GHSA-W6C6-C85G-MMV6 vulnerabilities

Vulnerabilities for packages: commercial-chainloop-backend, kubescape-server, commercial-kyverno, kyverno-notation-aws, policy-controller-fips, cloudbeat, cloudbeat-fips, kyverno-notation-aws-fips, crossplane, ratify, kubescape, slsa-verifier, trivy-operator, trivy-operator-fips, chainctl-fips,...

CVE-2026-4428

The CVE relates to AWS-LC CRL distribution point validation logic before 1.71.0. A logic error caused partitioned CRLs to be incorrectly rejected as out of scope, enabling a revoked certificate to bypass revocation checks. Affected software is AWS-LC prior to 1.71.0; the issue is fixed in AWS-LC ...

RHSA-2026:0794 Red Hat Security Advisory: openssl and openssl-fips-provider security update

Bulletin has no description...

GHSA-V9H3-MQGC-W575 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

CLSA-2025-1762198875 Update of kernel

Rebased FIPS patches to 5.14.0-570.58.1...

CVE-2025-12194

Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java FIPS bc-fips on All API modules, Legion of the Bouncy Castle Inc. Bouncy Castle for Java LTS bcprov-lts8on on All API modules allows Excessive Allocation. This vulnerability is associated wi...

Bouncy Castle Java 安全漏洞

Bouncy Castle Java is a cryptographic algorithm program open-sourced by Legion of the Bouncy Castle Inc. A security vulnerability exists in Bouncy Castle Java FIPS version 2.1.0 through 2.1.1 and LTS version 2.73.0 through 2.73.7, which stems from uncontrolled consumption of resources that could...

GHSA-V8G6-HVF8-9CWQ vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, gitlab-runner...

CLSA-2025-1752189542 Update of kernel

Rebased FIPS patches to 5.14.0-570.25.1...

openshift: OCP & FIPS mode

A compliance problem was found in the Red Hat OpenShift Container Platform. Red Hat discovered that, when FIPS mode was enabled, not all of the cryptographic modules in use were FIPS-validated...