5599 matches found
GHSA-6HX8-3WJJ-GR8G vulnerabilities
Vulnerabilities for packages: openstack-keystone-2026.1-fips, openstack-placement-2025.2-fips, openstack-glance-2025.2, openstack-glance-2025.2-fips, openstack-glance-2025.1-fips, openstack-placement-2025.2, openstack-glance-2026.1, openstack-placement-2025.1-fips, openstack-keystone-2025.2,...
wolfssl
wolfSSL Embedded SSL/TLS Library The wolfSSL embedded SSL library formerly CyaSSL is a lightweight SSL/TLS library written in ANSI C and targeted for embedded, RTOS, and resource-constrained environments - primarily because of its small size, speed, and feature set. It is commonly used in standar...
Scalar-Venom-Attack
Questo documento analizza le vulnerabilità crittografiche scoperte nelle moderne infrastrutture di gestione delle chiavi crittografiche, con particolare attenzione ai difetti critici nell'architettura dei moduli di sicurezza hardware HSM nella gestione delle chiavi private a curva ellittica. Lo...
CVE-2026-55688 vulnerabilities
Vulnerabilities for packages: druid, pinot-fips, apache-pulsar, apache-pulsar-fips...
GHSA-M452-Q8C9-RG2F vulnerabilities
Vulnerabilities for packages: druid, pinot-fips, apache-pulsar, apache-pulsar-fips...
USN-8666-3: Linux kernel (GCP FIPS) vulnerabilities
Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...
GO-2026-6293 vulnerabilities
Vulnerabilities for packages: temporal-ui-server-fips, temporal-fips, kube-metrics-adapter, temporal, listmonk, temporal-ui-server, kube-metrics-adapter-fips, falcosidekick-ui, falcosidekick-ui-fips...
wolfGuard
WolfGuard VPN mit FIPS 140-3 Kryptographie WolfGuard ist das wolfSSL FIPS-konforme Refactoring des auf dem Linux-Kernel basierenden WireGuard, ursprünglich entworfen und verfasst von Jason Donenfeld. Die Verwendung ist im Wesentlichen identisch. Es gibt zwei Hauptkomponenten von WolfGuard: das...
GO-2026-6259 vulnerabilities
Vulnerabilities for packages: velero-plugin-for-gcp-fips, velero-plugin-for-gcp, velero-plugin-for-microsoft-azure-fips, velero-plugin-for-microsoft-azure, velero-plugin-for-aws-fips, velero-plugin-for-aws...
GO-2026-6275 vulnerabilities
Vulnerabilities for packages: grafana, grafana-fips...
GO-2026-6274 vulnerabilities
Vulnerabilities for packages: grafana, grafana-fips...
GO-2026-6258 vulnerabilities
Vulnerabilities for packages: cortex-fips, thanos-fips, cortex-geomys-fips, pulumi-language-yaml, tempo-fips, cortex, thanos...
GO-2026-6250 vulnerabilities
Vulnerabilities for packages: cloudbeat, cloudbeat-fips...
CVE-2026-55677 vulnerabilities
Vulnerabilities for packages: temporal-ui-server-fips, temporal-fips, kube-metrics-adapter, temporal, listmonk, temporal-ui-server, kube-metrics-adapter-fips, falcosidekick-ui, falcosidekick-ui-fips...
GHSA-W67G-5RQW-F597 vulnerabilities
Vulnerabilities for packages: virt-handler-fips, cluster-api, kubevela-fips, milvus, aws-node-termination-handler-fips, virt-controller, etcd, plutono, amazon-ssm-agent-fips, aws-node-termination-handler, op-geth, prometheus, virt-controller-fips, juicefs-csi-driver, prometheus-fips,...
ejbca-pqc-lab
Laboratorio EJBCA Pure PQC — Gerarchia PKI a due livelli ML-DSA-65 Un'implementazione pratica di NIST FIPS 204 ML-DSA in una gerarchia PKI a due livelli utilizzando EJBCA Community Edition. 📖 Guida completa: Costruire una PKI post-quantistica: come ho firmato una Root CA e Sub CA usando ML-DSA su...
AZL-97671 CVE-2026-75803 affecting package openssl-fips-provider 3.1.2-2
Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is finalized by calling the EVPCipher function. Impact summary: Applications calling EVPCipher on an empty ciphertext and...
AZL-97668 CVE-2026-54874 affecting package openssl-fips-provider 3.1.2-2
Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more memory than the record itself requires. Impact summary: A peer can use a small amount of network traffic to make an OpenSSL DTLS endpoint retain a disproportionately large...
SUSE-RU-2026:3712-1 Security update 5.1.5 for Multi-Linux Manager Server
This update fixes the following issues: Release Notes Highlights: - Update to SUSE Multi-Linux Manager 5.1.5 Added known issue for missing BasicConstraints Critical flag Added a note about disk-check parameters semantics change Added a note about enabling FIPS mode after installing SUSE Multi-Lin...