CLEANSTART-2026-FY61868 Security fixes for CVE-2026-25679, CVE-2026-27140, CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-32289 applied in versions: 1.13.2-r0, 1.13.2-r1

Multiple security vulnerabilities affect the velero-plugin-for-microsoft-azure-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SC97100 Security fixes for CVE-2026-25679, CVE-2026-27140, CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-32289 applied in versions: 1.13.1-r1, 1.13.2-r0, 1.13.2-r1

Multiple security vulnerabilities affect the velero-plugin-for-microsoft-azure-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SD94217 Security fixes for CVE-2026-42504 applied in versions: 2.8.0-r3

Security vulnerability affects the local-static-provisioner-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-CP05946 Security fixes for CVE-2026-42504 applied in versions: 1.6.4-r5

Security vulnerability affects the kyverno-policy-reporter-kyverno-plugin-fips package. This issue is resolved in later releases. See references for vulnerability details...

CVE-2026-39822 vulnerabilities

Vulnerabilities for packages: authentik, karpenter, traefik, elastic-agent, envoy-gateway-fips, gitlab-workhorse-ce-fips, azurefile-csi, helmfile, glab, nerdctl, harbor, commercial-spilo, rke2-runtime, containerd, elastic-agent-fips, apm-server, keda-fips, azure-aad-pod-identity-mic, loki,...

CVE-2026-42505 vulnerabilities

Vulnerabilities for packages: nri-mssql, flux-notification-controller-fips, ld-relay-fips, coder-fips, crossplane-provider-aws-workspaces-fips, newrelic-k8s-metadata-injection-fips, fluxcd-kustomize-mutating-webhook-fips, knative-kafka-broker-fips, k8s-device-plugin, seaweedfs-operator,...

Oracle Linux 9 : openssl (ELSA-2026-50379)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-50379 advisory. 3.5.5-4.0.1fips - Replace upstream references in fips man pages Orabug: 35824276 - Update additional upstream references - Add FIPS package change: ad...

CVE-2026-53935 vulnerabilities

Vulnerabilities for packages: hubble-ui-backend-fips, hubble-ui, kubescape-server-fips, kubescape, kubescape-server, kubescape-operator, kubescape-operator-fips...

GHSA-Q6H5-Q3Q6-F87X vulnerabilities

Vulnerabilities for packages: hubble-ui-backend-fips, hubble-ui, kubescape-server-fips, kubescape, kubescape-server, kubescape-operator, kubescape-operator-fips...

JLSEC-2026-658 Deno: Miller-Rabin Primality Test Allows Zero Rounds

Summary node:crypto.checkPrimecandidate, options, callback and crypto.checkPrimeSynccandidate, options ran no Miller-Rabin rounds at all when the caller left options.checks at its default of 0. In that mode, the only test applied to the candidate was trial division by the primes up to 17,863. Any...

openssl security update

3.5.5-4.0.1fips - Replace upstream references in fips man pages Orabug: 35824276 - Update additional upstream references - Add FIPS package change: add fips suffix to Release and set Epoch to 10 Orabug: 35824276 - Update FIPS module name Orabug: 35824276 - Enable openssl-fips-provider dependency...

AlmaLinux 10 : kernel (ALSA-2026:34911)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:34911 advisory. kernel: fs/smb/client: fix out-of-bounds read in cifssanitizeprepath CVE-2026-43112 kernel: rxrpc: Fix potential UAF after skbunshare failure...

CVE-2026-42998 vulnerabilities

Vulnerabilities for packages: openstack-keystone-2025.1-fips, openstack-keystone-2025.2, openstack-keystone-2026.1-fips, openstack-keystone-2026.1, openstack-keystone-2025.1, openstack-keystone-2025.2-fips...

CVE-2026-44394 vulnerabilities

Vulnerabilities for packages: openstack-keystone-2025.1-fips, openstack-keystone-2025.2, openstack-keystone-2026.1-fips, openstack-keystone-2026.1, openstack-keystone-2025.1, openstack-keystone-2025.2-fips...

GHSA-Q623-F4J4-P4XJ vulnerabilities

Vulnerabilities for packages: openstack-keystone-2025.1-fips, openstack-keystone-2025.2, openstack-keystone-2026.1-fips, openstack-keystone-2026.1, openstack-keystone-2025.1, openstack-keystone-2025.2-fips...

GHSA-8F8M-WRVR-WCVF vulnerabilities

Vulnerabilities for packages: openstack-keystone-2025.1-fips, openstack-keystone-2025.2, openstack-keystone-2026.1-fips, openstack-keystone-2026.1, openstack-keystone-2025.1, openstack-keystone-2025.2-fips...

GHSA-WHQR-FGM5-X77Q vulnerabilities

Vulnerabilities for packages: openstack-keystone-2025.1-fips, openstack-keystone-2025.2, openstack-keystone-2026.1-fips, openstack-keystone-2026.1, openstack-keystone-2025.1, openstack-keystone-2025.2-fips...

CVE-2026-9673 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, opensearch-dashboards-fips...

GHSA-G27C-Q7CP-MHX6 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, opensearch-dashboards-fips...

GHSA-2R23-2G6V-2M5F vulnerabilities

Vulnerabilities for packages: openstack-keystone-2025.1-fips, openstack-keystone-2025.2, openstack-keystone-2026.1-fips, openstack-keystone-2026.1, openstack-keystone-2025.1, openstack-keystone-2025.2-fips...