CLEANSTART-2026-TO97243 Security fixes in yunikorn-k8shim 1.8.0-r1

Package yunikorn-k8shim version 1.8.0-r1 fixes 3 vulnerabilities: ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc, ghsa-5cgq-3rg8-m6cv...

CLEANSTART-2026-FZ96699 Security fixes in postgres-operator 1.13.0-r1

Package postgres-operator version 1.13.0-r1 fixes 3 vulnerabilities: ghsa-vgwf-h737-ff37, ghsa-5cgq-3rg8-m6cv, ghsa-rm3j-f69w-wqmq...

CLEANSTART-2026-HG20195 Security fixes in ip-masq-agent 2.12.0-r1

Package ip-masq-agent version 2.12.0-r1 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-33814...

CLEANSTART-2026-ER59632 Security fixes in victoriametrics-operator 0.71.0-r1

Package victoriametrics-operator version 0.71.0-r1 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...

CLEANSTART-2026-ZS03179 Security fixes in opentelemetry-collector-contrib 0.153.0-r3

Package opentelemetry-collector-contrib version 0.153.0-r3 fixes 1 vulnerabilities: ghsa-259r-337f-4rfw...

CLEANSTART-2026-HQ56526 Security fixes in knative-net-istio 1.21.4-r1

Package knative-net-istio version 1.21.4-r1 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...

CLEANSTART-2026-DD27612 Security fixes in k8ssandra-operator 1.26.0-r0

Package k8ssandra-operator version 1.26.0-r0 fixes 51 vulnerabilities: CVE-2026-25681, CVE-2026-27136, CVE-2026-33814, CVE-2026-39821, CVE-2025-47911...

CLEANSTART-2026-YC19931 Security fixes in kube-vip-fips 1.1.2-r1

Package kube-vip-fips version 1.1.2-r1 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...

OPENSUSE-SU-2026:11505-1 jetty-annotations-9.4.58-5.1 on GA media

These are all security issues fixed in the jetty-annotations-9.4.58-5.1 package on the GA media of openSUSE Tumbleweed...

[slackware-security] openssh

New openssh packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/openssh-10.5p1-i586-1slack15.0.txz: Upgraded. This release contains a number of security fixes and small bugfixes. For more...

UBUNTU-CVE-2026-19546

A flaw was found in DBI. This is a fix for a partial fix for CVE-2026-14380 for RHEL 9.8.z and 10.2.z. For a detailed Statement, Description and Mitigation please reffer to the original https://access.redhat.com/security/cve/cve-2026-19546...

RHSA-2026:52928 Red Hat Security Advisory: postgresql-jdbc security update

Bulletin has no description...

ROOT-APP-NPM-CVE-2021-21353 CVE-2021-21353 in pug - Patched by Root

Root has patched CVE-2021-21353 in the pug package for Root:npm. Multiple fixed versions available...

Critical: Red Hat Security Advisory: RHOAI 3.4.3 - Red Hat OpenShift AI

Updated images are now available for Red Hat OpenShift AI. Release of RHOAI 3.4.3 provides these changes:...

chromedriver-151.0.7922.108-1.1 on GA media (moderate)

chromedriver-151.0.7922.108-1.1 on GA media Announcement ID: openSUSE-SU-2026:11484-1 Rating: moderate Cross-References: CVE-2026-19137 CVE-2026-19138 CVE-2026-19139 CVE-2026-19140 CVE-2026-19141 CVE-2026-19142 CVE-2026-19143 CVE-2026-19144 CVE-2026-19145 CVE-2026-19146 CVE-2026-19147...

MGASA-2026-0329 Updated php8.4 packages fix security vulnerabilities

The updated php 8.4 packages fix some security vulnerabilities. See the references for more information...

CVE-2026-68406

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: validate PMSR FTM preamble range PMSR FTM request parsing accepts preamble values outside the enumerated nl80211 preamble range. Reject out-of-range values before using them in the parser capability bit test using...

CVE-2026-68392

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: fix locking in unpairdevice/disconnectsync Dereferencing RCU-protected pointers outside critical sections is invalid and may lead to UAF. Take hdev-lock for hciconn lookup and hciabortconn. Don't use RCU to ensur...

CVE-2026-68426

CVE-2026-68426 affects the Linux kernel xfrm subsystem. A bug in async crypto handling can leave skb->prev pointing to freed memory when GSO segments are stolen, causing a use-after-free. Reported impact includes potential denial of service or, in some cases, arbitrary code execution. The fix ...

CVE-2026-68417

The CVE-2026-68417 issue affects the Linux kernel RDMA/siw component. Root cause: siw_create_qp() calls siw_qp_add() before QP state/queues/CQs/completion/device list are fully initialized, allowing a QPN lookup to reach a QP still under construction. The remediation implemented in the public des...