CLEANSTART-2026-PU75130 Security fixes for CVE-2026-27140, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-35469, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-pc3f-x583-g7j2 applied in versions: 2.19.2-r0, 2.19.2-r1, 2.19.2-r2, 2.19.2-r3

Multiple security vulnerabilities affect the rabbitmq-cluster-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GE45898 Security fixes for CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501 applied in versions: 2.20.1-r0

Multiple security vulnerabilities affect the rabbitmq-cluster-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IP78312 Security fixes for CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-35469, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-pc3f-x583-g7j2 applied in versions: 2.19.2-r0, 2.19.2-r1, 2.19.2-r2, 2.19.2-r3

Multiple security vulnerabilities affect the rabbitmq-cluster-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: pvc-autoresizer, kubernetes-dashboard-api, sftpgo-plugin-kms, verticadb-operator, helm-set-status, mods, stakater-reloader, aws-eks-pod-identity-agent, crossplane-provider-aws-cloudformation, git-sync, rancher-loglevel, modelmesh-runtime-adapter,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: pvc-autoresizer, fixuid, rancher-loglevel, git-sync, cosign, nginx-prometheus-exporter, nri-rabbitmq, go-jsonnet, sftpgo-plugin-auth, kubernetes-replicator, nri-postgresql, flux-kustomize-controller, vault-secrets-webhook, paranoia, kube-vip-cloud-provider,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: pvc-autoresizer, fixuid, verticadb-operator, rancher-loglevel, git-sync, cosign, nginx-prometheus-exporter, nri-rabbitmq, go-jsonnet, sftpgo-plugin-auth, kubernetes-replicator, nri-postgresql, flux-kustomize-controller, vault-secrets-webhook, paranoia,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: pvc-autoresizer, kubernetes-dashboard-api, sftpgo-plugin-kms, verticadb-operator, helm-set-status, nri-nginx, mods, stakater-reloader, aws-eks-pod-identity-agent, crossplane-provider-aws-cloudformation, git-sync, rancher-loglevel, modelmesh-runtime-adapter,...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: pvc-autoresizer, kubernetes-dashboard-api, sftpgo-plugin-kms, verticadb-operator, helm-set-status, mods, stakater-reloader, aws-eks-pod-identity-agent, crossplane-provider-aws-cloudformation, git-sync, rancher-loglevel, modelmesh-runtime-adapter,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: ferretdb, k9s-fips, crossplane-function-environment-configs-fips, sftpgo-plugin-pubsub, gitlab-runner, terraform-provider-time, azure-workload-identity-webhook, flannel-fips, gitleaks, kubernetes-csi-driver-nfs-fips, prometheus-mysqld-exporter, k6-fips,...

CVE-2025-61730 vulnerabilities

Vulnerabilities for packages: ferretdb, k9s-fips, crossplane-function-environment-configs-fips, sftpgo-plugin-pubsub, gitlab-runner, terraform-provider-time, azure-workload-identity-webhook, flannel-fips, gitleaks, kubernetes-csi-driver-nfs-fips, prometheus-mysqld-exporter, k6-fips,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: ferretdb, k9s-fips, crossplane-function-environment-configs-fips, sftpgo-plugin-pubsub, gitlab-runner, terraform-provider-time, azure-workload-identity-webhook, flannel-fips, gitleaks, kubernetes-csi-driver-nfs-fips, prometheus-mysqld-exporter, k6-fips,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: ferretdb, k9s-fips, crossplane-function-environment-configs-fips, sftpgo-plugin-pubsub, gitlab-runner, terraform-provider-time, azure-workload-identity-webhook, flannel-fips, gitleaks, kubernetes-csi-driver-nfs-fips, prometheus-mysqld-exporter, k6-fips,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: ferretdb, k9s-fips, crossplane-function-environment-configs-fips, sftpgo-plugin-pubsub, gitlab-runner, terraform-provider-time, azure-workload-identity-webhook, flannel-fips, gitleaks, kubernetes-csi-driver-nfs-fips, prometheus-mysqld-exporter, k6-fips,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: ferretdb, k9s-fips, crossplane-function-environment-configs-fips, sftpgo-plugin-pubsub, gitlab-runner, terraform-provider-time, azure-workload-identity-webhook, flannel-fips, gitleaks, kubernetes-csi-driver-nfs-fips, prometheus-mysqld-exporter, k6-fips,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: ferretdb, k9s-fips, crossplane-function-environment-configs-fips, sftpgo-plugin-pubsub, gitlab-runner, terraform-provider-time, azure-workload-identity-webhook, flannel-fips, gitleaks, kubernetes-csi-driver-nfs-fips, prometheus-mysqld-exporter, k6-fips,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: ferretdb, prometheus-mysqld-exporter, prometheus-beat-exporter, prometheus-nats-exporter, flux-source-controller, cert-manager-fips, cluster-proportional-autoscaler, nri-kubernetes, datadog-agent-fips, secrets-store-csi-driver, skaffold, grpc-health-probe,...

resource-agents security update

4.1.1-68 - azure-lb: fix redirect issue Resolves: rhbz1850778 4.1.1-67 - gcp-vpc-move-vip: add support for multiple alias IPs Resolves: rhbz1846733 4.1.1-65 - azure-events: handle exceptions in urlopen Resolves: rhbz1845574 4.1.1-64 - nfsserver: fix NFSv4-only support - azure-events: new resource...

CVE-2015-0862

Multiple cross-site scripting XSS vulnerabilities in the management web UI in the RabbitMQ management plugin before 3.4.3 allow remote authenticated users to inject arbitrary web script or HTML via 1 message details when a message is unqueued, such as headers or arguments; 2 policy names, which a...

CVE-2015-0862

Multiple cross-site scripting XSS vulnerabilities in the management web UI in the RabbitMQ management plugin before 3.4.3 allow remote authenticated users to inject arbitrary web script or HTML via 1 message details when a message is unqueued, such as headers or arguments; 2 policy names, which a...

CVE-2015-0862

Multiple cross-site scripting XSS vulnerabilities in the management web UI in the RabbitMQ management plugin before 3.4.3 allow remote authenticated users to inject arbitrary web script or HTML via 1 message details when a message is unqueued, such as headers or arguments; 2 policy names, which a...