CLEANSTART-2026-AH82590 Security fixes in ollama-fips 0.21.0-r1

Package ollama-fips version 0.21.0-r1 fixes 12 vulnerabilities: CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39836, CVE-2026-42499...

CLEANSTART-2026-LR68332 Security fixes in velero-plugin-for-aws 1.13.2-r2

Package velero-plugin-for-aws version 1.13.2-r2 fixes 5 vulnerabilities: CVE-2026-56852, CVE-2026-39822, CVE-2026-42505, ghsa-xmrv-pmrh-hhx2, CVE-2026-33186...

CLEANSTART-2026-UV81951 Security fixes in k8ssandra-client-fips 0.8.8-r0

Package k8ssandra-client-fips version 0.8.8-r0 fixes 4 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-AV27386 Security fixes in expat 2.4.4-r0

Package expat version 2.4.4-r0 fixes 2 vulnerabilities: CVE-2022-23852, CVE-2022-23990...

SUSE-SU-2026:3419-1 Security update for tomcat

This update for tomcat fixes the following issues: Update to Tomcat 9.0.120. Security issues fixed: - CVE-2026-59083: incorrect URL decoding in RewriteValve may allow security control bypass bsc1271397. - CVE-2026-59084: EncryptInterceptor requirements are not clearly documented bsc1271398. Other...

SUSE-SU-2026:3417-1 Security update for apptainer

This update for apptainer fixes the following issues: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266656. - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invali...

SUSE-SU-2026:3416-1 Security update for prometheus-ha_cluster_exporter

This update for prometheus-haclusterexporter fixes the following issue: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266552. Other updates and bugfixes: - Release 1.4.2: Use proper obs time...

Important: Red Hat Security Advisory: fence-agents security update

An update for fence-agents is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

Important: Red Hat Security Advisory: fence-agents security update

An update for fence-agents is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

Moderate: Red Hat Security Advisory: openssh security update

An update for openssh is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

perl:5.32 security update

An update is available for perl-Module-Build, perl-threads, perl-perlfaq, module.perl-File-Temp, perl-Module-Metadata, module.perl, perl-File-HomeDir, perl-Getopt-Long, perl-Sys-Syslog, perl-Math-BigRat, module.perl-Object-HashBase, perl-URI, module.perl-version, module.perl-Exporter,...

Important: Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

An update for gstreamer1-plugins-bad-free is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

SUSE-SU-2026:22996-1 Security update for ignition

This update for ignition fixes the following issues: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266606. - CVE-2026-56852: golang.org/x/text/unicode/norm: handling of input containing inval...

OPENSUSE-SU-2026:21481-1 Security update for vexctl

This update for vexctl fixes the following issues: - CVE-2024-45337: golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto bsc1234486. - CVE-2025-22868: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in...

SUSE-SU-2026:22989-1 Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tlsswcancelworktx bsc1262404. - CVE-2026-31738: vxlan: validate ND option lengths in vxlannacreate bsc1264060. ...

Security update for python313, python3 (important)

openSUSE security update: security update for python313, python3 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21459-1 Rating: important References: bsc1211301 bsc1258364 bsc1261969 bsc1261970 bsc1262098 bsc1262319 bsc1262654 bsc1263787...

Security update for java-25-openjdk (important)

openSUSE security update: security update for java-25-openjdk ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21467-1 Rating: important References: bsc1264994 bsc1272223 bsc1272224 bsc1272225 bsc1272227 bsc1272228 bsc1272235 bsc1272236 bsc1272237...

fence-agents security update

4.16.0-21.5 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812...

Fedora 45 : python3.12 (2026-05338c2e02)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-05338c2e02 advisory. Automatic update for python3.12-3.12.13-6.fc45. Changelog Tue Jul 28 2026 Luk Zachar - 3.12.13-6 - Security fix for CVE-2026-15308 Resolves: rhbz2498688 Tue...

ALSA-2026:48585 Important: fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fixes: httplib2: httplib2: Denial of Service via unbounded decompression of HT...