CLEANSTART-2026-PU75130 Security fixes for CVE-2026-27140, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-35469, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-pc3f-x583-g7j2 applied in versions: 2.19.2-r0, 2.19.2-r1, 2.19.2-r2, 2.19.2-r3

Multiple security vulnerabilities affect the rabbitmq-cluster-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GE45898 Security fixes for CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501 applied in versions: 2.20.1-r0

Multiple security vulnerabilities affect the rabbitmq-cluster-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IP78312 Security fixes for CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-35469, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-pc3f-x583-g7j2 applied in versions: 2.19.2-r0, 2.19.2-r1, 2.19.2-r2, 2.19.2-r3

Multiple security vulnerabilities affect the rabbitmq-cluster-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: hydra, conftest, nerdctl, gobuster, crossplane-provider-aws-firehose, spire-server, gatus, undock, sbom-convert, gcp-compute-persistent-disk-csi-driver, temporal-ui-server, aws-eks-pod-identity-agent, azure-service-operator, gatekeeper,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: hydra, conftest, nerdctl, gobuster, crossplane-provider-aws-firehose, spire-server, gatus, undock, sbom-convert, gcp-compute-persistent-disk-csi-driver, temporal-ui-server, aws-eks-pod-identity-agent, azure-service-operator, gatekeeper,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: hydra, nerdctl, nri-cassandra, gobuster, gatus, undock, sbom-convert, nri-memcached, modelmesh-runtime-adapter, sealed-secrets, secrets-store-csi-driver-provider-aws, pguser, boring-registry, opentofu, kubecolor, kubernetes-csi-external-resizer, sbom-scorecard, docke...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: hydra, conftest, nerdctl, gobuster, crossplane-provider-aws-firehose, spire-server, gatus, undock, gcp-compute-persistent-disk-csi-driver, temporal-ui-server, aws-eks-pod-identity-agent, azure-service-operator, gatekeeper, crossplane-provider-aws-elasticache,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: hydra, nerdctl, nri-cassandra, gobuster, gatus, undock, sbom-convert, nri-memcached, modelmesh-runtime-adapter, sealed-secrets, secrets-store-csi-driver-provider-aws, pguser, boring-registry, opentofu, kubecolor, kubernetes-csi-external-resizer, sbom-scorecard, docke...

CVE-2025-61730 vulnerabilities

Vulnerabilities for packages: step-fips, qemu-guesthelper, bom, minio-object-browser, kor, git-lfs-fips, rabbitmq-default-user-credential-updater-fips, reports-server, kyverno-policy-reporter-fips, actions-runner-controller-fips, scanner-test-golang-vulnerability-fixed, kubelet-csr-approver,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: step-fips, qemu-guesthelper, bom, minio-object-browser, kor, git-lfs-fips, rabbitmq-default-user-credential-updater-fips, reports-server, kyverno-policy-reporter-fips, actions-runner-controller-fips, scanner-test-golang-vulnerability-fixed, kubelet-csr-approver,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: step-fips, qemu-guesthelper, bom, minio-object-browser, kor, git-lfs-fips, nri-nagios, rabbitmq-default-user-credential-updater-fips, kyverno-policy-reporter-fips, actions-runner-controller-fips, reports-server, kubelet-csr-approver,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: step-fips, qemu-guesthelper, bom, minio-object-browser, kor, git-lfs-fips, nri-nagios, rabbitmq-default-user-credential-updater-fips, kyverno-policy-reporter-fips, actions-runner-controller-fips, reports-server, kubelet-csr-approver,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: step-fips, qemu-guesthelper, bom, minio-object-browser, kor, git-lfs-fips, reports-server, kyverno-policy-reporter-fips, actions-runner-controller-fips, kubelet-csr-approver, cilium-cli, elastic-agent, guac, local-static-provisioner, mattermost, chart-testing,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: step-fips, qemu-guesthelper, bom, minio-object-browser, kor, git-lfs-fips, nri-nagios, rabbitmq-default-user-credential-updater-fips, kyverno-policy-reporter-fips, actions-runner-controller-fips, reports-server, kubelet-csr-approver,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: step-fips, qemu-guesthelper, bom, minio-object-browser, kor, git-lfs-fips, nri-nagios, rabbitmq-default-user-credential-updater-fips, kyverno-policy-reporter-fips, actions-runner-controller-fips, reports-server, kubelet-csr-approver,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: spicedb, kor, k8sgpt-operator, cilium-cli, terraform-provider-google, guac, kubernetes-dashboard-fips, docker, kubevela, crossplane-provider-aws-lambda, buildkitd, kubernetes-csi-driver-hostpath, k8ssandra-operator-fips, crossplane-provider-aws-sqs,...

resource-agents security update

4.1.1-68 - azure-lb: fix redirect issue Resolves: rhbz1850778 4.1.1-67 - gcp-vpc-move-vip: add support for multiple alias IPs Resolves: rhbz1846733 4.1.1-65 - azure-events: handle exceptions in urlopen Resolves: rhbz1845574 4.1.1-64 - nfsserver: fix NFSv4-only support - azure-events: new resource...

CVE-2015-0862

Multiple cross-site scripting XSS vulnerabilities in the management web UI in the RabbitMQ management plugin before 3.4.3 allow remote authenticated users to inject arbitrary web script or HTML via 1 message details when a message is unqueued, such as headers or arguments; 2 policy names, which a...

CVE-2015-0862

Multiple cross-site scripting XSS vulnerabilities in the management web UI in the RabbitMQ management plugin before 3.4.3 allow remote authenticated users to inject arbitrary web script or HTML via 1 message details when a message is unqueued, such as headers or arguments; 2 policy names, which a...

CVE-2015-0862

Multiple cross-site scripting XSS vulnerabilities in the management web UI in the RabbitMQ management plugin before 3.4.3 allow remote authenticated users to inject arbitrary web script or HTML via 1 message details when a message is unqueued, such as headers or arguments; 2 policy names, which a...