MGASA-2026-0334 Updated qemu packages fix many security vulnerabilities

This update to qemu-10.2.4-2.mga10 fixes 14 CVEs from 10.2.3 and 2 from 10.2.4...

Updated roundcubemail package fixes security vulnerabilities

Updated roundcubemail to the 1.6.17 version to fix security vulnerabilities: Some XSS and DoS errors have been corrected. Various vulnerabilities in the password plugin have been fixed. An infinite loop has been fixed...

CLSA-2026-1786636721 TuxCare security update for dompurify (14 CVEs)

TuxCare rebuilt dompurify to address 14 CVEs. Fixed in 2.4.7-tuxcare.1...

CLSA-2026-1786636613 TuxCare security update for dompurify (11 CVEs)

TuxCare rebuilt dompurify to address 11 CVEs. Fixed in 2.4.3-tuxcare.1...

UBUNTU-CVE-2026-70458

rsync 3.0.0 before 3.5.0 contains an out-of-bounds write vulnerability that allows attackers to corrupt memory by triggering HLINKBUMP processing on file entries with the FLAGHLINKED flag set while the hard-link preservation option is inactive. Attackers can exploit the missing FSUM field in the...

UBUNTU-CVE-2026-70454

rsync 3.2.0 through 3.2.3 openssl mode and rsync-ssl through 3.4.4 stunnel mode contain a TLS certificate validation vulnerability that allows on-path attackers to intercept encrypted sessions by presenting self-signed or otherwise invalid certificates. Attackers can exploit the failure to valida...

OESA-2026-3401 buildah security update

The package provides a command line tool which can be used to create a working container from scratch or create a working container from an image as a starting point mount/umount a working container's root file system for manipulation save container's root file system layer to create a new image...

DEBIAN-CVE-2026-14673

Untrusted search path in PostgreSQL amcheck allows a grantee of amcheck function EXECUTE privilege to execute arbitrary functions as the owners of expression indexes that depend on the search path, via setting a hostile search path before calling the amcheck function. Within major versions 18, 16...

Critical: Red Hat Security Advisory: Multicluster Global Hub 1.5.7 security update

Multicluster Global Hub v1.5.7 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a...

CLSA-2026-1786623881 TuxCare security update for org.springframework (9 CVEs)

TuxCare rebuilt 25 org.springframework packages to address 9 CVEs. Fixed in 6.0.16-tuxcare.5...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.13: python3.13-3.13.15-1.hum1 aarch64, x8664 python3.13-debug-3.13.15-1.hum1 aarch64, x8664 python3.13-devel-3.13.15-1.hum1 aarch64, x8664 python3.13-freethreading-3.13.15-1.hum1 aarch64,...

CLEANSTART-2026-GR38496 Security fixes in aws-eks-pod-identity-agent 0.2.1-r1

Package aws-eks-pod-identity-agent version 0.2.1-r1 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...

CLEANSTART-2026-TD71000 Security fixes in kube-logging-operator 6.5.2-r1

Package kube-logging-operator version 6.5.2-r1 fixes 4 vulnerabilities: CVE-2026-47701, ghsa-cxh2-4639-vmc5, ghsa-hrxh-6v49-42gf, CVE-2026-46600...

CLEANSTART-2026-OJ52622 Security fixes in spire-server-fips 1.15.1-r1

Package spire-server-fips version 1.15.1-r1 fixes 9 vulnerabilities: CVE-2026-34040, CVE-2026-33997, CVE-2026-48702, CVE-2026-49834, CVE-2026-49835...

CLEANSTART-2026-EU00318 Security fixes in argo-workflows 3.7.17-r1

Package argo-workflows version 3.7.17-r1 fixes 16 vulnerabilities: ghsa-3ppc-4f35-3m26, ghsa-7r86-cg39-jmmj, ghsa-23c5-xmqv-rm74, ghsa-xv26-6w52-cph6, ghsa-q3j6-qgpj-74h6...

CLEANSTART-2026-VU50374 Security fixes in boring-registry-fips 0.15.5-r1

Package boring-registry-fips version 0.15.5-r1 fixes 2 vulnerabilities: CVE-2025-30204, ghsa-mh63-6h87-95cp...

CLEANSTART-2026-IB33850 Security fixes in crossplane-provider-keycloak-fips 2.21.1-r1

Package crossplane-provider-keycloak-fips version 2.21.1-r1 fixes 2 vulnerabilities: CVE-2026-41178, ghsa-jpcw-4wr7-c3vq...

CLEANSTART-2026-JT66111 Security fixes in velero-plugin-for-aws-fips 1.13.2-r1

Package velero-plugin-for-aws-fips version 1.13.2-r1 fixes 13 vulnerabilities: CVE-2026-39822, CVE-2026-42505, CVE-2026-33186, CVE-2026-25681, CVE-2026-27136...

CLEANSTART-2026-QI45196 Security fixes in forecastle 1.0.159-r1

Package forecastle version 1.0.159-r1 fixes 43 vulnerabilities: CVE-2026-40611, CVE-2026-34986, CVE-2026-48020, CVE-2026-26999, CVE-2026-29054...

CLEANSTART-2026-IZ22023 Security fixes in flux-image-automation-controller 1.2.1-r1

Package flux-image-automation-controller version 1.2.1-r1 fixes 13 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...