CLEANSTART-2026-OP27654 Security fixes in kubernetes-fips 1.35.0-r0

Package kubernetes-fips version 1.35.0-r0 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139...

CLEANSTART-2026-IM94158 Security fixes in pulumi-kubernetes-operator 0.18.0-r1

Package pulumi-kubernetes-operator version 0.18.0-r1 fixes 4 vulnerabilities: CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-1229...

CLEANSTART-2026-ON70708 Security fixes in opentofu-fips 1.11.5-r1

Package opentofu-fips version 1.11.5-r1 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139...

CLEANSTART-2026-CL16763 Security fixes in helm 4.0.1-r1

Package helm version 4.0.1-r1 fixes 5 vulnerabilities: CVE-2026-25679, CVE-2026-27137, CVE-2026-27138, CVE-2026-27139, CVE-2026-27142...

image-builder security update

45-1.0.4 - Rebuilt to fix CVE-2026-25679, CVE-2026-27137...

RHEL 10 : golang-github-openprinting-ipp-usb (RHSA-2026:7992)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:7992 advisory. HTTP reverse proxy, backed by IPP-over-USB connection to device. It enables driverless support for USB devices capable of using IPP-over-USB protoco...

Medium: amazon-ecr-credential-helper

Issue Overview: url.Parse insufficiently validated the host/authority component and accepted some invalid URLs. CVE-2026-25679 On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in which t...