CLEANSTART-2026-SA31637 Security fixes in knative-net-istio 1.21.4-r2

Package knative-net-istio version 1.21.4-r2 fixes 2 vulnerabilities: CVE-2026-41178, ghsa-259r-337f-4rfw...

CLEANSTART-2026-KT57055 Security fixes in knative-serving 1.20.3-r0

Package knative-serving version 1.20.3-r0 fixes 2 vulnerabilities: ghsa-259r-337f-4rfw, CVE-2026-41178...

CLEANSTART-2026-OT46541 Security fixes in secrets-store-csi-driver-fips 1.6.0-r1

Package secrets-store-csi-driver-fips version 1.6.0-r1 fixes 5 vulnerabilities: CVE-2026-56852, ghsa-hrxh-6v49-42gf, CVE-2026-41178, CVE-2026-42505, CVE-2026-39822...

CLEANSTART-2026-OS37166 Security fixes in tempo-fips 3.0.2-r2

Package tempo-fips version 3.0.2-r2 fixes 1 vulnerabilities: CVE-2026-41178...

CLEANSTART-2026-KT94915 Security fixes in knative-net-istio 1.22.1-r0

Package knative-net-istio version 1.22.1-r0 fixes 4 vulnerabilities: CVE-2026-46600, CVE-2026-56852, ghsa-hrxh-6v49-42gf, CVE-2026-41178...

CLEANSTART-2026-AY98693 Security fixes in elastic-beats 9.2.8-r7

Package elastic-beats version 9.2.8-r7 fixes 2 vulnerabilities: ghsa-259r-337f-4rfw, CVE-2026-41178...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-secretsmanager, trivy, crossplane-provider-aws-osis-fips, hydra-fips, crossplane-provider-aws-route53resolver, spicedb-operator, zitadel, flux-kustomize-controller, cloud-provider-azure-fips, cloud-provider-azure, gitlab-operator, scorecard,...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elasticache, terraform-provider-acme, kyverno, kaniko, kapp-controller, kubernetes-dns-node-cache, kubernetes-csi-driver-hostpath, crossplane-provider-aws-memorydb, gatekeeper, gitaly, cadvisor, goreleaser, k8sgpt, k8ssandra-client,...

UBUNTU-CVE-2026-41178

OpenTelemetry-Go is the Go implementation of OpenTelemetry. Versions 1.41.0 and 1.43.0 removed raw-length rejection and it causes Parse to process arbitrarily large/invalid baggage headers and log errors, enabling DoS via oversized inputs. Versions 1.42.0 and 1.44.0 fix the issue...