golang-fips: Golang FIPS zeroed buffer

A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted...

Moderate: Red Hat Security Advisory: butane security update

An update for butane is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

golang-fips: Golang FIPS zeroed buffer

A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted...

Moderate: Red Hat Security Advisory: butane security update

An update for butane is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

GO-2026-6090 vulnerabilities

Vulnerabilities for packages: git-credential-oauth, regclient-fips, secretgen-controller-fips, frankenphp-8.2, hubble, harvester-fips, dockerize, lazygit, kube-rbac-proxy-fips, crossplane-provider-aws-opensearch-fips, crossplane-provider-aws-schemas, kubescape-server-fips,...

GO-2026-6089 vulnerabilities

Vulnerabilities for packages: minio-object-browser, crossplane-provider-aws-s3, cloud-provider-azure, certificate-transparency, kubernetes-dashboard-metrics-scraper, crossplane-provider-aws-kms, grafana-operator, ollama, kubevela, opencost, kubernetes, kapp, pgtimetable, gogatekeeper,...

CVE-2026-56862

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

GO-2026-5493 vulnerabilities

Vulnerabilities for packages: vale...

GO-2024-2675 vulnerabilities

Vulnerabilities for packages: temporal-fips, temporal...

GO-2026-5593 vulnerabilities

Vulnerabilities for packages: sftpgo, traefik-fips, traefik...

GO-2026-5578 vulnerabilities

Vulnerabilities for packages: temporal-fips, temporal-server, temporal-server-fips...

GO-2026-5594 vulnerabilities

Vulnerabilities for packages: kyverno-fips, kyverno-notation-aws-fips, kyverno, kyverno-notation-aws...

GO-2025-4251 vulnerabilities

Vulnerabilities for packages: k8sgpt, ollama-fips, ollama, mods...

GO-2024-2653 vulnerabilities

Vulnerabilities for packages: hubble-ui-backend-fips, hubble-ui...

GO-2026-5032 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce, seaweedfs-operator, seaweedfs-rocksdb, seaweedfs-operator-fips, seaweedfs, seaweedfs-fips, mattermost-fips, seaweedfs-rocksdb-fips...

GO-2025-4261 vulnerabilities

Vulnerabilities for packages: gitea-fips...

GO-2026-4740 vulnerabilities

Vulnerabilities for packages: flyte...

GO-2025-4103 vulnerabilities

Vulnerabilities for packages: virt-operator-fips, virt-operator, virt-api, virt-handler-fips, virt-controller-fips, docker-machine-driver-harvester, virt-api-fips, virt-controller, virt-handler, virt-launcher...

GO-2025-4107 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

GO-2026-5052 vulnerabilities

Vulnerabilities for packages: nfpm, crossplane-provider-azure-managedidentity, crossplane-provider-azure-resources, crossplane-provider-azure-orbital, telegraf, crossplane-provider-azure-storagecache, crossplane-provider-family-azure, crossplane-provider-azure-web,...