CLEANSTART-2026-ZS03179 Security fixes in opentelemetry-collector-contrib 0.153.0-r3

Package opentelemetry-collector-contrib version 0.153.0-r3 fixes 1 vulnerabilities: ghsa-259r-337f-4rfw...

CLEANSTART-2026-YC19931 Security fixes in kube-vip-fips 1.1.2-r1

Package kube-vip-fips version 1.1.2-r1 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...

CLEANSTART-2026-QC88061 Security fixes in weaviate-fips 1.38.6-r2

Package weaviate-fips version 1.38.6-r2 fixes 1 vulnerabilities: CVE-2026-14362...

CLEANSTART-2026-ET14314 Security fixes in cortex 1.19.1-r2

Package cortex version 1.19.1-r2 fixes 2 vulnerabilities: ghsa-259r-337f-4rfw, CVE-2026-41178...

CLEANSTART-2026-ER59632 Security fixes in victoriametrics-operator 0.71.0-r1

Package victoriametrics-operator version 0.71.0-r1 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...

CLEANSTART-2026-JL48383 Security fixes in cert-manager-cmctl-fips 2.5.0-r1

Package cert-manager-cmctl-fips version 2.5.0-r1 fixes 7 vulnerabilities: ghsa-jxpm-75mh-9fp7, ghsa-8xwf-rjm4-xvhv, ghsa-xf85-363p-868w, ghsa-vh4v-2xq2-g5cg, CVE-2026-50151...

CLEANSTART-2026-DT69250 Security fixes in argo-cd 3.4.5-r1

Package argo-cd version 3.4.5-r1 fixes 9 vulnerabilities: ghsa-jxpm-75mh-9fp7, ghsa-8xwf-rjm4-xvhv, ghsa-vh4v-2xq2-g5cg, ghsa-xf85-363p-868w, CVE-2026-50151...

CLEANSTART-2026-MK94293 Security fixes in cortex 1.19.1-r1

Package cortex version 1.19.1-r1 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...

CLEANSTART-2026-RM95899 Security fixes in cortex 1.18.1-r4

Package cortex version 1.18.1-r4 fixes 3 vulnerabilities: ghsa-hrxh-6v49-42gf, ghsa-259r-337f-4rfw, CVE-2026-41178...

[slackware-security] openssh

New openssh packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/openssh-10.5p1-i586-1slack15.0.txz: Upgraded. This release contains a number of security fixes and small bugfixes. For more...

UBUNTU-CVE-2026-19546

A flaw was found in DBI. This is a fix for a partial fix for CVE-2026-14380 for RHEL 9.8.z and 10.2.z. For a detailed Statement, Description and Mitigation please reffer to the original https://access.redhat.com/security/cve/cve-2026-19546...

RHSA-2026:52928 Red Hat Security Advisory: postgresql-jdbc security update

Bulletin has no description...

ROOT-OS-ALPINE-322-CVE-2026-12064 CVE-2026-12064 in curl - Patched by Root

Root has patched CVE-2026-12064 in the curl package for Root:Alpine:3.22. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2021-21353 CVE-2021-21353 in pug - Patched by Root

Root has patched CVE-2021-21353 in the pug package for Root:npm. Multiple fixed versions available...

Critical: Red Hat Security Advisory: RHOAI 3.4.3 - Red Hat OpenShift AI

Updated images are now available for Red Hat OpenShift AI. Release of RHOAI 3.4.3 provides these changes:...

chromedriver-151.0.7922.108-1.1 on GA media (moderate)

chromedriver-151.0.7922.108-1.1 on GA media Announcement ID: openSUSE-SU-2026:11484-1 Rating: moderate Cross-References: CVE-2026-19137 CVE-2026-19138 CVE-2026-19139 CVE-2026-19140 CVE-2026-19141 CVE-2026-19142 CVE-2026-19143 CVE-2026-19144 CVE-2026-19145 CVE-2026-19146 CVE-2026-19147...

MGASA-2026-0329 Updated php8.4 packages fix security vulnerabilities

The updated php 8.4 packages fix some security vulnerabilities. See the references for more information...

CVE-2026-68406

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: validate PMSR FTM preamble range PMSR FTM request parsing accepts preamble values outside the enumerated nl80211 preamble range. Reject out-of-range values before using them in the parser capability bit test using...

CVE-2026-68392

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: fix locking in unpairdevice/disconnectsync Dereferencing RCU-protected pointers outside critical sections is invalid and may lead to UAF. Take hdev-lock for hciconn lookup and hciabortconn. Don't use RCU to ensur...

CVE-2026-68426

CVE-2026-68426 affects the Linux kernel xfrm subsystem. A bug in async crypto handling can leave skb->prev pointing to freed memory when GSO segments are stolen, causing a use-after-free. Reported impact includes potential denial of service or, in some cases, arbitrary code execution. The fix ...