CVE-2026-56761 vulnerabilities

Vulnerabilities for packages: langfuse-fips, langfuse, wazuh-dashboard, kibana, librechat...

RHSA-2026:28832 Red Hat Security Advisory: openssl-fips-provider security update

Bulletin has no description...

GHSA-RCQC-6CW3-H962 vulnerabilities

Vulnerabilities for packages: keycloak-config-cli, confluent-kafka-jre-bcfips, nuxeo, ruby3.4-jrjackson, nacos, dependency-track-apiserver, ruby3.3-jrjackson, thingsboard, cassandra, apache-hop, druid, keycloak, logstash, logstash-fips, opensearch, keycloak-fips, ruby3.2-jrjackson, apache-activem...

CVE-2026-54512 vulnerabilities

Vulnerabilities for packages: knative-kafka-broker, nuxeo, airflow, wazuh-indexer, kayenta-fips, apache-hop, druid, keycloak, logstash, ontop-fips, ruby4.0-jrjackson, strimzi-kafka-operator-fips, knative-kafka-broker-fips, nextflow, celeborn, apache-hop-fips, apache-pulsar-fips, kafka-bridge,...

CVE-2026-54513 vulnerabilities

Vulnerabilities for packages: knative-kafka-broker, nuxeo, airflow, wazuh-indexer, kayenta-fips, apache-hop, druid, keycloak, logstash, ontop-fips, ruby4.0-jrjackson, strimzi-kafka-operator-fips, knative-kafka-broker-fips, nextflow, celeborn, apache-hop-fips, apache-pulsar-fips, kafka-bridge,...

CVE-2026-54516 vulnerabilities

Vulnerabilities for packages: keycloak-config-cli, confluent-kafka-jre-bcfips, nuxeo, ruby3.4-jrjackson, nacos, dependency-track-apiserver, ruby3.3-jrjackson, thingsboard, cassandra, apache-hop, druid, keycloak, logstash, logstash-fips, opensearch, keycloak-fips, ruby3.2-jrjackson, apache-activem...

CVE-2026-54517 vulnerabilities

Vulnerabilities for packages: keycloak-config-cli, confluent-kafka-jre-bcfips, nuxeo, ruby3.4-jrjackson, nacos, dependency-track-apiserver, ruby3.3-jrjackson, thingsboard, cassandra, apache-hop, druid, keycloak, logstash, logstash-fips, opensearch, keycloak-fips, ruby3.2-jrjackson, apache-activem...

GHSA-HGJ6-7826-R7M5 vulnerabilities

Vulnerabilities for packages: knative-kafka-broker, nuxeo, airflow, wazuh-indexer, kayenta-fips, apache-hop, druid, keycloak, logstash, ontop-fips, ruby4.0-jrjackson, strimzi-kafka-operator-fips, knative-kafka-broker-fips, nextflow, celeborn, apache-hop-fips, apache-pulsar-fips, kafka-bridge,...

GHSA-RMJ7-2VXQ-3G9F vulnerabilities

Vulnerabilities for packages: knative-kafka-broker, nuxeo, airflow, wazuh-indexer, kayenta-fips, apache-hop, druid, keycloak, logstash, ontop-fips, ruby4.0-jrjackson, strimzi-kafka-operator-fips, knative-kafka-broker-fips, nextflow, celeborn, apache-hop-fips, apache-pulsar-fips, kafka-bridge,...

CVE-2026-54518 vulnerabilities

Vulnerabilities for packages: keycloak-config-cli, confluent-kafka-jre-bcfips, nuxeo, ruby3.4-jrjackson, nacos, dependency-track-apiserver, ruby3.3-jrjackson, thingsboard, cassandra, apache-hop, druid, keycloak, logstash, logstash-fips, opensearch, keycloak-fips, ruby3.2-jrjackson, apache-activem...

GHSA-5HH8-Q8HV-FR38 vulnerabilities

Vulnerabilities for packages: keycloak-config-cli, confluent-kafka-jre-bcfips, nuxeo, ruby3.4-jrjackson, nacos, dependency-track-apiserver, ruby3.3-jrjackson, thingsboard, cassandra, apache-hop, druid, keycloak, logstash, logstash-fips, opensearch, keycloak-fips, ruby3.2-jrjackson, apache-activem...

GHSA-9FXM-VC8V-HJ55 vulnerabilities

Vulnerabilities for packages: keycloak-config-cli, confluent-kafka-jre-bcfips, nuxeo, ruby3.4-jrjackson, nacos, dependency-track-apiserver, ruby3.3-jrjackson, thingsboard, cassandra, apache-hop, druid, keycloak, logstash, logstash-fips, opensearch, keycloak-fips, ruby3.2-jrjackson, apache-activem...

openssh security update

7.4p1-23.0.5fips - Fix privilege escalation via scp legacy protocol when not in preserving file mode CVE-2026-35385Orabug: 39480251 7.4p1-23.0.3fips - Change Epoch from 1 to 10 - Enable fips KDF POST Orabug: 32461750 - Disable diffie-hellman-group-exchange-sha256 KEX FIPS method Orabug: 32461739...

CVE-2026-48142 vulnerabilities

Vulnerabilities for packages: nginx-stable, nginx-mainline, ingress-nginx-controller, ingress-nginx-controller-fips...

CVE-2026-42055 vulnerabilities

Vulnerabilities for packages: nginx-stable, nginx-mainline, ingress-nginx-controller, ingress-nginx-controller-fips...

GHSA-2388-JP8V-FG9W vulnerabilities

Vulnerabilities for packages: nginx-stable, nginx-mainline, ingress-nginx-controller, ingress-nginx-controller-fips...

Moderate: Red Hat Security Advisory: openssl-fips-provider security update

An update for openssl-fips-provider is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.4 Extended Update Support, and Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a...

RHEL 9 : openssl-fips-provider (RHSA-2026:28832)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:28832 advisory. This package provides a custom build of the OpenSSL FIPS module that has been submitted to NIST for certification. Security Fixes: openssl: openssl:...

openssl security fix update

3.5.5-3.0.1 - Replace upstream references in fips man pages Orabug: 35824276 - Update additional upstream references - Add FIPS package change: add fips suffix to Release and set Epoch to 10 Orabug: 35824276 - Update FIPS module name Orabug: 35824276 - Enable openssl-fips-provider dependency...

Oracle Linux 9 : golang (ELSA-2026-22121)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-22121 advisory. 1.26.3-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var 1.26.3-1 - Update to Go 1.26.3 fips-1 - Resolves: RHEL-175607 Tenable has extracte...