5985 matches found
JLSEC-2026-273
Issue summary: When a delta CRL that contains a Delta CRL Indicator extension is processed a NULL pointer dereference might happen if the required CRL Number extension is missing. Impact summary: A NULL pointer dereference can trigger a crash which leads to a Denial of Service for an application...
JLSEC-2026-246 Issue summary: Checking excessively long invalid RSA public keys may take a long time.
Issue summary: Checking excessively long invalid RSA public keys may take a long time. Impact summary: Applications that use the function EVPPKEYpubliccheck to check RSA public keys may experience long delays. Where the key that is being checked has been obtained from an untrusted source this may...
parley-core (>=0.2.0, <=0.6.1), pqc-combo (0.1.0) +2 more potentially affected by unknown CVE via libcrux-ml-dsa (>=0.0.4, <=0.0.8)
libcrux-ml-dsa CARGO version =0.0.4, =0.2.0, =0.6.1 - pqc-combo 0.1.0 - pqc-fips 0.0.3 - pqc-nostd 0.1.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0126...
java-21-openjdk security update
1:21.0.11.0.10-1.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:21.0.11.0.10-1 - Update to jdk-21.0.11+10 GA - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290...
GHSA-X4MJ-7F9G-29H4 vulnerabilities
Vulnerabilities for packages: external-dns-fips, k8sgateway, external-dns, k8sgateway-fips...
CVE-2026-29181 vulnerabilities
Vulnerabilities for packages: kubernetes-event-exporter, metallb-fips, yunikorn-k8shim-fips, crossplane-provider-aws-kms, vault, redpanda, gitlab-runner-fips, vault-env, crossplane-provider-aws-ssm, k6-fips, crossplane-provider-azure-web, crossplane-provider-aws-cloudwatch-fips, istio-fips,...
CVE-2026-41246 vulnerabilities
Vulnerabilities for packages: external-dns-fips, k8sgateway, external-dns, k8sgateway-fips...
CLEANSTART-2026-WL14185 spdystream is a Go library for multiplexing streams over SPDY connections
Multiple security vulnerabilities affect the velero-fips package. spdystream is a Go library for multiplexing streams over SPDY connections. See references for individual vulnerability details...
CLEANSTART-2026-VN02574 spdystream is a Go library for multiplexing streams over SPDY connections
Multiple security vulnerabilities affect the velero-fips package. spdystream is a Go library for multiplexing streams over SPDY connections. See references for individual vulnerability details...
CVE-2026-41139 vulnerabilities
Vulnerabilities for packages: librechat, wazuh-dashboard, opensearch-dashboards-fips, opensearch-dashboards...
CVE-2026-32952 vulnerabilities
Vulnerabilities for packages: commercial-grafana, cert-manager, cert-manager-cmctl, yunikorn-k8shim-fips, vault, yunikorn-k8shim, zot, gitlab-runner-fips, k6-fips, kyverno-notation-aws, frp, harbor, rancher-webhook-fips, packer, cert-manager-istio-csr, grafana-fips, rancher,...
Oracle Linux 10 : golang (ELSA-2026-10217)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-10217 advisory. 1.25.9-3 - Do not ignore any tests in check 1.25.9-2 - Skip terminal test in container 1.25.9-1 - Update to Go 1.25.9 fips-2 Tenable has extracted th...
golang security update
1.25.9-1 - Update to Go 1.25.9 fips-2 - Resolves: RHEL-169931...
CVE-2026-40923 vulnerabilities
Vulnerabilities for packages: tkn, tekton-chains-fips, tekton-pipelines-fips, tekton-pipelines, tkn-fips, tekton-chains...
GHSA-M2CX-GPQF-QF74 vulnerabilities
Vulnerabilities for packages: tkn, tekton-chains-fips, tekton-pipelines-fips, tekton-pipelines, tkn-fips, tekton-chains...
GHSA-94JR-7PQP-XHCQ vulnerabilities
Vulnerabilities for packages: tkn, tekton-chains-fips, tekton-pipelines-fips, tekton-pipelines, tkn-fips, tekton-chains...
GHSA-RX35-6RHX-7858 vulnerabilities
Vulnerabilities for packages: tkn, tekton-chains-fips, tekton-pipelines-fips, tekton-pipelines, tkn-fips, tekton-chains...
CVE-2026-40924 vulnerabilities
Vulnerabilities for packages: tkn, tekton-chains-fips, tekton-pipelines-fips, tekton-pipelines, tkn-fips, tekton-chains...