CLEANSTART-2026-RR51719 Security fixes in openbao-fips 2.4.4-r7

Package openbao-fips version 2.4.4-r7 fixes 2 vulnerabilities: ghsa-pjcq-xvwq-hhpj, CVE-2026-32952...

CLEANSTART-2026-JN77372 Security fixes in opentofu-fips 1.10.10-r0

Package opentofu-fips version 1.10.10-r0 fixes 2 vulnerabilities: ghsa-pjcq-xvwq-hhpj, CVE-2026-32952...

CLEANSTART-2026-AA85739 Security fixes in openbao-fips 2.2.2-r8

Package openbao-fips version 2.2.2-r8 fixes 2 vulnerabilities: ghsa-pjcq-xvwq-hhpj, CVE-2026-32952...

CLEANSTART-2026-LN96571 Security fixes in opentofu-fips 1.11.7-r0

Package opentofu-fips version 1.11.7-r0 fixes 2 vulnerabilities: ghsa-pjcq-xvwq-hhpj, CVE-2026-32952...

CLEANSTART-2026-YI70323 Security fixes in openbao-fips 2.5.4-r0

Package openbao-fips version 2.5.4-r0 fixes 2 vulnerabilities: CVE-2026-32952, CVE-2026-41889...

CLEANSTART-2026-NM43450 Security fixes for CVE-2026-24051, CVE-2026-29181, CVE-2026-32952, CVE-2026-33186, CVE-2026-34986, CVE-2026-39883, ghsa-78h2-9frx-2jm8, ghsa-9h8m-3fm2-qjrq, ghsa-hfvc-g4fc-pqhx, ghsa-mh2q-q3fh-2475, ghsa-mpwr-8vm7-h73f, ghsa-p77j-4mvh-x3m3, ghsa-pjcq-xvwq-hhpj applied in versions: 1.19.2-r0, 1.19.2-r2

Multiple security vulnerabilities affect the cert-manager package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-YF30779 Security fixes for CVE-2025-68121, CVE-2026-1229, CVE-2026-27145, CVE-2026-29181, CVE-2026-32952, CVE-2026-33811, CVE-2026-33812, CVE-2026-33813, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-42499, CVE-2026-42500, CVE-2026-42501, CVE-2026-42504, CVE-2026-42507, CVE-2026-42508, CVE-2026-44740, CVE-2026-44973, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, CVE-2026-46599, ghsa-m3xc-h892-ggx6, ghsa-mh2q-q3fh-2475, ghsa-mqgf-5vvp-8fh8, ghsa-pjcq-xvwq-hhpj, ghsa-qw64-3x98-g7q2 applied in versions: 1.72.1-r1, 1.73.1-r0, 1.73.5-r0, 1.73.5-r2, 1.73.5.r1

Multiple security vulnerabilities affect the rclone package. These issues are resolved in later releases. See references for individual vulnerability details...

ROOT-APP-GOBINARY-CVE-2026-32952 CVE-2026-32952 in rootio-github.com/Azure/go-ntlmssp - Patched by Root

Root has patched CVE-2026-32952 in the rootio-github.com/Azure/go-ntlmssp package for Root:Go. Multiple fixed versions available...

CLEANSTART-2026-ZU61086 Security fixes for CVE-2026-32952, ghsa-mh2q-q3fh-2475, ghsa-pjcq-xvwq-hhpj applied in versions: 2.4.1-r0

Multiple security vulnerabilities affect the external-secrets-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OX06093 Security fixes for CVE-2025-54410, CVE-2026-32952, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-40179, CVE-2026-42499, CVE-2026-42501, ghsa-4vq8-7jfc-9cvp, ghsa-p77j-4mvh-x3m3, ghsa-pjcq-xvwq-hhpj, ghsa-vffh-x6r8-xx99, ghsa-wg65-39gg-5wfj applied in versions: 8.18.1-r0, 8.19.15-r0, 8.19.15-r2, 8.19.15-r3, 9.1.10-r0

Multiple security vulnerabilities affect the elastic-beats package. These issues are resolved in later releases. See references for individual vulnerability details...

rclone-1.74.0-1.1 on GA media (moderate)

rclone-1.74.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:10682-1 Rating: moderate Cross-References: CVE-2026-32952 CVE-2026-33813 Affected Products: openSUSE Tumbleweed An update that solves 2 vulnerabilities can now be installed. Description: These are all security issues fixed in the...

cmctl-2.5.0-1.1 on GA media (moderate)

cmctl-2.5.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:10672-1 Rating: moderate Cross-References: CVE-2026-32952 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the cmctl-2.5.0-1.1...

Linux Distros Unpatched Vulnerability : CVE-2026-32952

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - go-ntlmssp is a Go package that provides NTLM/Negotiate authentication over HTTP. Prior to version 0.1.1, a malicious NTLM challenge message can causes an slice...

CVE-2026-32952 vulnerabilities

Vulnerabilities for packages: terraform, zot, cert-manager-csi-driver, rancher, rclone, bento, harbor, rancher-agent, kyverno, trufflehog, xeol, sftpgo-plugin-auth, dex, spqr, openbao, flux-source-controller, seaweedfs, minio, yunikorn-k8shim, grafana, gitea, cert-manager-cmctl, k6, nuclei,...

CVE-2026-32952 vulnerabilities

Vulnerabilities for packages: cert-manager-csi-driver, kyverno-notation-aws, terraform, kyverno-fips, ldap2pg, grafana-fips, telegraf, openbao-fips, rancher-agent, cert-manager-istio-csr, cert-manager-openshift-routes, xeol-fips, flux-fips, cert-manager-cmctl-fips, zot, agentbeat, openbao,...

CVE-2026-32952

go-ntlmssp is a Go package that provides NTLM/Negotiate authentication over HTTP. Prior to version 0.1.1, a malicious NTLM challenge message can causes an slice out of bounds panic, which can crash any Go process using ntlmssp.Negotiator as an HTTP transport. Version 0.1.1 patches the issue...

UBUNTU-CVE-2026-32952

go-ntlmssp is a Go package that provides NTLM/Negotiate authentication over HTTP. Prior to version 0.1.1, a malicious NTLM challenge message can causes an slice out of bounds panic, which can crash any Go process using ntlmssp.Negotiator as an HTTP transport. Version 0.1.1 patches the issue...

CVE-2026-32952

go-ntlmssp is a Go package that provides NTLM/Negotiate authentication over HTTP. Prior to version 0.1.1, a malicious NTLM challenge message can causes an slice out of bounds panic, which can crash any Go process using ntlmssp.Negotiator as an HTTP transport. Version 0.1.1 patches the issue...