Important: Red Hat Security Advisory: RHTAS 1.2.1- Red Hat Trusted Artifact Signer Release

The 1.2.1 release of Red Hat Trusted Artifact Signer OpenShift Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.2 The RHTAS Operator can be used with OpenShift Container Platform 4.15, 4.16, 4.17, 4.18...

Important: Red Hat Security Advisory: RHTAS 1.2.1 - Red Hat Trusted Artifact Signer Release

The 1.2.1 release of Red Hat Trusted Artifact Signer OpenShift Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.2 The RHTAS Operator can be used with OpenShift Container Platform 4.15, 4.16, 4.17, 4.18...

Important: Red Hat Security Advisory: RHTAS 1.2.1 - Red Hat Trusted Artifact Signer Release

The 1.2.1 release of Red Hat Trusted Artifact Signer OpenShift Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.2 The RHTAS Operator can be used with OpenShift Container Platform 4.15, 4.16, 4.17, 4.18...

Important: Red Hat Security Advisory: RHTAS 1.2.1 - Red Hat Trusted Artifact Signer Release

The 1.2.1 release of Red Hat Trusted Artifact Signer OpenShift Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.2 The RHTAS Operator can be used with OpenShift Container Platform 4.15, 4.16, 4.17, 4.18...

SUSE CVE-2025-55196

External Secrets Operator is a Kubernetes operator that integrates external secret management systems. From version 0.15.0 to before 0.19.2, a vulnerability was discovered where the List calls for Kubernetes Secret and SecretStore resources performed by the PushSecret controller did not apply a...

CVE-2025-8959 vulnerabilities

Vulnerabilities for packages: snyk-cli, rancher-fleet, kubescape, kots, syft, tflint, steampipe, terraform, trivy-operator, tfsec, wolfictl, xeol, zarf, grype, trivy, k9s, conftest, terragrunt, opentofu, zot...

GHSA-WJRX-6529-HCJ3 vulnerabilities

Vulnerabilities for packages: snyk-cli, rancher-fleet, kubescape, kots, syft, tflint, steampipe, terraform, trivy-operator, tfsec, wolfictl, xeol, zarf, grype, trivy, k9s, conftest, terragrunt, opentofu, zot...

CVE-2025-8959 vulnerabilities

Vulnerabilities for packages: conftest, trivy, syft-fips, tfsec, trivy-operator-fips, opentofu-fips, rancher-fleet-fips, grype, cloudbeat-fips, zarf, k9s, k9s-fips, syft, wolfictl, terraform, kots, conftest-fips, chainctl, terraform-fips, grype-db, opentofu, kubescape, trivy-operator, snyk-cli,...

GHSA-WJRX-6529-HCJ3 vulnerabilities

Vulnerabilities for packages: conftest, trivy, syft-fips, tfsec, trivy-operator-fips, opentofu-fips, rancher-fleet-fips, grype, cloudbeat-fips, zarf, k9s, k9s-fips, syft, wolfictl, terraform, kots, conftest-fips, chainctl, terraform-fips, grype-db, opentofu, kubescape, trivy-operator, snyk-cli,...

CVE-2025-38522

In the Linux kernel, the following vulnerability has been resolved: sched/ext: Prevent updatelockedrq calls with NULL rq Avoid invoking updatelockedrq when the runqueue rq pointer is NULL in the SCXCALLOP and SCXCALLOPRET macros. Previously, calling updatelockedrqNULL with preemption enabled coul...

CVE-2025-55196

External Secrets Operator is a Kubernetes operator that integrates external secret management systems. From version 0.15.0 to before 0.19.2, a vulnerability was discovered where the List calls for Kubernetes Secret and SecretStore resources performed by the PushSecret controller did not apply a...

CVE-2025-55199 vulnerabilities

Vulnerabilities for packages: pluto, envoy-gateway, helm-set-status, rancher-fleet, kubescape, kots, headlamp, helm-push, helm-mapkubeapis, cluster-api-helm-controller, linkerd2, cilium-cli, nova, zot, istio, kargo, helm-docs, trivy-operator, tw, cert-manager-cmctl, k8ssandra-client, chart-testin...

CVE-2025-55198 vulnerabilities

Vulnerabilities for packages: pluto, envoy-gateway, helm-set-status, rancher-fleet, kubescape, kots, headlamp, helm-push, helm-mapkubeapis, cluster-api-helm-controller, linkerd2, cilium-cli, nova, zot, istio, kargo, helm-docs, trivy-operator, cert-manager-cmctl, k8ssandra-client, chart-testing,...

GHSA-F9F8-9PMF-XV68 vulnerabilities

Vulnerabilities for packages: pluto, envoy-gateway, helm-set-status, rancher-fleet, kubescape, kots, headlamp, helm-push, helm-mapkubeapis, cluster-api-helm-controller, linkerd2, cilium-cli, nova, zot, istio, kargo, helm-docs, trivy-operator, cert-manager-cmctl, k8ssandra-client, chart-testing,...

GHSA-9H84-QMV7-982P vulnerabilities

Vulnerabilities for packages: pluto, envoy-gateway, helm-set-status, rancher-fleet, kubescape, kots, headlamp, helm-push, helm-mapkubeapis, cluster-api-helm-controller, linkerd2, cilium-cli, nova, zot, istio, kargo, helm-docs, trivy-operator, tw, cert-manager-cmctl, k8ssandra-client, chart-testin...

Police Bust Crypto Scammers, Nab Smishing SMS Blaster Operator

Thai police arrest SMS Blaster operator in smishing scam and bust crypto laundering gang moving $30M monthly through…...

CVE-2025-8916 vulnerabilities

Vulnerabilities for packages: druid, kserve-modelmesh, zipkin, thingsboard...

GHSA-PRJ3-CCX8-P6X4 vulnerabilities

Vulnerabilities for packages: akhq, apicurio-registry, celeborn, trino, thingsboard, sonarqube, strimzi-kafka-operator, apache-nifi, wildfly, druid, flyway, keycloak, spark, management-api-for-apache-cassandra-5.0, kserve-modelmesh, tez...

GHSA-4CX2-FC23-5WG6 vulnerabilities

Vulnerabilities for packages: druid, kserve-modelmesh, zipkin, thingsboard...

CVE-2025-55163 vulnerabilities

Vulnerabilities for packages: akhq, apicurio-registry, celeborn, trino, thingsboard, sonarqube, strimzi-kafka-operator, apache-nifi, wildfly, druid, flyway, keycloak, spark, management-api-for-apache-cassandra-5.0, kserve-modelmesh, tez...