5611 matches found
SUSE SLES15 Security Update : azure-storage-azcopy (SUSE-SU-2026:3528-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3528-1 advisory. Update to 10.32.6. Security issues fixed: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded...
GHSA-9HJ4-R449-HFVC vulnerabilities
Vulnerabilities for packages: logstash, logstash-fips, ruby3.3-rails, pact-broker-docker, cinc-auditor, pact-broker-docker-fips, ruby3.2-rails, ruby3.4-rails...
CVE-2026-71847 vulnerabilities
Vulnerabilities for packages: logstash, logstash-fips, ruby3.3-rails, pact-broker-docker, cinc-auditor, pact-broker-docker-fips, ruby3.2-rails, ruby3.4-rails...
GHSA-V6W3-QRH8-QCCC vulnerabilities
Vulnerabilities for packages: bouncycastle-fips...
GHSA-98J2-6V39-78W8 vulnerabilities
Vulnerabilities for packages: bouncycastle-fips...
GHSA-38GX-CFQF-F652 vulnerabilities
Vulnerabilities for packages: awx, kibana, langfuse-fips, librechat, prism, redisinsight, semaphore, langfuse, kubeflow-centraldashboard, nextcloud-server, wazuh-dashboard, opensearch-dashboards-fips, jitsucom-jitsu, wazuh-dashboard-fips, opensearch-dashboards, lerna...
CVE-2026-67314 vulnerabilities
Vulnerabilities for packages: awx, kibana, langfuse-fips, librechat, prism, redisinsight, semaphore, langfuse, kubeflow-centraldashboard, nextcloud-server, wazuh-dashboard, opensearch-dashboards-fips, jitsucom-jitsu, wazuh-dashboard-fips, opensearch-dashboards, lerna...
CVE-2026-13505
In Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X series, sensitive key material held by the AES and DESede engines, the SP 800-90A DRBGs, SymmetricSecretKey and the PBKD and scrypt parameter classes was zeroised on garbage collection by...
CVE-2026-13505
In Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X series, sensitive key material held by the AES and DESede engines, the SP 800-90A DRBGs, SymmetricSecretKey and the PBKD and scrypt parameter classes was zeroised on garbage collection by...
CVE-2026-8798
In Bouncy Castle for Java FIPS BC-FJA before bc-fips 2.1.3, the native entropy source used on Intel platforms retried the CPU entropy instructions without any bound. RDSEED and RDRAND report failure through their carry flag, and the JNI seeding routine spun re-issuing the instruction for as long ...
CVE-2026-8798
CVE-2026-8798 affects Bouncy Castle for Java FIPS (BC-FJA) prior to bc-fips 2.1.3. The native entropy source on Intel platforms looped unbounded when RDSEED/RDRAND failed, risking a thread hang and potential denial of service as any operation using the native entropy source could stall. The fixes...
CVE-2026-8798 Native entropy source retries the CPU entropy instructions without limit
In Bouncy Castle for Java FIPS BC-FJA before bc-fips 2.1.3, the native entropy source used on Intel platforms retried the CPU entropy instructions without any bound. RDSEED and RDRAND report failure through their carry flag, and the JNI seeding routine spun re-issuing the instruction for as long ...
GHSA-6HR6-W5QG-QMWG vulnerabilities
Vulnerabilities for packages: apache-beam-python-3.14-sdk, authentik, localstack, prefect-fips, jupyter-all-spark-notebook, authentik-fips, mitmproxy, airflow, open-webui...
CVE-2026-71554 vulnerabilities
Vulnerabilities for packages: apache-beam-python-3.14-sdk, authentik, localstack, prefect-fips, jupyter-all-spark-notebook, authentik-fips, mitmproxy, airflow, open-webui...
CVE-2026-40984 vulnerabilities
Vulnerabilities for packages: dependency-track, apicurio-registry-fips, keycloak, request-9047-keycloak-fips, nacos-docker, ontop-fips, ontop, knative-kafka-broker-fips, apicurio-registry, keycloak-fips, dependency-track-apiserver, camunda-zeebe, zipkin, airbyte-server-fips, apache-nifi,...
GHSA-G3PR-3P32-FP23 vulnerabilities
Vulnerabilities for packages: dependency-track, apicurio-registry-fips, keycloak, request-9047-keycloak-fips, nacos-docker, ontop-fips, ontop, knative-kafka-broker-fips, apicurio-registry, keycloak-fips, dependency-track-apiserver, camunda-zeebe, zipkin, airbyte-server-fips, apache-nifi,...
GHSA-W737-WX49-QJ23 vulnerabilities
Vulnerabilities for packages: apicurio-registry-fips, keycloak-fips, airbyte-server, dependency-track, keycloak, dependency-track-apiserver, request-9047-keycloak-fips, nacos-docker, camunda-zeebe, zipkin, nacos, apicurio-registry, airbyte-server-fips, apache-nifi, infinispan...
GHSA-PMHH-3W7G-XQP8 vulnerabilities
Vulnerabilities for packages: scala, jbang, copybara, elasticsearch-fips, apache-hop-fips, gradle, nextflow, conductor-fips, spdx-tools-java, copybara-fips, apache-tika-fips, conductor, elasticsearch, apache-tika, wazuh-indexer, apache-hop, opensearch, opensearch-fips, metabase...
CVE-2026-71497 vulnerabilities
Vulnerabilities for packages: scala, jbang, copybara, elasticsearch-fips, apache-hop-fips, gradle, nextflow, conductor-fips, spdx-tools-java, copybara-fips, apache-tika-fips, conductor, elasticsearch, apache-tika, wazuh-indexer, apache-hop, opensearch, opensearch-fips, metabase...