CVE-2026-42038 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, prism, lerna, gitlab-rails-ce, kubeflow-centraldashboard, opensearch-dashboards-fips, redisinsight, nextcloud-server, langfuse-fips, awx, wazuh-dashboard, jitsucom-jitsu, langfuse, kubeflow-katib, saf, wazuh-dashboard-fips, gitlab-rails-ce-fips...

CLEANSTART-2026-DR81473 HashiCorp’s go-getter library up to v1

Multiple security vulnerabilities affect the harbor-scanner-trivy-fips package. HashiCorp’s go-getter library up to v1. See references for individual vulnerability details...

GHSA-GV3V-2CPP-3PMQ vulnerabilities

Vulnerabilities for packages: keycloak-fips, keycloak...

SUSE-SU-2026:0976-1 Security update for go1.26-openssl

This update for go1.26-openssl fixes the following issues: Update to go 1.26.1 bsc1255111, jscSLE-18320: - CVE-2026-25679: net/url: reject IPv6 literal not at start of host bsc1259264. - CVE-2026-27137: crypto/x509: incorrect enforcement of email constraints bsc1259266. - CVE-2026-27138:...

Security update for openCryptoki

This update for openCryptoki fixes the following issues: Security fixes: CVE-2026-23893: Fixed privilege escalation or data exposure via symlink following bsc1257116 Other fixes: Fixed FIPS mode bsc1248002 Patch Instructions: To install this SUSE update use the SUSE recommended installation metho...

GHSA-8F2F-6W9M-MG42 vulnerabilities

Vulnerabilities for packages: gitlab-pages-fips, gitlab-runner, gitlab-runner-fips, gitlab-rails-ce-fips...

go-toolset:ol8 security and bug fix update

go-toolset 1.11.13-1 - Bump version to 1.11.13 - Related: rhbz1743204 - Related: rhbz1743206 golang 1.11.13-2 - Improve error message when using non-FIPS API in FIPS mode. - Fixes CVE-2019-9512. - Fixes CVE-2019-9514. - Resolves: rhbz1745711 - Resolves: rhbz1745705 1.11.6-3 - Updates to be less...

libsoup security update

2.72.0-12.5 - Backport patch for CVE-2026-1761 2.72.0-12.4 - Backport patch for CVE-2026-0719 - Fix NTLM authentication test failures in FIPS mode...

libsoup security update

2.62.3-13 - Backport patch for CVE-2026-1761 2.62.3-12 - Backport patch for CVE-2026-0719 - Fix NTLM authentication test failures in FIPS mode...

MiracleLinux 9 : java-17-openjdk-17.0.18.0.8-1.el9.ML.1 (AXSA:2026-123:03)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-123:03 advisory. JDK: Improve JMX connections CVE-2026-21925 JDK: Improve HttpServer Request handling CVE-2026-21933 JDK: Enhance Certificate Checking CVE-2026-21945...

CLEANSTART-2026-OO42606 Cancelling a query (e

Security vulnerability affects the kyverno-policy-reporter-fips package. Cancelling a query e...

GHSA-3VQQ-45QG-2XF6 vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

GHSA-H2VC-RGMF-CP34 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips, gitlab-workhorse-ce, gitlab-workhorse-ce-fips...

CVE-2025-10871 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips, gitlab-workhorse-ce, gitlab-workhorse-ce-fips...

CVE-2025-9642 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips, gitlab-workhorse-ce, gitlab-workhorse-ce-fips...

GHSA-MQ5H-8F38-3XWP vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips, gitlab-workhorse-ce, gitlab-workhorse-ce-fips...

GHSA-MFCP-RJV7-385M vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips, gitlab-workhorse-ce, gitlab-workhorse-ce-fips...

AlmaLinux 9 : java-1.8.0-openjdk (ALSA-2026:0932)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:0932 advisory. JDK: Improve JMX connections CVE-2026-21925 JDK: Improve HttpServer Request handling CVE-2026-21933 JDK: Enhance Certificate Checking CVE-2026-21945 libpn...

java-1.8.0-openjdk security update

An update is available for java-1.8.0-openjdk. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime...

RLSA-2026:0932 Important: java-1.8.0-openjdk security update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fixes: JDK: Improve JMX connections CVE-2026-21925 JDK: Improve HttpServer Request handling CVE-2026-21933 JDK: Enhance Certificate Checking CVE-2026-21945...