CLEANSTART-2026-ZS48821 Security fixes in harbor-registry-fips 2.6.2-r0

Package harbor-registry-fips version 2.6.2-r0 fixes 3 vulnerabilities: CVE-2025-29923, CVE-2025-61727, CVE-2025-61729...

CLEANSTART-2026-IL06995 Security fixes in cni-plugins-fips 1.8.0-r0

Package cni-plugins-fips version 1.8.0-r0 fixes 2 vulnerabilities: CVE-2025-61729, CVE-2025-61727...

CLEANSTART-2026-QI90911 Security fixes in thanos-operator-fips 0.3.7-r0

Package thanos-operator-fips version 0.3.7-r0 fixes 2 vulnerabilities: CVE-2025-61729, CVE-2025-61727...

CLEANSTART-2026-ID58976 Security fixes in volume-modifier-for-k8s-fips 0.9.0-r0

Package volume-modifier-for-k8s-fips version 0.9.0-r0 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...

CLEANSTART-2026-RA54834 Security fixes in vertical-pod-autoscaler 1.5.1-r0

Package vertical-pod-autoscaler version 1.5.1-r0 fixes 2 vulnerabilities: CVE-2025-61729, CVE-2025-61727...

CLEANSTART-2026-ZE26067 Security fixes in kubernetes 1.34.2-r0

Package kubernetes version 1.34.2-r0 fixes 2 vulnerabilities: CVE-2025-61729, CVE-2025-61727...

CLEANSTART-2026-SV56553 Security fixes in multus-cni-fips 4.0.2-r3

Package multus-cni-fips version 4.0.2-r3 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...

CLEANSTART-2026-FV60587 Security fixes in kubernetes-fips 1.31.14-r0

Package kubernetes-fips version 1.31.14-r0 fixes 2 vulnerabilities: CVE-2025-61729, CVE-2025-61727...

CLEANSTART-2026-GY10903 Security fixes for CVE-2025-61727, CVE-2025-61729 applied in versions: 1.4.10-r0

Multiple security vulnerabilities affect the stakater-reloader-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

ROOT-OS-DEBIAN-13-CVE-2025-61727 CVE-2025-61727 in rootio-golang-1.24 - Patched by Root

Root has patched CVE-2025-61727 in the rootio-golang-1.24 package for Root:Debian:13. Multiple fixed versions available...

Medium: runc

Issue Overview: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not...

Medium: runc

Issue Overview: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not...

Amazon Linux 2 : golang, --advisory ALAS2-2025-3105 (ALAS-2025-3105)

The version of golang installed on the remote host is prior to 1.24.11-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-3105 advisory. crypto/x509: excluded subdomain constraint does not restrict wildcard SANs An excluded subdomain constraint in a...

Amazon Linux 2 : oci-add-hooks, --advisory ALAS2NITRO-ENCLAVES-2025-080 (ALASNITRO-ENCLAVES-2025-080)

The version of oci-add-hooks installed on the remote host is prior to 0-0.6.20200504git325a340. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2NITRO-ENCLAVES-2025-080 advisory. crypto/x509: excluded subdomain constraint does not restrict wildcard SANs An excluded...

CVE-2025-61727

An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not prevent a leaf certificate from claiming the SAN .example.com...