CLEANSTART-2026-DA82476 Security fixes in fulcio 1.7.1-r0

Package fulcio version 1.7.1-r0 fixes 6 vulnerabilities: CVE-2025-11065, CVE-2026-41178, CVE-2025-52893, ghsa-hrxh-6v49-42gf, ghsa-2464-8j7c-4cjm...

CVE-2025-11065 affecting package rook for versions less than 1.6.2-29

CVE-2025-11065 affecting package rook for versions less than 1.6.2-29. A patched version of the package is available...

Fedora: Security Advisory (FEDORA-2026-da55f4dcd8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-11065 affecting package keda for versions less than 2.14.1-11

CVE-2025-11065 affecting package keda for versions less than 2.14.1-11. A patched version of the package is available...

CVE-2025-11065 affecting package kured for versions less than 1.15.0-3

CVE-2025-11065 affecting package kured for versions less than 1.15.0-3. A patched version of the package is available...

CVE-2025-11065 affecting package telegraf for versions less than 1.31.0-15

CVE-2025-11065 affecting package telegraf for versions less than 1.31.0-15. A patched version of the package is available...

CVE-2025-11065 affecting package opa for versions less than 0.63.0-3

CVE-2025-11065 affecting package opa for versions less than 0.63.0-3. A patched version of the package is available...

CVE-2025-11065 affecting package moby-cli for versions less than 24.0.9-8

CVE-2025-11065 affecting package moby-cli for versions less than 24.0.9-8. A patched version of the package is available...

CVE-2025-11065 affecting package influxdb for versions less than 2.6.1-30

CVE-2025-11065 affecting package influxdb for versions less than 2.6.1-30. A patched version of the package is available...

CVE-2025-11065 affecting package terraform for versions less than 1.3.2-29

CVE-2025-11065 affecting package terraform for versions less than 1.3.2-29. A patched version of the package is available...

CVE-2025-11065 affecting package moby-buildx for versions less than 0.7.1-28

CVE-2025-11065 affecting package moby-buildx for versions less than 0.7.1-28. A patched version of the package is available...

Security update for cosign

This update for cosign fixes the following issues: Update to version 3.0.5 jscSLE-23879. Security issues fixed: CVE-2025-11065: github.com/go-viper/mapstructure/v2: sensitive Information leak in logs bsc1250620. CVE-2025-58181: golang.org/x/crypto/ssh: invalidated number of mechanisms can cause...

AZL-75530 CVE-2025-11065 affecting package moby-compose for versions less than 2.17.3-14

A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in...

AZL-75413 CVE-2025-11065 affecting package docker-cli for versions less than 25.0.7-2

A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in...

AZL-75440 CVE-2025-11065 affecting package keda for versions less than 2.14.1-11

A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in...

AZL-75428 CVE-2025-11065 affecting package influxdb for versions less than 2.7.5-13

A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in...

AZL-75524 CVE-2025-11065 affecting package moby-buildx for versions less than 0.7.1-28

A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in...

AZL-75434 CVE-2025-11065 affecting package kata-containers for versions less than 3.19.1.kata2-6

A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in...

AZL-75407 CVE-2025-11065 affecting package coredns for versions less than 1.11.4-14

A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in...

CVE-2025-11065 Github.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure

A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in...