Threats Tagged 'alpine'

The promxy package version 0.0.96-r3 addresses three distinct security vulnerabilities identified by the GHSA identifiers ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc, and ghsa-5cgq-3rg8-m6cv. This release provides security fixes to mitigate these issues. No CVSS score or detailed impact information is provided for these vulnerabilities. There are no known exploits in the wild associated with these vulnerabilities at this time.

The dynatrace-operator package version 1.10.0-r1 addresses a security vulnerability identified as CVE-2026-46600. This update includes a patch that fixes the vulnerability. No details on the nature or impact of the vulnerability or exploitation in the wild are provided.

Terraform version 1.15.7-r2 addresses a security vulnerability identified as CVE-2026-41178. This update fixes the vulnerability in the specified version. No details about the nature of the vulnerability or its impact are provided. There are no known exploits in the wild related to this issue. The vulnerability affects the Alpine ecosystem version 1.15.7-r2 of Terraform.

A vulnerability identified as CVE-2026-41178 affects the tempo-fips package. The issue is addressed in version 3.0.2-r2 of tempo-fips, which includes security fixes. No specific technical details or impact descriptions are provided. There is no CVSS score available for this vulnerability. No known exploits are reported in the wild. The affected ecosystem includes Alpine. A patch is available in the fixed version 3.0.2-r2.

The trillian-fips package version 1.7.3-r1 addresses three distinct security vulnerabilities identified by their GHSA identifiers. This release provides security fixes to mitigate these issues. No CVSS score or detailed impact information is provided for these vulnerabilities. There are no known exploits in the wild associated with these vulnerabilities at this time.

The airflow-3 package version 3.3.0-r2 addresses seven security vulnerabilities including CVE-2026-69244. This release provides fixes for these issues, improving the security posture of the software. No CVSS score is available for CVE-2026-69244. There is no indication of known exploits in the wild for this vulnerability. The affected version is specifically 3.3.0-r2, which contains the fixes.

The airflow-3 package version 3.3.0-r3 addresses a security vulnerability identified as CVE-2026-71554. This update includes a fix for the vulnerability, improving the security posture of the affected software. No CVSS score or detailed technical impact information is provided for this vulnerability. There are no known exploits in the wild at this time. The affected version is specifically 3.3.0-r3, which contains the fix.

The dynatrace-operator package version 1.10.1-r1 addresses a security vulnerability identified as CVE-2026-46600. This update provides a fix for the vulnerability, improving the security posture of the affected software. No details about the nature of the vulnerability or its impact are provided. There are no known exploits in the wild related to this issue. The package is not a cloud service, so remediation requires applying the update. No CVSS score is available for this vulnerability.

The kube-rbac-proxy-fips package version 0.22.0-r1 addresses a security vulnerability identified as CVE-2026-41178. This update includes a fix for the vulnerability, improving the security posture of the affected software. No detailed technical information or CVSS score is provided for this vulnerability. There are no known exploits in the wild associated with this issue at this time.

A security vulnerability identified as CVE-2026-46600 affects the smarter-device-manager package. The vulnerability is addressed in version 1.20.11-r2 of the package. A patch is available to remediate this issue. No CVSS score is provided for this vulnerability.