GHSA-G6CJ-PR64-35W5 vulnerabilities

Vulnerabilities for packages: openstack-nova-2025.1, crossplane-function-pythonic, kserve, apache-beam-python-3.13-sdk, litellm, airflow, ggshield, openstack-tempest-2026.1, apache-beam-python-3.12-sdk, openstack-kolla-toolbox-2025.2, gitlab-cng, openstack-placement-2025.1, openstack-glance-2025....

CVE-2026-69247 vulnerabilities

Vulnerabilities for packages: openstack-nova-2025.1, crossplane-function-pythonic, kserve, apache-beam-python-3.13-sdk, litellm, airflow, ggshield, openstack-tempest-2026.1, apache-beam-python-3.12-sdk, openstack-kolla-toolbox-2025.2, gitlab-cng, openstack-placement-2025.1, openstack-glance-2025....

Critical: Red Hat Security Advisory: multicluster engine for Kubernetes v2.17.1 security update

Red Hat multicluster engine for Kubernetes v2.17 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base scor...

Critical: Red Hat Security Advisory: multicluster engine for Kubernetes v2.10.4 security update

Red Hat multicluster engine for Kubernetes v2.10 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base scor...

Critical: Red Hat Security Advisory: multicluster engine for Kubernetes v2.10.4 security update

The multicluster engine for Kubernetes 2.10 General Availability release images, which add new features and enhancements, bug fixes, and updated container images. The multicluster engine for Kubernetes v2.10 images The multicluster engine for Kubernetes provides the foundational components that a...

GHSA-J5G9-F88F-GFJ3 vulnerabilities

Vulnerabilities for packages: openstack-nova-2025.1, openstack-horizon-2025.2-fips, openstack-glance-2025.1-fips, apache-beam-python-3.13-sdk, authentik-fips, openstack-glance-2026.1-fips, openstack-horizon-2025.1-fips, apache-beam-python-3.12-sdk, openstack-placement-2025.1,...

CVE-2026-59939 vulnerabilities

Vulnerabilities for packages: openstack-nova-2025.1, openstack-horizon-2025.2-fips, openstack-glance-2025.1-fips, apache-beam-python-3.13-sdk, authentik-fips, openstack-glance-2026.1-fips, openstack-horizon-2025.1-fips, apache-beam-python-3.12-sdk, openstack-placement-2025.1,...

CVE-2026-64268

CVE-2026-64268 concerns a Linux kernel vulnerability in the SIW (RDMA) path where Read Response segments could overrun the sink buffer. The issue resides in siw_qp_rx.c (siw_proc_rresp) which places inbound Read Response DDP segments at sge->laddr + wqe->processed and accumulates processed ...

Important: Red Hat Security Advisory: multicluster engine for Kubernetes v2.6.12 security update

The multicluster engine for Kubernetes 2.6 General Availability release images, which add new features and enhancements, bug fixes, and updated container images. The multicluster engine for Kubernetes v2.6 images The multicluster engine for Kubernetes provides the foundational components that are...

PYSEC-2026-2686 OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints

Affects - Nova: =18.0.0 =32.0.0 =33.0.0 33.0.2 Description Erichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling...

scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs between two remote destinations.

...

Important: Red Hat Security Advisory: Assisted Installer RHEL 9 components for Multicluster Engine for Kubernetes 2.6.12

Assisted installer RHEL 9 components for the multicluster engine for Kubernetes 2.6.12 General Availability release, with updates to container images. Assisted Installer RHEL 9 integrates components for the general multicluster engine for Kubernetes 2.6.12 release that simplify the process of...

Important: Red Hat Security Advisory: Assisted Installer RHEL 8 components for Multicluster Engine for Kubernetes 2.6.12

Assisted installer RHEL 8 components for the multicluster engine for Kubernetes 2.6.12 General Availability release, with updates to container images. Assisted Installer RHEL 8 integrates components for the general multicluster engine for Kubernetes 2.6.12 release that simplify the process of...

MINI-X3FC-VXV5-6XRP

Bulletin has no description...

Important: Red Hat Security Advisory: Assisted Installer RHEL 8 components for Multicluster Engine for Kubernetes 2.6.12

Assisted installer RHEL 8 components for the multicluster engine for Kubernetes 2.6.12 General Availability release, with updates to container images. Assisted Installer RHEL 8 integrates components for the general multicluster engine for Kubernetes 2.6.12 release that simplify the process of...

CVE-2026-54911 vulnerabilities

Vulnerabilities for packages: openstack-keystone-2026.1, openstack-horizon-2025.2-fips, openstack-glance-2025.1-fips, openstack-glance-2026.1-fips, openstack-keystone-2025.1-fips, openstack-horizon-2025.1-fips, openstack-placement-2025.1, openstack-glance-2025.2, openstack-horizon-2025.2,...

GHSA-3J69-69WJ-XQX2 vulnerabilities

Vulnerabilities for packages: openstack-keystone-2026.1, openstack-horizon-2025.2-fips, openstack-glance-2025.1-fips, openstack-glance-2026.1-fips, openstack-keystone-2025.1-fips, openstack-horizon-2025.1-fips, openstack-placement-2025.1, openstack-glance-2025.2, openstack-horizon-2025.2,...

GHSA-6V7P-G79W-8964 vulnerabilities

Vulnerabilities for packages: openstack-keystone-2026.1, localstack, request-1276, openstack-horizon-2025.2-fips, openstack-glance-2025.1-fips, kubeflow-katib, synapse, lmcache-cuda-12.8, authentik-fips, openstack-glance-2026.1-fips, openstack-horizon-2025.1-fips, openstack-keystone-2025.1-fips,...

[SECURITY] Fedora 44 Update: ongres-stringprep-2.4-1.fc44

The stringprep protocol does not stand on its own; it has to be used by other protocols at precisely-defined places in those other protocols...

CVE-2026-46448

A flaw was found in OpenStack Nova. The server creation application programming interface API fails to remove specific hint data, leading to instances being created without proper Placement allocation. This can result in a denial of service, as resources may not be correctly assigned or managed f...