Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: syft: syft-1.46.0-0.1.hum1 aarch64, x8664 syft-1.46.0-0.1.hum1.src src...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: gitea-fips, k9s-fips, gitlab-runner, packer-fips, grype-db, clickhouse-backup-fips, crossplane-provider-aws-eks-fips, crossplane-provider-aws-autoscaling-fips, flux-source-controller, prometheus-podman-exporter-fips, datadog-agent-fips, helmfile, agentbeat,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: gitea-fips, k9s-fips, gitlab-runner, packer-fips, grype-db, clickhouse-backup-fips, crossplane-provider-aws-eks-fips, crossplane-provider-aws-autoscaling-fips, flux-source-controller, prometheus-podman-exporter-fips, datadog-agent-fips, helmfile, agentbeat,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: chezmoi, gitea-fips, k9s-fips, gitlab-rails-ce, argo-events, terraform-fips, nemo, kube-arangodb-fips, packer-fips, buildah-fips, zitadel, loki, consul, caddy-fips, grype-db, flux-source-controller, prometheus-podman-exporter-fips, opentofu-fips, redpanda-console,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, zarf, grype, aactl, kyverno, caddy, cloud-provider-aws, k3s, flux-image-automation-controller, pulumi, kaf, podman, flux, trivy-operator, istio, dagger, external-secrets-operator, pulumi-language-java, step, opentofu, docker-cli-buildx,...

CVE-2026-53492 vulnerabilities

Vulnerabilities for packages: k9s-fips, gitlab-rails-ce, helm-mapkubeapis, redpanda-operator, kube-arangodb-fips, packer-fips, fuse-overlayfs-snapshotter, grype-db, envoy-gateway, datadog-agent-fips, helmfile, kgateway, cluster-api-helm-controller-fips, grype, buildkitd-fips, skaffold-fips,...

GHSA-33VJ-92QQ-66HC vulnerabilities

Vulnerabilities for packages: k9s-fips, gitlab-rails-ce, helm-mapkubeapis, redpanda-operator, kube-arangodb-fips, packer-fips, fuse-overlayfs-snapshotter, grype-db, envoy-gateway, datadog-agent-fips, helmfile, kgateway, cluster-api-helm-controller-fips, grype, buildkitd-fips, skaffold-fips,...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: k9s-fips, gitlab-rails-ce, helm-mapkubeapis, redpanda-operator, kube-arangodb-fips, packer-fips, fuse-overlayfs-snapshotter, grype-db, envoy-gateway, datadog-agent-fips, helmfile, kgateway, cluster-api-helm-controller-fips, grype, buildkitd-fips, skaffold-fips,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: k9s-fips, helm-mapkubeapis, redpanda-operator, kube-arangodb-fips, packer-fips, fuse-overlayfs-snapshotter, grype-db, envoy-gateway, datadog-agent-fips, helmfile, kgateway, cluster-api-helm-controller-fips, grype, buildkitd-fips, skaffold-fips, kubevela-fips, skaffol...

GHSA-JPCC-P29G-P8MQ vulnerabilities

Vulnerabilities for packages: chartmuseum, rancher-helm, rancher, zot, rancher-agent, zarf, consul-k8s, grype, scorecard, datadog-agent, neuvector-scanner, newrelic-infrastructure-agent, headlamp, kaniko, trivy, k8sgpt, kubescape-operator, ctop, k3s, kubescape, xeol, gatekeeper, eksctl,...

CVE-2026-53488 vulnerabilities

Vulnerabilities for packages: chartmuseum, rancher-helm, rancher, zot, rancher-agent, zarf, consul-k8s, grype, scorecard, datadog-agent, neuvector-scanner, newrelic-infrastructure-agent, headlamp, kaniko, trivy, k8sgpt, kubescape-operator, ctop, k3s, kubescape, xeol, gatekeeper, eksctl,...

CVE-2026-47262 vulnerabilities

Vulnerabilities for packages: chartmuseum, rancher-helm, rancher, zot, rancher-agent, zarf, consul-k8s, grype, scorecard, datadog-agent, neuvector-scanner, newrelic-infrastructure-agent, headlamp, kaniko, trivy, k8sgpt, kubescape-operator, ctop, k3s, kubescape, xeol, gatekeeper, eksctl,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: chartmuseum, rancher-helm, rancher, zot, rancher-agent, zarf, consul-k8s, grype, scorecard, datadog-agent, neuvector-scanner, newrelic-infrastructure-agent, headlamp, kaniko, trivy, k8sgpt, kubescape-operator, ctop, k3s, kubescape, xeol, gatekeeper, eksctl,...

GHSA-RGH6-RFWX-V388 vulnerabilities

Vulnerabilities for packages: chartmuseum, rancher-helm, rancher, zot, rancher-agent, zarf, consul-k8s, grype, scorecard, datadog-agent, containerd, neuvector-scanner, newrelic-infrastructure-agent, headlamp, kaniko, trivy, k8sgpt, kubescape-operator, ctop, k3s, kubescape, xeol, gatekeeper, eksct...

CVE-2026-50195 vulnerabilities

Vulnerabilities for packages: chartmuseum, rancher-helm, rancher, zot, rancher-agent, zarf, consul-k8s, grype, scorecard, datadog-agent, containerd, neuvector-scanner, newrelic-infrastructure-agent, headlamp, kaniko, trivy, k8sgpt, kubescape-operator, ctop, k3s, kubescape, xeol, gatekeeper, eksct...

CVE-2026-53492 vulnerabilities

Vulnerabilities for packages: chartmuseum, rancher-helm, rancher, zot, rancher-agent, zarf, consul-k8s, grype, scorecard, datadog-agent, containerd, neuvector-scanner, newrelic-infrastructure-agent, headlamp, kaniko, trivy, k8sgpt, kubescape-operator, ctop, k3s, kubescape, xeol, gatekeeper, eksct...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: chartmuseum, rancher-helm, rancher, zot, rancher-agent, zarf, consul-k8s, grype, scorecard, datadog-agent, containerd, neuvector-scanner, newrelic-infrastructure-agent, headlamp, kaniko, trivy, k8sgpt, kubescape-operator, ctop, k3s, kubescape, xeol, gatekeeper, eksct...

GHSA-33VJ-92QQ-66HC vulnerabilities

Vulnerabilities for packages: chartmuseum, rancher-helm, rancher, zot, rancher-agent, zarf, consul-k8s, grype, scorecard, datadog-agent, containerd, neuvector-scanner, newrelic-infrastructure-agent, headlamp, kaniko, trivy, k8sgpt, kubescape-operator, ctop, k3s, kubescape, xeol, gatekeeper, eksct...

GHSA-CVXM-645Q-P574 vulnerabilities

Vulnerabilities for packages: chartmuseum, rancher-helm, rancher, zot, rancher-agent, zarf, consul-k8s, grype, scorecard, datadog-agent, containerd, neuvector-scanner, newrelic-infrastructure-agent, headlamp, kaniko, trivy, k8sgpt, kubescape-operator, ctop, k3s, kubescape, xeol, gatekeeper, eksct...

openSUSE 16 Security Update : syft (openSUSE-SU-2026:20928-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:20928-1 advisory. Changes in syft: - Update to version 1.45.0: Added Features - Add support for ZapAddOns as jar files 4654 4932 @douglasclarke - MySQL binary classifier...