CLEANSTART-2026-KT90792 Security fixes for CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27145, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598 applied in versions: 0.36.1-r0, 0.36.6-r0, 0.36.6-r1, 0.37.0-r0

Multiple security vulnerabilities affect the sealed-secrets package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZY59905 Security fixes for CVE-2025-65637, CVE-2025-68121, CVE-2026-33186, CVE-2026-33814, CVE-2026-39822, CVE-2026-39834, CVE-2026-42502, CVE-2026-42504, CVE-2026-42505, CVE-2026-42506, CVE-2026-42507, CVE-2026-46598 applied in versions: 0_git20250325-r0, 0_git20250325-r1

Multiple security vulnerabilities affect the go-discover package. These issues are resolved in later releases. See references for individual vulnerability details...

ROOT-APP-GOBINARY-CVE-2026-46598 CVE-2026-46598 in rootio-golang.org/x/crypto - Patched by Root

Root has patched CVE-2026-46598 in the rootio-golang.org/x/crypto package for Root:Go. Multiple fixed versions available...

Security update for podman

This update for podman rebuilds it against the current go security release. CVE-2026-34986: Update github.com/go-jose/go-jose/v3+v4 dependency bsc1262856. CVE-2026-39829, CVE-2026-39830, CVE-2026-42508, CVE-2026-46598: Update golang.org/x/crypto/ssh dependency bsc1266125. Patch Instructions: To...

alloy-1.17.0-1.1 on GA media (moderate)

alloy-1.17.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11053-1 Rating: moderate Cross-References: CVE-2026-25680 CVE-2026-25681 CVE-2026-33532 CVE-2026-39821 CVE-2026-39827 CVE-2026-39830 CVE-2026-39831 CVE-2026-39834 CVE-2026-44740 CVE-2026-45678 CVE-2026-45682 CVE-2026-45685...

CVE-2026-46598 affecting package telegraf for versions less than 1.31.0-23

CVE-2026-46598 affecting package telegraf for versions less than 1.31.0-23. A patched version of the package is available...

CVE-2026-46598 vulnerabilities

Vulnerabilities for packages: kine, snyk-cli, kubernetes-dashboard, zot, telegraf, loki, kots, aactl, docker-cli-buildx, prometheus-operator, rancher, knative-serving, cert-manager, kyverno, opentofu, kubernetes, containerd, istio, spire-server, external-dns, prometheus, flux, minio,...

CVE-2026-46598 Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used...