605 matches found
libreswan: badly formatted X.509 certificate can cause an assertion failure that crashes the daemon process
A flaw was found in Libreswan. An unauthenticated remote attacker can send a specially crafted X.509 certificate payload during an IKEv1 or IKEv2 exchange. This flaw occurs when Libreswan is operating in FIPS Federal Information Processing Standards mode and processing a certificate with an inval...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: openssh (UTSA-2026-104841)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104841 advisory. A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie- Hellman Group Exchange DH-GEX client path. This occurs...
SUSE-RU-2026:3712-1 Security update 5.1.5 for Multi-Linux Manager Server
This update fixes the following issues: Release Notes Highlights: - Update to SUSE Multi-Linux Manager 5.1.5 Added known issue for missing BasicConstraints Critical flag Added a note about disk-check parameters semantics change Added a note about enabling FIPS mode after installing SUSE Multi-Lin...
libreswan: badly formatted X.509 certificate can cause an assertion failure that crashes the daemon process
A flaw was found in Libreswan. An unauthenticated remote attacker can send a specially crafted X.509 certificate payload during an IKEv1 or IKEv2 exchange. This flaw occurs when Libreswan is operating in FIPS Federal Information Processing Standards mode and processing a certificate with an inval...
GHSA-HFG8-HC9C-6C3H vulnerabilities
Vulnerabilities for packages: buildah-fips, docker-fips, docker-cli-buildx, docker-cli-buildx-fips, podman-fips, kubescape, kubescape-server-fips, skaffold, openbao, buildah, falcoctl, buildkitd, podman, kaniko-fips, kaniko, kubescape-server, openbao-fips, skaffold-fips, buildkitd-fips,...
GHSA-2326-HX7G-3M9R vulnerabilities
Vulnerabilities for packages: hadoop-fips...
GO-2026-4950 vulnerabilities
Vulnerabilities for packages: dapr-fips, dapr...
GO-2024-2520 vulnerabilities
Vulnerabilities for packages: grafana-fips...
GO-2024-2523 vulnerabilities
Vulnerabilities for packages: grafana-fips...
GO-2025-3766 vulnerabilities
Vulnerabilities for packages: grafana-fips...
GO-2026-5219 vulnerabilities
Vulnerabilities for packages: grafana-fips...
GO-2026-5585 vulnerabilities
Vulnerabilities for packages: versitygw-fips, gatus-fips, versitygw, gatus...
CLEANSTART-2026-OD61763 Security fixes in boring-registry-fips 0.15.5-r2
Package boring-registry-fips version 0.15.5-r2 fixes 2 vulnerabilities: CVE-2025-30204, ghsa-mh63-6h87-95cp...
Alibaba Cloud Linux 3 : 0246: openssh (ALINUX3-SA-2026:0246)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0246 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-55653: A flaw was found in OpenSS...
UBUNTU-CVE-2026-58062
In Bouncy Castle for Java before 1.85, Stapled OCSP response accepted without binding to the checked certificate. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 2.0.2 2.0.X series and 2.1.3 2.1.X series...
EUVD-2026-52139
In Bouncy Castle for Java before 1.85, Lazy ASN.1 sequence forcing resets nesting-depth guard. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X series...
EUVD-2026-52136
In Bouncy Castle for Java before 1.85, OpenPGP AEAD decryption skips final tag on chunk-aligned data. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 1.0.13 1.0.X series, 2.0.13 2.0.X series and 2.1.13 2.1.X series...
CVE-2026-12802 CMS AuthEnvelopedData fails to enforce tag-length on decryption
In Bouncy Castle for Java before 1.85, CMS AuthEnvelopedData fails to enforce tag-length on decryption. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcpkix-fips 1.0.12 1.0.X series, 2.0.12 2.0.X series and 2.1.12 2.1.X series...
CVE-2026-58062
In Bouncy Castle for Java before 1.85, Stapled OCSP response accepted without binding to the checked certificate. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 2.0.2 2.0.X series and 2.1.3 2.1.X series...
