CLEANSTART-2026-OF46770 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27139, CVE-2026-27142, CVE-2026-32281, CVE-2026-32283, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-39883, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-9h8m-3fm2-qjrq, ghsa-p77j-4mvh-x3m3 applied in versions: 6.1.0-r0, 6.1.0-r1, 6.1.0-r2, 6.1.0-r3, 6.1.0-r4

Multiple security vulnerabilities affect the kubernetes-csi-external-provisioner-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-BD49035 Security fixes for CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27139, CVE-2026-27140, CVE-2026-27142, CVE-2026-27143, CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-f6x5-jh6r-wrfv, ghsa-hfvc-g4fc-pqhx, ghsa-j5w8-q4qc-rx2x, ghsa-p77j-4mvh-x3m3 applied in versions: 8.4.0-r0, 8.5.0-r0, 8.5.0-r1, 8.5.0-r2, 8.5.0-r3

Multiple security vulnerabilities affect the kubernetes-csi-external-snapshotter-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-FR50160 Security fixes for CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27139, CVE-2026-27140, CVE-2026-27142, CVE-2026-27143, CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-f6x5-jh6r-wrfv, ghsa-hfvc-g4fc-pqhx, ghsa-j5w8-q4qc-rx2x, ghsa-p77j-4mvh-x3m3 applied in versions: 8.4.0-r0, 8.5.0-r0, 8.5.0-r1, 8.5.0-r2, 8.5.0-r3

Multiple security vulnerabilities affect the kubernetes-csi-external-snapshotter-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-EY91394 Security fixes for CVE-2026-25679, CVE-2026-27140, CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-32289 applied in versions: 1.13.2-r0, 1.13.2-r1

Multiple security vulnerabilities affect the velero-plugin-for-microsoft-azure-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SP45896 Security fixes for CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61731, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27140, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501 applied in versions: 1.5.1-r0, 1.5.1-r1

Multiple security vulnerabilities affect the nginx-prometheus-exporter-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CV84139 Security fixes for CVE-2026-25679, CVE-2026-27140, CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-32289 applied in versions: 1.13.1-r1, 1.13.2-r0, 1.13.2-r1

Multiple security vulnerabilities affect the velero-plugin-for-microsoft-azure-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-FXHP-MV3V-67QP vulnerabilities

Vulnerabilities for packages: helmfile, crossplane-fips, zarf, ratify, oras, argo-cd, rancher-fleet, consul-k8s-fips, ratify-fips, helm-fips, helm, consul-k8s, zarf-fips, gogatekeeper, argo-cd-fips, rancher-fleet-fips, crossplane, oras-fips, jfrog-cli...

CVE-2026-50163 vulnerabilities

Vulnerabilities for packages: helmfile, crossplane-fips, zarf, ratify, oras, argo-cd, rancher-fleet, consul-k8s-fips, ratify-fips, helm-fips, helm, consul-k8s, zarf-fips, gogatekeeper, argo-cd-fips, rancher-fleet-fips, crossplane, oras-fips, jfrog-cli...

GHSA-6W3M-4HHP-775Q vulnerabilities

Vulnerabilities for packages: keda-http-add-on, keda-http-add-on-fips...

GHSA-2WC2-FM75-P42X vulnerabilities

Vulnerabilities for packages: datadog-agent, datadog-agent-fips, kubeflow-pipelines-visualization-server, open-webui...

CVE-2026-49476 vulnerabilities

Vulnerabilities for packages: datadog-agent, datadog-agent-fips, kubeflow-pipelines-visualization-server, open-webui...

GHSA-FRRJ-87JH-2772 vulnerabilities

Vulnerabilities for packages: kube-vip, kube-vip-fips, cilium-cli...

CVE-2026-49838 vulnerabilities

Vulnerabilities for packages: kube-vip, kube-vip-fips, cilium-cli...

GHSA-836R-79RF-4M37 vulnerabilities

Vulnerabilities for packages: datadog-agent, datadog-agent-fips, kubeflow-pipelines-visualization-server, open-webui...

CVE-2026-49477 vulnerabilities

Vulnerabilities for packages: datadog-agent, datadog-agent-fips, kubeflow-pipelines-visualization-server, open-webui...

CVE-2026-49834 vulnerabilities

Vulnerabilities for packages: tkn-fips, tflint, crossplane-fips, trivy-fips, zarf, tekton-chains, ratify, neuvector-sigstore-interface, kyverno-notation-aws-fips, teleport, trivy-operator, aactl, image-factory-fips, neuvector-sigstore-interface-fips, falcoctl, kubescape-server, cloudbeat-fips,...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: tkn-fips, tflint, crossplane-fips, trivy-fips, zarf, tekton-chains, ratify, neuvector-sigstore-interface, kyverno-notation-aws-fips, teleport, trivy-operator, aactl, image-factory-fips, neuvector-sigstore-interface-fips, falcoctl, kubescape-server, cloudbeat-fips,...

golang security, bug fix, and enhancement update

1.26.5-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var 1.26.5-1 - Update to Go 1.26.5 fips-1 - Resolves: RHEL-193476 1.25.7-1 - Update to Go 1.25.7 fips-1 - Resolves: RHEL-146452 1.25.5-1 - Update to Go 1.25.5 fips-1 - Resolves: RHEL-139364 1.25.3-2 - Cleanup lib/ ownership 1.25.3-1 ...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: authentik, karpenter, traefik, elastic-agent, envoy-gateway-fips, gitlab-workhorse-ce-fips, azurefile-csi, helmfile, glab, nerdctl, harbor, commercial-spilo, rke2-runtime, containerd, elastic-agent-fips, apm-server, keda-fips, azure-aad-pod-identity-mic, loki,...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: nri-mssql, flux-notification-controller-fips, ld-relay-fips, coder-fips, crossplane-provider-aws-workspaces-fips, newrelic-k8s-metadata-injection-fips, fluxcd-kustomize-mutating-webhook-fips, knative-kafka-broker-fips, k8s-device-plugin, seaweedfs-operator,...