GHSA-9XWW-4CJX-6W55 vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips...

GHSA-4XPW-245V-VP2W vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips...

GHSA-V6XP-H7WW-6XQF vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips...

GHSA-94XW-8RG2-4FMC vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips...

GHSA-J7VJ-RW65-4V26 vulnerabilities

Vulnerabilities for packages: kiam, velero, boring-registry-fips, kargo, nats, k9s, nfs-subdir-external-provisioner, policy-controller, kubernetes-ingress-defaultbackend, aactl, victoriametrics-cluster, request-1279, litestream, aws-efs-csi-driver, karpenter, ollama, mc, metallb, frp, helm,...

GHSA-49GW-VXVF-FC2G vulnerabilities

Vulnerabilities for packages: kiam, velero, boring-registry-fips, kargo, nats, k9s, nfs-subdir-external-provisioner, policy-controller, kubernetes-ingress-defaultbackend, aactl, request-1279, litestream, karpenter, ollama, mc, metallb, frp, helm, sonobuoy, prometheus-mongodb-exporter-fips,...

GHSA-8XFX-RJ4P-23JM vulnerabilities

Vulnerabilities for packages: kiam, velero, boring-registry-fips, kargo, nats, k9s, nfs-subdir-external-provisioner, policy-controller, kubernetes-ingress-defaultbackend, aactl, victoriametrics-cluster, request-1279, litestream, aws-efs-csi-driver, karpenter, ollama, mc, metallb, frp, helm,...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: boring-registry-fips, k9s, nfs-subdir-external-provisioner, policy-controller, kubernetes-ingress-defaultbackend, aactl, litestream, aws-efs-csi-driver, karpenter, mc, frp, helm, sonobuoy, prometheus-mongodb-exporter-fips, kubecolor, libnvidia-container, thanos,...

GHSA-3WHM-J4XM-RV8X vulnerabilities

Vulnerabilities for packages: kiam, velero, boring-registry-fips, kargo, nats, k9s, kubernetes-dashboard-web, nfs-subdir-external-provisioner, policy-controller, kubernetes-ingress-defaultbackend, aactl, victoriametrics-cluster, request-1279, x509-certificate-exporter-fips, litestream, karpenter,...

GHSA-3F6R-QH9C-X6MM vulnerabilities

Vulnerabilities for packages: kiam, velero, boring-registry-fips, nats, k9s, kubernetes-dashboard-web, policy-controller, kubernetes-ingress-defaultbackend, aactl, request-1279, x509-certificate-exporter-fips, litestream, aws-efs-csi-driver, karpenter, sqlexporter-fips, metallb, frp, helm,...

CVE-2025-27144 vulnerabilities

Vulnerabilities for packages: rekor, boring-registry-fips, podman, step-ca, kargo, skopeo, policy-controller, kyverno, aactl, istio-pilot-agent, distribution, tkn-fips, opentelemetry-collector-contrib-fips, trivy, flux-source-controller, trufflehog-fips, kiali-fips, step-ca-fips, frp, dex,...

GHSA-C6GW-W398-HV78 vulnerabilities

Vulnerabilities for packages: rekor, boring-registry-fips, podman, step-ca, kargo, skopeo, policy-controller, kyverno, aactl, istio-pilot-agent, distribution, tkn-fips, opentelemetry-collector-contrib-fips, trivy, flux-source-controller, trufflehog-fips, kiali-fips, step-ca-fips, frp, dex,...

OESA-2025-1167 etcd security update

%expand: Security Fixes: A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes...

SUSE-SU-2025:0590-1 Security update for netty, netty-tcnative

This update for netty, netty-tcnative fixes the following issues: - CVE-2025-24970: incorrect validation of packets by SslHandler can lead to a native crash. bsc1237037 - CVE-2025-25193: unsafe reading of environment files can lead to an application crash. bsc1237038 Update to netty version 4.1.1...

SUSE CVE-2024-9355

A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted...

CVE-2024-35311

Yubico YubiKey 5 Series before 5.7.0, Security Key Series before 5.7.0, YubiKey Bio Series before 5.6.4, and YubiKey 5 FIPS before 5.7.2 have Incorrect Access Control...

GHSA-JGFP-53C3-624W vulnerabilities

Vulnerabilities for packages: local-static-provisioner, local-static-provisioner-fips, argo-rollouts-fips, kapp, kubernetes-csi-driver-hostpath, azuredisk-csi-fips, kubernetes, nodetaint, aws-efs-csi-driver, azuredisk-csi, kapp-fips, kubernetes-csi-driver-nfs, kubernetes-dns-node-cache-fips,...

GHSA-Q9W6-CWJ4-GF4P vulnerabilities

Vulnerabilities for packages: temporal-server-fips, temporal-fips, temporal-ui-server, temporal-ui-server-fips, temporal, temporal-server...

openssl security update

3.2.2-6.0.1.1 - Enable openssl-fips-provider dependency Orabug: 36504822 - Temporary disable openssl-fips-provider dependency Orabug: 36504822 - Replace upstream references Orabug: 34340177 1:3.2.2-6.1 - RFC7250 handshakes with unauthenticated servers don't abort as expected CVE-2024-12797...

SUSE SLED15: crypto-policies / crypto-policies-scripts / krb5 / krb5-32bit / etc (SUSE-SU-2025:0401-1)

"The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0401-1 advisory. Security issue fixed: - CVE-2025-24528: Fixed out-of-bounds write caused by overflow when calculating ul...