Open Source Vulnerabilities

vault-k8s

Previously, a channel registered in the mux's chanList is not usable until it is established

sealed-secrets

Previously, a channel registered in the mux's chanList is not usable until it is established

step

gRPC-Go is the Go language implementation of gRPC

sealed-secrets

Previously, a channel registered in the mux's chanList is not usable until it is established

external-secrets-operator

source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

helm-operator

source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

helm-operator

ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label

istio

ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label

istio

ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label

elasticsearch

yawkat LZ4 Java provides LZ4 compression for Java

npm

brace-expansion through 5

rancher-fleet-agent

Helm is a package manager for Charts for Kubernetes

opentelemetry-collector-contrib

malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log

weaviate-fips

HashiCorp memberlist before version 0

weaviate-fips

HashiCorp memberlist before version 0

opentelemetry-collector

source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

solr

Netty is an asynchronous, event-driven network application framework

Terminal escape sequence injection in mix usage_rules.search_docs via package documentation metadata

usage_rules,

Terminal escape sequence injection in mix usage_rules.search_docs via package documentation metadata

389-ds-base, 389-ds-base-bdb, 389-ds-base-devel, 389-ds-base-libs, 389-ds-base-snmp, python3-lib389

Critical: 389-ds-base security, bug fix, and enhancement update

kernel, kernel-64k, kernel-64k-core, kernel-64k-debug, kernel-64k-debug-core, kernel-64k-debug-devel, kernel-64k-debug-devel-matched, kernel-64k-debug-modules, kernel-64k-debug-modules-core, kernel-64k-debug-modules-extra, kernel-64k-devel, kernel-64k-devel-matched, kernel-64k-modules, kernel-64k-modules-core, kernel-64k-modules-extra, kernel-abi-stablelists, kernel-core, kernel-cross-headers, kernel-debug, kernel-debug-core, kernel-debug-devel, kernel-debug-devel-matched, kernel-debug-modules, kernel-debug-modules-core, kernel-debug-modules-extra, kernel-debug-uki-virt, kernel-devel, kernel-devel-matched, kernel-doc, kernel-headers, kernel-modules, kernel-modules-core, kernel-modules-extra, kernel-modules-extra-matched, kernel-rt, kernel-rt-64k, kernel-rt-64k-core, kernel-rt-64k-debug, kernel-rt-64k-debug-core, kernel-rt-64k-debug-devel, kernel-rt-64k-debug-modules, kernel-rt-64k-debug-modules-core, kernel-rt-64k-debug-modules-extra, kernel-rt-64k-devel, kernel-rt-64k-modules, kernel-rt-64k-modules-core, kernel-rt-64k-modules-extra, kernel-rt-core, kernel-rt-debug, kernel-rt-debug-core, kernel-rt-debug-devel, kernel-rt-debug-modules, kernel-rt-debug-modules-core, kernel-rt-debug-modules-extra, kernel-rt-devel, kernel-rt-modules, kernel-rt-modules-core, kernel-rt-modules-extra, kernel-tools, kernel-tools-libs, kernel-tools-libs-devel, kernel-uki-virt, kernel-uki-virt-addons, kernel-zfcpdump, kernel-zfcpdump-core, kernel-zfcpdump-devel, kernel-zfcpdump-devel-matched, kernel-zfcpdump-modules, kernel-zfcpdump-modules-core, kernel-zfcpdump-modules-extra, libperf, perf, python3-perf, rtla, rv

Important: kernel security, bug fix, and enhancement update

kernel, kernel-64k, kernel-64k-core, kernel-64k-debug, kernel-64k-debug-core, kernel-64k-debug-devel, kernel-64k-debug-devel-matched, kernel-64k-debug-modules, kernel-64k-debug-modules-core, kernel-64k-debug-modules-extra, kernel-64k-devel, kernel-64k-devel-matched, kernel-64k-modules, kernel-64k-modules-core, kernel-64k-modules-extra, kernel-abi-stablelists, kernel-core, kernel-cross-headers, kernel-debug, kernel-debug-core, kernel-debug-devel, kernel-debug-devel-matched, kernel-debug-modules, kernel-debug-modules-core, kernel-debug-modules-extra, kernel-debug-uki-virt, kernel-devel, kernel-devel-matched, kernel-doc, kernel-headers, kernel-modules, kernel-modules-core, kernel-modules-extra, kernel-rt, kernel-rt-64k, kernel-rt-64k-core, kernel-rt-64k-debug, kernel-rt-64k-debug-core, kernel-rt-64k-debug-devel, kernel-rt-64k-debug-modules, kernel-rt-64k-debug-modules-core, kernel-rt-64k-debug-modules-extra, kernel-rt-64k-devel, kernel-rt-64k-modules, kernel-rt-64k-modules-core, kernel-rt-64k-modules-extra, kernel-rt-core, kernel-rt-debug, kernel-rt-debug-core, kernel-rt-debug-devel, kernel-rt-debug-modules, kernel-rt-debug-modules-core, kernel-rt-debug-modules-extra, kernel-rt-devel, kernel-rt-modules, kernel-rt-modules-core, kernel-rt-modules-extra, kernel-tools, kernel-tools-libs, kernel-tools-libs-devel, kernel-uki-virt, kernel-uki-virt-addons, kernel-zfcpdump, kernel-zfcpdump-core, kernel-zfcpdump-devel, kernel-zfcpdump-devel-matched, kernel-zfcpdump-modules, kernel-zfcpdump-modules-core, kernel-zfcpdump-modules-extra, libperf, perf, python3-perf, rtla, rv

Important: kernel security update

dotnet6, dotnet7, dotnet8, dotnet10, dotnet8, dotnet10

gpsd-minimal, gpsd-minimal-clients

Important: gpsd-minimal security update

opentelemetry-collector

Important: opentelemetry-collector security update

opentelemetry-collector

Important: opentelemetry-collector security update

dotnet6, dotnet7, dotnet10, dotnet10

gpsd, gpsd-clients, python3-gpsd

Important: gpsd security update

thunderbird

Important: thunderbird security update

thunderbird

Important: thunderbird security update

thunderbird

Important: thunderbird security update

microcode_ctl

Important: microcode_ctl security, bug fix, and enhancement update

redis, redis-devel, redis-doc

Important: redis security, bug fix, and enhancement update

pam, pam-devel, pam-docs

Moderate: pam security update

expat, expat-devel

Moderate: expat security update

expat, expat-devel

Moderate: expat security update

valkey, valkey-devel

Important: valkey security, bug fix, and enhancement update

glib2, glib2-devel, glib2-doc, glib2-static, glib2-tests

Moderate: glib2 security update

glib2, glib2-devel, glib2-doc, glib2-static, glib2-tests

Moderate: glib2 security update

xz, xz-devel, xz-libs, xz-lzma-compat

Moderate: xz security update

buildah, buildah-tests

Important: buildah security update

python-pypdf

python313-pypdf-6.16.2-3.1 on GA media

python-nbconvert

jupyter-nbconvert-7.17.1-2.1 on GA media

python-geopy

python313-geopy-2.5.0-1.1 on GA media

python-comfyui-frontend-package

python313-comfyui-frontend-package-1.52.7-1.1 on GA media

perl-DBD-Pg

perl-DBD-Pg-3.21.2-1.1 on GA media

mariadb-connector-c

libmariadb-devel-3.4.9-2.1 on GA media

llamacpp

ggml-devel-0.4.0-1.1 on GA media

libheif

gdk-pixbuf-loader-libheif-1.23.4-1.1 on GA media

helm

helm-4.2.4-3.1 on GA media