rancher-fleet, chart-testing, k8ssandra-client, trivy, helm-mapkubeapis, helm-set-status, zot, linkerd2, cerbos, cilium-cli, helm-push, pluto, k9s, chartmuseum, flux-source-controller, zarf,...

GHSA-9H84-QMV7-982P vulnerabilities

Vulnerabilities for packages: eksctl, flux-helm-controller, headlamp, trivy-operator, k8sgpt, rancher-fleet, chart-testing, k8ssandra-client, trivy, helm-mapkubeapis, helm-set-status, zot, linkerd2, cerbos, cilium-cli, helm-push, pluto, k9s, chartmuseum, flux-source-controller, zarf,...

Police Bust Crypto Scammers, Nab Smishing SMS Blaster Operator

Thai police arrest SMS Blaster operator in smishing scam and bust crypto laundering gang moving $30M monthly through…...

CVE-2025-8916 vulnerabilities

Vulnerabilities for packages: thingsboard, kserve-modelmesh, zipkin, druid...

GHSA-PRJ3-CCX8-P6X4 vulnerabilities

Vulnerabilities for packages: wildfly, akhq, apicurio-registry, apache-nifi, keycloak, strimzi-kafka-operator, thingsboard, trino, druid, tez, kserve-modelmesh, celeborn, management-api-for-apache-cassandra-5.0, apache-pulsar, flyway, spark, sonarqube...

GHSA-4CX2-FC23-5WG6 vulnerabilities

Vulnerabilities for packages: thingsboard, kserve-modelmesh, zipkin, druid...

CVE-2025-55163 vulnerabilities

Vulnerabilities for packages: wildfly, akhq, apicurio-registry, apache-nifi, keycloak, strimzi-kafka-operator, thingsboard, trino, druid, tez, kserve-modelmesh, celeborn, management-api-for-apache-cassandra-5.0, apache-pulsar, flyway, spark, sonarqube...

CVE-2025-8916 vulnerabilities

Vulnerabilities for packages: pinot-fips, camunda-zeebe, kayenta, opensearch, hadoop-fips, neo4j, zipkin, elasticsearch-fips, logstash, kserve-modelmesh, pinot, druid, kayenta-fips, thingsboard, elasticsearch...

CVE-2025-55163 vulnerabilities

Vulnerabilities for packages: apache-nifi, opensearch, localstack, apache-pulsar, kserve-modelmesh, spark-fips, apicurio-registry, thingsboard, tez, wildfly, elasticsearch-fips, grpc-java-fips, flyway, celeborn, seata, spark, elasticsearch, akhq, hadoop-fips, sonarqube, knative-kafka-broker, drui...

GHSA-4CX2-FC23-5WG6 vulnerabilities

Vulnerabilities for packages: pinot-fips, camunda-zeebe, kayenta, opensearch, hadoop-fips, neo4j, zipkin, elasticsearch-fips, logstash, kserve-modelmesh, pinot, druid, kayenta-fips, thingsboard, elasticsearch...