CLEANSTART-2026-TR92727 During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succ...

Multiple security vulnerabilities affect the prometheus-operator-fips package. During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should ha...

CLEANSTART-2026-IA26094 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the prometheus-operator-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-DO68350 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the prometheus-operator-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-XO66167 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the prometheus-operator-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-PH90623 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the prometheus-operator-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-UU20906 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the prometheus-operator-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CVE-2024-45336 vulnerabilities

Vulnerabilities for packages: containerd, prometheus-operator-fips, kserve-modelmesh-serving, atlantis-fips, thanos-fips, runc-fips, git-credential-oauth, yq-fips, wgcf, aws-load-balancer-controller-fips, gops, cloudnative-pg, kubernetes-release-fips, harbor-registry, docker-credential-gcr-fips,...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: thanos, buildkitd, flux-kustomize-controller, step-ca, trivy, step, boring-registry, external-dns, flux, py3-azure-identity, chezmoi, guac, zarf, pulumi, flux-image-reflector-controller, nuclei, kubescape, rekor, up, flyte, hugo-extended, flux-source-controller,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: buildah, prometheus-operator-fips, kubernetes-csi-external-provisioner, atlantis-fips, thanos-fips, yq-fips, wgcf, nri-apache, aws-load-balancer-controller-fips, gops, harbor-registry, petname, addon-resizer-fips, src, temporal-ui-server, helm-docs,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: minio, prometheus-operator-fips, kubernetes-csi-external-provisioner, atlantis-fips, aws-load-balancer-controller-fips, minio-fips, src, temporal-ui-server, flux-source-controller, tekton-chains, oauth2-proxy, terraform-provider-sendgrid,...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, scorecard, memcached-exporter, kubernetes-csi-external-resizer, bom, docker-credential-acr-env, lazygit, fq, paranoia, flux, slsa-verifier, newrelic-infrastructure-agent, nri-prometheus, kube-logging-operator, logstash-exporter, pulumi,...

Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from systemd, libcap, openssl-libs, libxml2, go-toolset, and prometheus-operator

Summary Multiple issues were identified in Red Hat UBI packages systemd, libcap, openssl-libs, libxml2, go-toolset, and prometheus-operator that were shipped with IBM MQ Operator and IBM supplied MQ Advanced container images. IBM has addressed the vulnerabilities. Vulnerability Details...