CLEANSTART-2026-IA26094 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the prometheus-operator-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-DO68350 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the prometheus-operator-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-PH90623 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the prometheus-operator-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-XO66167 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the prometheus-operator-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-UU20906 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the prometheus-operator-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CVE-2024-45336 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-aws-fips, prometheus-nats-exporter, git-sync-fips, kubernetes-release-fips, shfmt, prometheus-elasticsearch-exporter-fips, fq, temporal, cloud-provider-aws, kserve-rest-proxy, hugo-fips, nri-nginx, gitea, go-md2man, cosign-fips,...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: flux, hugo-extended, timestamp-authority, rook, sigstore-scaffolding, guac, flux-image-reflector-controller, flux-kustomize-controller, step-ca, step, pulumi, up, tekton-chains, secrets-store-csi-driver-provider-azure, buildkitd, rclone, policy-controller,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: prometheus-nats-exporter, prometheus-redis-exporter, shfmt, prometheus-elasticsearch-exporter-fips, fq, temporal, nri-nginx, dagger, cosign-fips, go-md2man, crossplane-provider-azure, opa, terraform, kube-vip-fips, slsa-verifier, cass-operator-fips-no-pvc-delete,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ec2, prometheus-nats-exporter, prometheus-redis-exporter, pulumi-language-yaml, prometheus-elasticsearch-exporter-fips, temporal, crossplane, crossplane-provider-aws-cloudfront, dagger, cosign-fips, crossplane-provider-azure, terraform,...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-gcp, nerdctl, grafana-operator, kine, pulumi-language-java, speedtest-go, newrelic-infrastructure-agent, flux-image-reflector-controller, gops, pulumi, kor, kubeflow-pipelines, bazelisk, kind, cue, nri-couchbase,...

Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from systemd, libcap, openssl-libs, libxml2, go-toolset, and prometheus-operator

Summary Multiple issues were identified in Red Hat UBI packages systemd, libcap, openssl-libs, libxml2, go-toolset, and prometheus-operator that were shipped with IBM MQ Operator and IBM supplied MQ Advanced container images. IBM has addressed the vulnerabilities. Vulnerability Details...