CLEANSTART-2026-MU24968 Security fixes in docker 20.10.18-r0

Package docker version 20.10.18-r0 fixes 1 vulnerabilities: CVE-2022-36109...

CLEANSTART-2026-ZR84349 Security fixes in configmap-reload 0.15.0-r1

Package configmap-reload version 0.15.0-r1 fixes 1 vulnerabilities: CVE-2026-39824...

CLEANSTART-2026-TB76607 Security fixes in step 0.28.7-r0

Package step version 0.28.7-r0 fixes 1 vulnerabilities: CVE-2025-62820...

CLEANSTART-2026-BL74902 Security fixes in fluent-operator-fips 3.7.0-r0

Package fluent-operator-fips version 3.7.0-r0 fixes 2 vulnerabilities: CVE-2026-24051, ghsa-9h8m-3fm2-qjrq...

CLEANSTART-2026-CY22332 Security fixes in helm-operator 1.42.2-r1

Package helm-operator version 1.42.2-r1 fixes 3 vulnerabilities: CVE-2026-27145, CVE-2026-42504, CVE-2026-42507...

CLEANSTART-2026-AU44163 Security fixes in ollama 0.20.3-r2

Package ollama version 0.20.3-r2 fixes 13 vulnerabilities: CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831...

CLEANSTART-2026-HC35488 Security fixes in kube-bench-fips 0.14.1-r0

Package kube-bench-fips version 0.14.1-r0 fixes 4 vulnerabilities: CVE-2025-68121, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730...

CLEANSTART-2026-RO94854 Security fixes in cert-manager-fips 1.18.3-r0

Package cert-manager-fips version 1.18.3-r0 fixes 3 vulnerabilities: CVE-2025-47913, CVE-2025-58181, CVE-2025-47914...

CLEANSTART-2026-BV95521 Security fixes in harbor 2.14.3-r1

Package harbor version 2.14.3-r1 fixes 1 vulnerabilities: CVE-2026-33186...

CLEANSTART-2026-IW72112 Security fixes in management-api-for-apache-cassandra-5.0 0.1.118-r2

Package management-api-for-apache-cassandra-5.0 version 0.1.118-r2 fixes 26 vulnerabilities: CVE-2026-42583, CVE-2026-42579, CVE-2026-33870, CVE-2026-42584, CVE-2026-42587...

CLEANSTART-2026-CH37263 Security fixes in kafka 4.0.1-r3

Package kafka version 4.0.1-r3 fixes 7 vulnerabilities: CVE-2026-25679, CVE-2026-27137, CVE-2026-27138, CVE-2026-27139, CVE-2026-27142...

CLEANSTART-2026-JZ53476 Security fixes in kserve-rest-proxy 0.12.0-r1

Package kserve-rest-proxy version 0.12.0-r1 fixes 6 vulnerabilities: CVE-2025-68121, CVE-2026-27142, CVE-2026-25679, CVE-2025-58190, CVE-2025-47911...

CLEANSTART-2026-JD71154 Security fixes in victoriametrics-operator-fips 0.65.0-r2

Package victoriametrics-operator-fips version 0.65.0-r2 fixes 4 vulnerabilities: CVE-2026-25679, CVE-2026-27142, ghsa-9h8m-3fm2-qjrq, CVE-2026-27139...

SUSE-SU-2026:3418-1 Security update for tomcat10

This update for tomcat10 fixes the following issues: Update to Tomcat 10.1.57. Security issues fixed: - CVE-2026-59083: incorrect URL decoding in RewriteValve may allow security control bypass bsc1271397. - CVE-2026-59084: EncryptInterceptor requirements are not clearly documented bsc1271398. Oth...

Security update for apptainer

This update for apptainer fixes the following issues: CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266656. CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid...

SUSE-SU-2026:3417-1 Security update for apptainer

This update for apptainer fixes the following issues: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266656. - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invali...

Security update for prometheus-ha_cluster_exporter

This update for prometheus-haclusterexporter fixes the following issue: CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266552. Other updates and bugfixes: Release 1.4.2: Use proper obs time form...

Important: Red Hat Security Advisory: fence-agents security update

An update for fence-agents is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

ALPINE-CVE-2026-58040

An incomplete fix has been identified in Node.js: HTTPS Agent TLS session reuse skips hostname verification across identity policies incomplete fix of CVE-2026-48934. This vulnerability affects Node.js 22.x, 24.x, and 26.x...

CVE-2026-58043

A flaw in Node.js Permission Model enforcement can over-grant filesystem access across radix-tree prefix boundaries. Under --permission, an attacker who is granted access to one path can abuse boundary handling to read from or write to paths outside the intended filesystem allowlist. This...