CLEANSTART-2026-IE99306 Security fixes in elastic-beats-fips 9.0.8-r1

Package elastic-beats-fips version 9.0.8-r1 fixes 3 vulnerabilities: ghsa-j5w8-q4qc-rx2x, ghsa-f6x5-jh6r-wrfv, CVE-2025-47913...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: node-problem-detector, aws-iam-authenticator-fips, kubernetes-csi-external-health-monitor, vault-secrets-operator, victoriametrics-operator, crossplane-provider-aws-memorydb-fips, cert-manager-cmctl-fips, milvus, chaos-mesh-fips, percona-server-mongodb-operator-fips,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: istio, kubernetes-csi-external-health-monitor, mc-fips, vault-secrets-operator, crossplane-provider-aws-memorydb-fips, cert-manager-cmctl-fips, milvus, chaos-mesh-fips, external-dns, mesosphere-vsphere-csi, modelmesh-runtime-adapter, boring-registry-fips,...

CVE-2025-61728 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, syncthing-fips, cert-manager-cmctl-fips, flux-notification-controller, chaos-mesh-fips, helm-operator-fips, external-dns, redis-operator-fips, datadog-agent-fips, helm-operator, k9s-fips, kubernetes-dns-node-cache-fips, cert-manager-fips,...

CLEANSTART-2026-OJ15484 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

Multiple security vulnerabilities affect the elastic-beats-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...

CLEANSTART-2026-FP29743 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the elastic-beats-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-GL18398 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the elastic-beats-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-QD78411 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

Multiple security vulnerabilities affect the elastic-beats-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...