CLEANSTART-2026-ZY34480 SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass

Security vulnerability affects the grafana-fips package. SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass...

CLEANSTART-2026-SX02266 OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar

Security vulnerability affects the grafana-fips package. OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar...

CLEANSTART-2026-ED95969 Security fix for GHSA-jwvj-g8pc-cx45 applied in: grafana-fips 12.4.2-r0

Security vulnerability affects the grafana-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-BH53918 Security fix for GHSA-w8rr-5gcm-pp58 applied in: grafana-fips 12.4.2-r0

Security vulnerability affects the grafana-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-QJ85608 Security fix for GHSA-hfvc-g4fc-pqhx applied in: grafana-fips 12.4.2-r0

Security vulnerability affects the grafana-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-132969

Security vulnerability affects the gatekeeper-fips package. gRPC-Go is the Go language implementation of gRPC...

PT-2026-132955

Security vulnerability affects the gatekeeper-fips package. containerd is an open-source container runtime...

PT-2026-118379

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.0-M14 through 11.0.26 Apache Tomcat versions 10.1.22 through 10.1.60 Apache Tomcat versions 9.0.92 through 9.0.122 Description A failing open issue exists where the software does not fail securely. When the...

PT-2026-132974

Security vulnerability affects the gatekeeper-fips package. containerd is an open-source container runtime...

PT-2026-133000

Security vulnerability affects the grafana-fips package. OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar...

PT-2026-133018

Security vulnerability affects the gatekeeper-fips package. containerd is an open-source container runtime...

PT-2026-132993

Security vulnerability affects the gatekeeper-fips package. containerd is an open-source container runtime...

Red Hat: CVE-2026-74048: tomcat: Tomcat: Cryptographic policy bypass via FIPS activation failure

Not Failing Securely 'Failing Open' vulnerability in Apache Tomcat. If the OpenSSLLifecycleListener is configured to use FIPS mode but FIPS activation fails, Tomcat logs and error but continues to use JSSE in non-FIPS mode with the provided configuration. This issue affects Apache Tomcat: from...

PT-2026-132943

Security vulnerability affects the gatekeeper-fips package. containerd is an open-source container runtime...

PT-2026-132976

Security vulnerability affects the gatekeeper-fips package. containerd is an open-source container runtime...

GHSA-CRQP-42H3-7FCV vulnerabilities

Vulnerabilities for packages: ffmpeg, ffmpeg-fips...

GHSA-G222-RPM9-83X6 vulnerabilities

Vulnerabilities for packages: ffmpeg, ffmpeg-fips...

CVE-2026-96611 vulnerabilities

Vulnerabilities for packages: ffmpeg, ffmpeg-fips...

CVE-2026-30754 vulnerabilities

Vulnerabilities for packages: ffmpeg, ffmpeg-fips...

Apache Tomcat improper exception handling vulnerability

The Apache Tomcat versions from 11.0.0-M14 to 11.0.26, from 10.1.22 to 10.1.60, and from 9.0.92 to 9.0.122 have a vulnerability related to improper exception handling. This vulnerability arises when the OpenSSL LifecycleListener is configured to use FIPS mode, but FIPS activation fails. As a...