Important: Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.7.0 release

Red Hat OpenShift distributed tracing platform Tempo 3.7.0 has been released This release of the Red Hat OpenShift distributed tracing platform Tempo provides new features, security improvements, and bug fixes. Breaking changes: Nothing Deprecations: Nothing Technology Preview features: Nothing...

Finding Phones Fast: Low-Latency and Scalable Monitoring of Cellular Communications in Sensitive Areas

The widespread availability of cellular devices introduces new threat vectors that allow users or attackers to bypass security policies and physical barriers and bring unauthorized devices into sensitive areas. These threats can arise from user non-compliance or deliberate actions aimed at data...

Incorrect Calculation

Overview tensorflow is a machine learning framework. Affected versions of this package are vulnerable to Incorrect Calculation via the Embedding operator that always outputs 0 without XLA when inputdim=1 is set. An attacker can cause the application to produce unpredictable or incorrect outputs b...

Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images

Summary Multiple vulnerabilities were addressed in IBM MQ Operator and Queue manager container images Vulnerability Details CVEID:CVE-2025-22874 DESCRIPTION: Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy validation. This only affected...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: kube-bench, cloud-sql-proxy, eksctl, nri-haproxy, envconsul, caddy, cloud-provider-vsphere, opa, grafana-alloy, kubecolor, dive, kuberlr, chart-testing, buildkitd, zot, prometheus, nodetaint, cluster-api-helm-controller, nri-apache, k8sgateway, cilium-cli, harbor-cli...

CVE-2025-47910 vulnerabilities

Vulnerabilities for packages: cerbos, cilium-cli, monstache, kubecolor, timescaledb-tune, mockgen, bom, nri-rabbitmq, nuclei, src, falcoctl, dex, wait-for-port, neuvector, headlamp, fulcio, rabbitmq-default-user-credential-updater, teleport, yunikorn-k8shim, kubernetes-dashboard-api, ip-masq-agen...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: cerbos, cilium-cli, monstache, kubecolor, timescaledb-tune, mockgen, bom, nri-rabbitmq, nuclei, src, falcoctl, dex, wait-for-port, neuvector, headlamp, fulcio, rabbitmq-default-user-credential-updater, teleport, yunikorn-k8shim, kubernetes-dashboard-api, ip-masq-agen...

Migrating Veeam Kasten for Kubernetes to the Red Hat Certified Operators Catalog

Challenge One or more of the following symptoms may be observed in a Red Hat OpenShift environment running Veeam Kasten for Kubernetes : Upgrades are no longer available for the Veeam Kasten operator installed from the Red Hat Operator Marketplace catalog. Veeam Kasten Enterprise - Term or Veeam...

Moderate: Red Hat Security Advisory: Red Hat build of Keycloak 26.2.9 Images Security Update

New images are available for Red Hat build of Keycloak 26.2.9 and Red Hat build of Keycloak 26.2.9 Operator, running on OpenShift Container Platform Red Hat build of Keycloak is an integrated sign-on solution, available as a Red Hat JBoss Middleware for OpenShift containerized image. The Red Hat...

openSUSE Security Advisory (SUSE-SU-2025:03278-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: nats, gitsign, lvm-driver, vault-benchmark, terraform-provider-time, newrelic-nri-statsd, gostatsd, confluent-common-docker, rancher-machine, k8sgpt-operator, container-object-storage-interface, kube-vip, linkerd2-proxy-init, secrets-store-csi-driver-provider-aws,...

CVE-2025-58767 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, jruby...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: nats, gitsign, lvm-driver, vault-benchmark, terraform-provider-time, newrelic-nri-statsd, gostatsd, confluent-common-docker, rancher-machine, k8sgpt-operator, container-object-storage-interface, kube-vip, linkerd2-proxy-init, secrets-store-csi-driver-provider-aws,...

GHSA-C2F4-JGMC-Q2R5 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, jruby...

CVE-2025-58767 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, gitlab-rails-ce-fips, truffleruby, ruby3.4-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset, jruby, ruby3.3-fluentd-kubernetes-daemonset, gitlab-rails-ce, logstash...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: nemo, blob-csi-fips, local-path-provisioner, mattmoor-chainit, nvidia-nsight-compute-12.9, octo-sts, wazero-fips, kube-logging-operator-custom-runner-fips, azurefile-csi-fips, cloud-provider-aws-fips, terraform-provider-tls-fips, mongodb-kubernetes-operator,...

GHSA-C2F4-JGMC-Q2R5 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, gitlab-rails-ce-fips, truffleruby, ruby3.4-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset, jruby, ruby3.3-fluentd-kubernetes-daemonset, gitlab-rails-ce, logstash...

weblogic-monitoring-exporter

This is a Java-based project for exporting metrics from WebLogic Server WLS instances to Prometheus. The project is available in two forms: a web application and a separate process. The web application is deployed to the server from which metrics are to be extracted, while the separate process is...

Security update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-t

This update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container fixes the following issues: This...

SUSE-SU-2025:03278-1 Security update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container

This update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container fixes the following issues: This...