Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: buildah: buildah-1.45.0-2.hum1 aarch64, x8664 buildah-1.45.0-2.hum1.src src Security Fixes: buildah: CVE-2026-15788 CVE-2026-56852...

CVE-2026-56852

creationtimestamp| type| source ---|---|--- 2026-08-03 12:03:59+00:00| seen| https://bsky.app/profile/mfahlandt.bsky.social/post/3ms6hejb7hx2j 2026-08-05 22:37:18+00:00| seen| https://gist.github.com/cwayne18/5a965b20d5d77b66faec2e6e18802a48 2026-08-06 00:00:18+00:00| seen|...

warewulf4-4.7.0-4.1 on GA media (moderate)

warewulf4-4.7.0-4.1 on GA media Announcement ID: openSUSE-SU-2026:11404-1 Rating: moderate Cross-References: CVE-2026-56852 CVSS scores: CVE-2026-56852 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-56852 SUSE : 6 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N...

SUSE SLES15 Security Update : google-osconfig-agent (SUSE-SU-2026:3432-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3432-1 advisory. This update for google-osconfig-agent fixes the following issues - CVE-2026-39821: golang.org/x/net/idna: failure to reject...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: prometheus3.13: prometheus3.13-3.13.2-0.1.hum1 aarch64, x8664 prometheus3.13-3.13.2-0.1.hum1.src src Security Fixes: prometheus3.13: CVE-2026-56852...

CLEANSTART-2026-IK55843 Security fixes in helm 4.1.4-r2

Package helm version 4.1.4-r2 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...

CLEANSTART-2026-FE71237 Security fixes in argo-cd 3.4.4-r2

Package argo-cd version 3.4.4-r2 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...

CLEANSTART-2026-CO71096 Security fixes in external-secrets-operator 2.8.0-r0

Package external-secrets-operator version 2.8.0-r0 fixes 1 vulnerabilities: CVE-2026-56852...

CLEANSTART-2026-BF74841 Security fixes in wave 0.9.0-r1

Package wave version 0.9.0-r1 fixes 4 vulnerabilities: CVE-2026-46600, CVE-2026-56852, CVE-2026-39822, CVE-2026-42505...

CLEANSTART-2026-AR53211 Security fixes in kubernetes-dns-node-cache 1.24.1-r0

Package kubernetes-dns-node-cache version 1.24.1-r0 fixes 2 vulnerabilities: CVE-2026-56852, ghsa-hrxh-6v49-42gf...

CLEANSTART-2026-OG41205 Security fixes in istio 1.30.3-r0

Package istio version 1.30.3-r0 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...

OPENSUSE-SU-2026:21482-1 Security update for ignition

This update for ignition fixes the following issues: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266606. - CVE-2026-56852: golang.org/x/text/unicode/norm: handling of input containing inval...

Security update for apptainer (important)

openSUSE security update: security update for apptainer ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21473-1 Rating: important References: bsc1266656 bsc1272115 Cross-References: CVE-2026-39821 CVE-2026-56852 CVSS scores: CVE-2026-39821 SUSE : 7....

CVE-2026-56852 affecting package prometheus-adapter for versions less than 0.12.0-7

CVE-2026-56852 affecting package prometheus-adapter for versions less than 0.12.0-7. A patched version of the package is available...

CVE-2026-56852 affecting package git-lfs for versions less than 3.6.1-5

CVE-2026-56852 affecting package git-lfs for versions less than 3.6.1-5. A patched version of the package is available...

CVE-2026-56852 affecting package moby-engine for versions less than 25.0.3-19

CVE-2026-56852 affecting package moby-engine for versions less than 25.0.3-19. A patched version of the package is available...

CVE-2026-56852 affecting package moby-containerd-cc for versions less than 1.7.7-16

CVE-2026-56852 affecting package moby-containerd-cc for versions less than 1.7.7-16. A patched version of the package is available...

CVE-2026-56852 affecting package influxdb for versions less than 2.7.5-19

CVE-2026-56852 affecting package influxdb for versions less than 2.7.5-19. A patched version of the package is available...

CVE-2026-56852 affecting package opa for versions less than 0.63.0-5

CVE-2026-56852 affecting package opa for versions less than 0.63.0-5. A patched version of the package is available...

OPENSUSE-SU-2026:21455-1 Security update for amazon-ecs-init

This update for amazon-ecs-init fixes the following issue - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input bsc1272128...