CLEANSTART-2026-XM11339 Security fixes in calico-fips 3.27.5-r0

Package calico-fips version 3.27.5-r0 fixes 4 vulnerabilities: ghsa-v778-237x-gjrc, ghsa-hcg3-q754-cr77, ghsa-qxpb-5wg8-xv66, ghsa-vvgc-356p-c3xw...

CLEANSTART-2026-IE08886 Security fixes in helm-fips 4.0.5-r1

Package helm-fips version 4.0.5-r1 fixes 2 vulnerabilities: CVE-2026-1229, ghsa-q9hv-hpm4-hj6x...

CLEANSTART-2026-WQ07160 Security fixes in sonarqube 25.12.0.117093-r2

Package sonarqube version 25.12.0.117093-r2 fixes 7 vulnerabilities: CVE-2025-68384, CVE-2025-68390, CVE-2025-37727, CVE-2025-37731, CVE-2026-1225...

CLEANSTART-2026-QR80565 Security fixes in harbor 2.15.0-r1

Package harbor version 2.15.0-r1 fixes 1 vulnerabilities: CVE-2026-33186...

CLEANSTART-2026-RF81669 Security fixes in paranoia 0.3.1-r0

Package paranoia version 0.3.1-r0 fixes 9 vulnerabilities: ghsa-p436-gjf2-799p, CVE-2025-15558, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282...

CLEANSTART-2026-YB56144 Security fixes in step-issuer-fips 0.9.9-r3

Package step-issuer-fips version 0.9.9-r3 fixes 2 vulnerabilities: ghsa-h8cp-697h-8c8p, ghsa-j7c9-79x7-8hpr...

CLEANSTART-2026-MM12418 Security fixes in weaviate 1.35.17-r1

Package weaviate version 1.35.17-r1 fixes 8 vulnerabilities: CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825...

CLEANSTART-2026-DY03272 Security fixes in calico 3.31.5-r1

Package calico version 3.31.5-r1 fixes 19 vulnerabilities: CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-39827...

CLEANSTART-2026-BX90516 Security fixes in cert-manager-cmctl-fips 2.4.0-r3

Package cert-manager-cmctl-fips version 2.4.0-r3 fixes 30 vulnerabilities: CVE-2026-27143, CVE-2026-39820, CVE-2026-42499, CVE-2026-39836, CVE-2026-32281...

CLEANSTART-2026-RG03813 Security fixes in nodejs 6.11.1-r0

Package nodejs version 6.11.1-r0 fixes 6 vulnerabilities: CVE-2017-1000381, CVE-2021-43803, CVE-2022-32212, CVE-2023-44487, CVE-2024-36138...

Security update for prometheus-ha_cluster_exporter

This update for prometheus-haclusterexporter fixes the following issue: CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266552. Other updates and bugfixes: Release 1.4.2: Use proper obs time form...

CVE-2026-64523

A flaw was found in the Linux kernel's networking handshake component. This vulnerability occurs because a critical file reference is not properly maintained during the handshake process. An attacker could potentially exploit this by causing the system to prematurely release a socket, leading to ...

CVE-2026-64471

A flaw was found in the Linux kernel's Bluetooth subsystem btusb. When a Bluetooth controller fails to register, the system may not properly release associated interfaces. This can lead to a use-after-free or double-free memory error when these interfaces are later disconnected, potentially causi...

[SECURITY] Fedora 43 Update: nginx-mod-naxsi-1.6-21.fc43

naxsi is an nginx module that provides score based Web Application Firewall WAF abilities in a highly granular fashion...

[SECURITY] Fedora 43 Update: nginx-mod-brotli-1.0.0~rc-13.fc43

NGINX module for Brotli compression...

Wazuh 4.14.7

Wazuh is a free and open source security platform that unifies XDR and SIEM capabilities. It protects workloads across on-premises, virtualized, containerized, and cloud-based environments. This is the source code release...

PT-2026-66395

The Customer Switching WordPress plugin before 2.1.3 does not securely bind an active user-switching session to the operator who initiated it, allowing a lower-privileged account that an operator is currently switched into to be resolved as that operator and to switch into any permitted account,...

Fedora 44 : libssh (2026-c60881e04b)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-c60881e04b advisory. New upstream release 0.12.2 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

The vulnerability of the x25_queue_rx_frame() function in the net/x25/x25_in.c module, a part of the Linux kernel’s networking functions, allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the x25queuerxframe function in the net/x25/x25in.c module, which is part of the Linux kernel’s networking functions, involves the multiple release of the same resource or descriptor. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality,...

PT-2026-66529

DSSRF is a Node.js library that provides a wide range of utilities and advanced SSRF defense checks. Prior to 1.0.4, is url safe in src/helpers.ts strips the @ userinfo delimiter with remove at symbol in string before new URL parses the URL, allowing an attacker-controlled URL to bypass internal-...