Important Photon OS Security Update - PHSA-2026-5.0-0819

Updates of 'squid', 'systemd' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2026-4.0-0997

Updates of 'strongswan' packages of Photon OS have been released...

CVE-2025-66491 vulnerabilities

Vulnerabilities for packages: traefik...

Linux Distros Unpatched Vulnerability : CVE-2026-40385

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: boost: boost-1.90.0-7.hum1 aarch64, x8664 boost-atomic-1.90.0-7.hum1 aarch64, x8664 boost-b2-1.90.0-7.hum1 aarch64, x8664 boost-build-1.90.0-7.hum1 noarch boost-charconv-1.90.0-7.hum1 aarch64,...

CVE-2026-32695 vulnerabilities

Vulnerabilities for packages: traefik-fips, traefik...

GHSA-6R7G-3MM3-FHW7 vulnerabilities

Vulnerabilities for packages: nodejs...

CVE-2026-21713 vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-XV6W-GXJ8-V943 vulnerabilities

Vulnerabilities for packages: nodejs...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: argo-cd, docker-cli, flux-source-controller, rclone, sriov-network-device-plugin, kube-fluentd-operator, scorecard, helm, regclient, vault-env, cilium-cli, goreleaser, seaweedfs, vendir, dask-gateway, redpanda, vault-benchmark, cosign, datadog-agent, rook, mailpit,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: argo-cd, docker-cli, flux-source-controller, rclone, sriov-network-device-plugin, kube-fluentd-operator, scorecard, helm, regclient, vault-env, cilium-cli, goreleaser, seaweedfs, vendir, dask-gateway, redpanda, vault-benchmark, cosign, datadog-agent, rook, mailpit,...

GHSA-M4PR-4J3G-9V7V vulnerabilities

Vulnerabilities for packages: argo-cd, postgres-operator, sbomqs, flux-source-controller, opentelemetry-operator, regclient, mountpoint-s3-csi-driver, frp, dkron, gostatsd, memcached-exporter, nri-elasticsearch, seaweedfs, nfpm, hugo-extended, amazon-k8s-cni, terraform-provider-kubernetes, k3d,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: argo-cd, postgres-operator, sbomqs, flux-source-controller, opentelemetry-operator, regclient, mountpoint-s3-csi-driver, frp, dkron, gostatsd, memcached-exporter, nri-elasticsearch, seaweedfs, nfpm, hugo-extended, velero-plugin-for-aws, amazon-k8s-cni,...

CVE-2026-27140 vulnerabilities

Vulnerabilities for packages: argo-cd, postgres-operator, sbomqs, flux-source-controller, opentelemetry-operator, regclient, mountpoint-s3-csi-driver, frp, dkron, gostatsd, memcached-exporter, nri-elasticsearch, seaweedfs, nfpm, hugo-extended, velero-plugin-for-aws, amazon-k8s-cni,...

CVE-2026-32280 vulnerabilities

Vulnerabilities for packages: argo-cd, postgres-operator, sbomqs, flux-source-controller, opentelemetry-operator, regclient, mountpoint-s3-csi-driver, frp, dkron, gostatsd, memcached-exporter, nri-elasticsearch, seaweedfs, nfpm, hugo-extended, amazon-k8s-cni, terraform-provider-kubernetes, k3d,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: argo-cd, postgres-operator, sbomqs, flux-source-controller, opentelemetry-operator, regclient, mountpoint-s3-csi-driver, frp, dkron, gostatsd, memcached-exporter, nri-elasticsearch, seaweedfs, nfpm, hugo-extended, amazon-k8s-cni, terraform-provider-kubernetes, k3d,...

GHSA-CFR8-F5Q7-84WQ vulnerabilities

Vulnerabilities for packages: nodejs...

CVE-2026-27140 vulnerabilities

Vulnerabilities for packages: spicedb-operator, velero-plugin-for-csi, cloud-provider-azure, rancher-security-scan, timescaledb-tune, external-secrets-operator, dex, nri-mongodb, mongodb-kubernetes-operator-fips, custom-pod-autoscaler, xcaddy, apko, apache-beam-java-sdk, mockery, spqr, openbao,...

GHSA-M4PR-4J3G-9V7V vulnerabilities

Vulnerabilities for packages: request-1279-14, jobset-fips, helm-mapkubeapis, prometheus-pgbouncer-exporter-fips, spicedb-operator, nemo, aws-signer-notation-plugin, commercial-expanso-edge, datadog-agent, prometheus-elasticsearch-exporter-fips, opentelemetry-operator,...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nodejs24: nodejs24-24.14.1-4.1.hum1 aarch64, x8664 nodejs24-bin-24.14.1-4.1.hum1 noarch nodejs24-devel-24.14.1-4.1.hum1 aarch64, x8664 nodejs24-docs-24.14.1-4.1.hum1 noarch...