Open Source Vulnerabilities

commercial-gitlab-workhorse-ee-fips-19.2

commercial-gitlab-workhorse-ee-fips-19.2

commercial-gitlab-workhorse-ee-fips-19.2

commercial-gitlab-workhorse-ee-fips-19.2

commercial-gitlab-workhorse-ee-fips-19.2

commercial-gitlab-workhorse-ee-fips-19.2

commercial-gitlab-workhorse-ee-fips-19.2

commercial-gitlab-workhorse-ee-fips-19.2

commercial-gitlab-workhorse-ee-fips-19.2

, Kernel

vlan: fix skb_under_panic and races when toggling HW VLAN offload

, Kernel

crypto: krb5 - use kfree_sensitive() for derived key buffers

, Kernel

xhci: dbgtty: Fix unregister on tty_register_driver() failure

, Kernel

crypto: qcom-rng - Allow zero as a random number

, Kernel

KVM: s390: vsie: zero stale crypto bits

cluster-api-azure-controller

cluster-api-azure-controller

fastdds, fastdds

fastdds, fastdds

@astrojs/internal-helpers, @astrojs/prism, @astrojs/rss, @astrojs/telemetry, @astrojs/underscore-redirects, @astrojs/upgrade, astro, create-astro

TuxCare security update for 8 packages (1 CVE)

drupal/colorbox

TuxCare security update for drupal/colorbox (1 CVE)

cluster-api-aws-controller

cluster-api-aws-controller

cluster-api-capd-manager, cluster-api-controller, cluster-api-kubeadm-bootstrap-controller, cluster-api-kubeadm-control-plane-controller

cluster-api-capd-manager, cluster-api-controller, cluster-api-kubeadm-bootstrap-controller, cluster-api-kubeadm-control-plane-controller

, Kernel

io_uring: defer eventfd signaling when queued from a wakeup handler

, Kernel

drm/amdgpu: fix recursive ww_mutex acquire in amdgpu_devcoredump_format

, Kernel

HID: core: fix number/pointer type confusion on long items

, Kernel

PCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems

, Kernel

kcov: fix data corruption and race conditions on PREEMPT_RT

, Kernel

drm/xe: Fix DPT allocation paths.

cloudnative-pg-fips-1.28, cloudnative-pg-fips-1.28-plugins

cloudnative-pg-fips-1.28, cloudnative-pg-fips-1.28-plugins

cloudnative-pg-fips-1.27, cloudnative-pg-fips-1.27-plugins

cloudnative-pg-fips-1.27, cloudnative-pg-fips-1.27-plugins

Cups: openprinting cups: remaining case-insensitive username matching in scheduler side paths (cve-2026-27447 follow-up)

cloudnative-pg-1.28, cloudnative-pg-1.28-plugins

cloudnative-pg-1.28, cloudnative-pg-1.28-plugins

cloudnative-pg-1.27, cloudnative-pg-1.27-plugins

cloudnative-pg-1.27, cloudnative-pg-1.27-plugins

cloudnative-pg, cloudnative-pg-plugins

cloudnative-pg, cloudnative-pg-plugins

, Kernel

Bluetooth: ISO: fix use-after-free of listener socket in iso_conn_ready

cilium-fips-1.17, cilium-fips-1.17-clustermesh-apiserver, cilium-fips-1.17-hubble-relay, cilium-fips-1.17-operator, cilium-fips-1.17-operator-aws, cilium-fips-1.17-operator-azure, cilium-fips-1.17-operator-generic

cilium-fips-1.17, cilium-fips-1.17-clustermesh-apiserver, cilium-fips-1.17-hubble-relay, cilium-fips-1.17-operator, cilium-fips-1.17-operator-aws, cilium-fips-1.17-operator-azure, cilium-fips-1.17-operator-generic

cilium-fips-1.16, cilium-fips-1.16-hubble-relay, cilium-fips-1.16-operator-aws, cilium-fips-1.16-operator-generic

cilium-fips-1.16, cilium-fips-1.16-hubble-relay, cilium-fips-1.16-operator-aws, cilium-fips-1.16-operator-generic

cilium-envoy-fips-1.17

cilium-envoy-fips-1.17

cilium-envoy-fips-1.16

cilium-envoy-fips-1.16