CLEANSTART-2026-QN25000 Security fixes in configmap-reload 0.15.0-r0

Package configmap-reload version 0.15.0-r0 fixes 23 vulnerabilities: CVE-2025-68121, CVE-2025-61726, CVE-2025-61728, CVE-2025-61729, CVE-2026-25679...

CLEANSTART-2026-YP58445 Security fixes in cadvisor 0.54.1-r0

Package cadvisor version 0.54.1-r0 fixes 5 vulnerabilities: CVE-2026-33186, CVE-2025-47911, CVE-2025-47914, CVE-2025-58181, CVE-2025-58190...

CLEANSTART-2026-HB13446 Security fixes in consul 1.21.5-r5

Package consul version 1.21.5-r5 fixes 1 vulnerabilities: CVE-2026-2303...

CLEANSTART-2026-WQ07160 Security fixes in sonarqube 25.12.0.117093-r2

Package sonarqube version 25.12.0.117093-r2 fixes 7 vulnerabilities: CVE-2025-68384, CVE-2025-68390, CVE-2025-37727, CVE-2025-37731, CVE-2026-1225...

CLEANSTART-2026-WE49959 Security fixes in ollama 0.30.10-r0

Package ollama version 0.30.10-r0 fixes 6 vulnerabilities: CVE-2026-46595, CVE-2026-42508, CVE-2026-39821, CVE-2026-25680, CVE-2026-33813...

CLEANSTART-2026-KT72803 Security fixes in terragrunt-fips 0.99.4-r2

Package terragrunt-fips version 0.99.4-r2 fixes 4 vulnerabilities: CVE-2026-33186, CVE-2026-25679, CVE-2026-27142, CVE-2026-27139...

CLEANSTART-2026-NJ96913 Security fixes in pritunl 1.32.4528.97-r0

Package pritunl version 1.32.4528.97-r0 fixes 5 vulnerabilities: CVE-2025-2704, CVE-2025-13086, ghsa-58pv-8j8x-9vj2, ghsa-87hc-h4r5-73f7, ghsa-hgf8-39gv-g3f2...

SUSE-SU-2026:3419-1 Security update for tomcat

This update for tomcat fixes the following issues: Update to Tomcat 9.0.120. Security issues fixed: - CVE-2026-59083: incorrect URL decoding in RewriteValve may allow security control bypass bsc1271397. - CVE-2026-59084: EncryptInterceptor requirements are not clearly documented bsc1271398. Other...

SUSE-SU-2026:3417-1 Security update for apptainer

This update for apptainer fixes the following issues: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266656. - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invali...

SUSE-SU-2026:3416-1 Security update for prometheus-ha_cluster_exporter

This update for prometheus-haclusterexporter fixes the following issue: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266552. Other updates and bugfixes: - Release 1.4.2: Use proper obs time...

Important: Red Hat Security Advisory: fence-agents security update

An update for fence-agents is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

Important: Red Hat Security Advisory: hplip security update

An update for hplip is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Important: Red Hat Security Advisory: fence-agents security update

An update for fence-agents is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

EUVD-2026-51039

The firmware update process for the basemodule of the charging controller only validates the CRC32 checksum without cryptographic signature verification. This allows an unauthenticated remote attacker to install a modified firmware, resulting in full system compromise...

CVE-2026-44104 ControllerAgent does not perform validation of firmware

The firmware update process for the basemodule of the charging controller only validates the CRC32 checksum without cryptographic signature verification. This allows an unauthenticated remote attacker to install a modified firmware, resulting in full system compromise...

CVE-2026-44104

The CVE-2026-44104 entry describes a vulnerability in the basemodule firmware update process of the charging controller, where only a CRC32 checksum is validated and no cryptographic signature verification is performed. Root cause: lack of signature verification allows an unauthenticated remote a...

CVE-2026-44103 JupiCore does not perform validation of firmware

An unauthenticated remote attacker can inject malicious firmware into the internal charging module because the JupiCore service transmits firmware updates without performing integrity or verification check. Successful exploitation may compromise the integrity of the affected device. This...

Important: Red Hat Security Advisory: hplip security, bug fix, and enhancement update

An update for hplip is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

CVE-2026-44097 File Upload vulnerability

A low-privileged remote attacker with "operator" access can upload arbitrary files via the REST endpoint intended for firmware updates, resulting in persistent storage of attacker-controlled files and potentially exhausting resources, which might lead to Denial-of-Service...

EUVD-2026-51032

A low-privileged remote attacker with "operator" access can upload arbitrary files via the REST endpoint intended for firmware updates, resulting in persistent storage of attacker-controlled files and potentially exhausting resources, which might lead to Denial-of-Service...