CLEANSTART-2026-IE99306 Security fixes in elastic-beats-fips 9.0.8-r1

Package elastic-beats-fips version 9.0.8-r1 fixes 3 vulnerabilities: ghsa-j5w8-q4qc-rx2x, ghsa-f6x5-jh6r-wrfv, CVE-2025-47913...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: kyverno, crossplane-provider-aws-s3, telegraf, grype-db, tekton-chains, envoy-gateway-fips, kong-ingress-controller, crossplane-provider-family-aws, kargo, kyverno-notation-aws, crossplane-provider-keycloak, crossplane-fips, crossplane-provider-azure-securityinsights...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: kyverno, terraform-provider-time, crossplane-provider-aws-s3, telegraf, kubernetes-dashboard-auth-fips, envoy-gateway-fips, kong-ingress-controller, crossplane-provider-family-aws, crossplane-fips, flux-kustomize-controller-fips, verticadb-operator,...

CVE-2025-61728 vulnerabilities

Vulnerabilities for packages: telegraf, consul-k8s-fips, azure-aad-pod-identity-mic, flux-kustomize-controller-fips, flux-source-watcher, kube-state-metrics, cosign, kubernetes-dns-node-cache, conftest-fips, croc, grafana-fips, eksctl, k9s-fips, kube-arangodb-fips, vitess, argo-cd,...

CLEANSTART-2026-OJ15484 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

Multiple security vulnerabilities affect the elastic-beats-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...

CLEANSTART-2026-FP29743 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the elastic-beats-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-GL18398 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the elastic-beats-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-QD78411 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

Multiple security vulnerabilities affect the elastic-beats-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...