DEBIAN-CVE-2026-72490

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix stainfo check in rtwaesdecrypt The null-pointer-guard was incorrect, returning FAIL on valid pointer. Invert the guard, so it returns FAIL on invalid pointer...

DEBIAN-CVE-2026-72284

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs Ignore KVM's internal "service pending PV EOI" request if the vCPU has disabled PV EOIs since the request was made. Asserting that PV EOIs are enabled can fai...

DEBIAN-CVE-2026-72277

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Inject SEA if guest VNCR isn't normal memory When constructing an L1 VNCR mapping, KVM unconditionally uses cacheable memory attributes, even if the underlying PFN isn't memory. This gets particularly hairy if the...

DEBIAN-CVE-2026-72083

In the Linux kernel, the following vulnerability has been resolved: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE corescsi3emulateproregisterandmove maps the PERSISTENT RESERVE OUT parameter list with transportkmapdatasg and parses the destination TransportID with...

ROOT-APP-PYPI-GHSA-7GW9-CF7V-778F GHSA-7gw9-cf7v-778f in pypdf - Patched by Root

Root has patched GHSA-7gw9-cf7v-778f in the pypdf package for Root:PyPI. Multiple fixed versions available...

GO-2026-5298 vulnerabilities

Vulnerabilities for packages: teleport-operator-fips, teleport, tbot...

GO-2025-3564 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller-fips, ingress-nginx-controller...

GO-2025-3647 vulnerabilities

Vulnerabilities for packages: harvester, harvester-fips...

GO-2024-2523 vulnerabilities

Vulnerabilities for packages: grafana-fips...

GO-2022-0536 vulnerabilities

Vulnerabilities for packages: hey, k3d...

GO-2025-4105 vulnerabilities

Vulnerabilities for packages: virt-operator-fips, virt-launcher, docker-machine-driver-harvester, virt-handler, virt-controller-fips...

GO-2026-5676 vulnerabilities

Vulnerabilities for packages: ipfs-cluster-fips, kargo, syncthing-fips, kubedock, kube-metrics-adapter, rke2-runtime-fips, kube-metrics-adapter-fips, kyverno-policy-reporter-plugins-trivy, opentelemetry-operator-fips, dkron-fips, kubernetes-dns-node-cache, eks-distro, frp, commercial-expanso-edge...

GO-2026-4771 vulnerabilities

Vulnerabilities for packages: vault-fips, commercial-grafana, teleport, gitaly, envoy-gateway-fips, vault...

GO-2026-4514 vulnerabilities

Vulnerabilities for packages: goreleaser, cri-tools, kubevela, loki-fips, terragrunt, chainloop-cli-fips, commercial-grafana, mcp-grafana, opentelemetry-collector-contrib, weaviate, ollama-fips, dagger, dgraph, mcp-grafana-fips, k3s, vcluster, k8sgpt, gitlab-runner, jfrog-cli, datadog-agent,...

GO-2026-5224 vulnerabilities

Vulnerabilities for packages: rancher, authentik-fips, azure-service-operator-fips, vault-fips, rancher-agent, azure-service-operator, cloudbeat-fips, authentik, cloudbeat, vault...

GO-2026-5597 vulnerabilities

Vulnerabilities for packages: argo-cd, terragrunt, chainloop-cli-fips, seaweedfs-rocksdb, seaweedfs-rocksdb-fips, external-secrets-operator, rancher-fleet-fips, flux, gitlab-rails-ce, external-secrets-operator-fips, rancher-fleet, argo-cd-fips, packer-fips, kyverno-fips, telegraf, rclone-fips,...

GO-2025-4245 vulnerabilities

Vulnerabilities for packages: argo-workflows, kargo, kubeflow-pipelines, argo-cd, argo-workflows-fips, nats, opentelemetry-collector-contrib, keda-fips, vale, kserve, keda, eks-distro, opentelemetry-collector-fips, k3s, coredns-fips, k8sgpt, datadog-agent, argo-rollouts-fips,...

GO-2026-5378 vulnerabilities

Vulnerabilities for packages: packer, docker-compose-fips, buildkitd-fips, kots, zarf-fips, containerd, datadog-agent, kube-arangodb, kubevela-fips, k9s, kaniko, rancher-agent, eks-node-monitoring-agent, packer-fips, spegel-fips, opa-envoy, consul-k8s, helm-mapkubeapis, rancher-helm,...

GO-2024-2453 vulnerabilities

Vulnerabilities for packages: cosign, goreleaser, policy-controller, slsa-verifier, argo-workflows, spire-server, crossplane-provider-aws-elasticache, crossplane, kubevela, terragrunt, crossplane-provider-aws-rds, gitsign, vexctl, sops, flux, crossplane-provider-aws-lambda, pulumi-language-dotnet...

GO-2026-4971 vulnerabilities

Vulnerabilities for packages: crossplane-aws-provider-fips, terraform-provider-databricks-fips, prometheus-mongodb-exporter-fips, ipfs-cluster-fips, amazon-eks-ami, crossplane-provider-aws-kinesis-fips, cloud-provider-gcp-cloud-controller-manager-fips, kubedock, prometheus-podman-exporter-fips,...