CLEANSTART-2026-LL73757 Security fixes in weaviate-fips 1.38.11-r1

Package weaviate-fips version 1.38.11-r1 fixes 8 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...

CVE-2026-60004 vulnerabilities

Vulnerabilities for packages: gitea, gitea-fips...

libreswan: badly formatted X.509 certificate can cause an assertion failure that crashes the daemon process

A flaw was found in Libreswan. An unauthenticated remote attacker can send a specially crafted X.509 certificate payload during an IKEv1 or IKEv2 exchange. This flaw occurs when Libreswan is operating in FIPS Federal Information Processing Standards mode and processing a certificate with an inval...

libreswan: badly formatted X.509 certificate can cause an assertion failure that crashes the daemon process

A flaw was found in Libreswan. An unauthenticated remote attacker can send a specially crafted X.509 certificate payload during an IKEv1 or IKEv2 exchange. This flaw occurs when Libreswan is operating in FIPS Federal Information Processing Standards mode and processing a certificate with an inval...

Oracle Linux 10 : ELSA-2026-60306-0: / golang (ELSA-2026-603060)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-603060 advisory. 1.26.7-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var 1.26.7-1 - Update to Go 1.26.7 fips-1 Tenable has extracted the preceding...

GHSA-6XFF-CPCQ-VPW2 vulnerabilities

Vulnerabilities for packages: grafana, commercial-grafana, grafana-fips...

CVE-2026-27878 vulnerabilities

Vulnerabilities for packages: grafana, commercial-grafana, grafana-fips...

GHSA-QXVW-FVWX-5CP7 vulnerabilities

Vulnerabilities for packages: reposilite, debezium, keycloak, flyway-fips, metabase, request-9047-keycloak-fips, airbyte-platform, airbyte-platform-fips, keycloak-fips, zipkin, flyway, camunda-zeebe, camunda...

CVE-2026-55857 vulnerabilities

Vulnerabilities for packages: reposilite, debezium, keycloak, flyway-fips, metabase, request-9047-keycloak-fips, airbyte-platform, airbyte-platform-fips, keycloak-fips, zipkin, flyway, camunda-zeebe, camunda...

CVE-2026-55858 vulnerabilities

Vulnerabilities for packages: reposilite, debezium, keycloak, flyway-fips, metabase, request-9047-keycloak-fips, airbyte-platform, airbyte-platform-fips, keycloak-fips, zipkin, flyway, camunda-zeebe, camunda...

CVE-2026-55856 vulnerabilities

Vulnerabilities for packages: reposilite, debezium, keycloak, flyway-fips, metabase, request-9047-keycloak-fips, airbyte-platform, airbyte-platform-fips, keycloak-fips, zipkin, flyway, camunda-zeebe, camunda...

GHSA-G9JJ-CGMH-9F38 vulnerabilities

Vulnerabilities for packages: reposilite, debezium, keycloak, flyway-fips, metabase, request-9047-keycloak-fips, airbyte-platform, airbyte-platform-fips, keycloak-fips, zipkin, flyway, camunda-zeebe, camunda...

GHSA-XVR9-35CR-46V9 vulnerabilities

Vulnerabilities for packages: reposilite, debezium, keycloak, flyway-fips, metabase, request-9047-keycloak-fips, airbyte-platform, airbyte-platform-fips, keycloak-fips, zipkin, flyway, camunda-zeebe, camunda...

CVE-2026-12681 vulnerabilities

Vulnerabilities for packages: teleport, tbot, teleport-operator-fips...

GHSA-6HX8-3WJJ-GR8G vulnerabilities

Vulnerabilities for packages: openstack-nova-2025.1, openstack-glance-2025.1, openstack-placement-2025.1-fips, openstack-keystone-2025.2-fips, openstack-horizon-2026.1, openstack-keystone-2026.1, openstack-glance-2025.1-fips, openstack-placement-2025.2, openstack-horizon-2026.1-fips,...

CVE-2026-55688 vulnerabilities

Vulnerabilities for packages: tez, pinot, apache-pulsar, druid, apache-pulsar-fips, pinot-fips...

GHSA-M452-Q8C9-RG2F vulnerabilities

Vulnerabilities for packages: tez, pinot, apache-pulsar, druid, apache-pulsar-fips, pinot-fips...

USN-8666-3: Linux kernel (GCP FIPS) vulnerabilities

Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...

USN-8666-3 linux-gcp-fips vulnerabilities

Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...

GO-2026-6293 vulnerabilities

Vulnerabilities for packages: temporal-fips, temporal-ui-server, temporal-ui-server-fips, falcosidekick-ui-fips, kube-metrics-adapter, temporal, listmonk, kube-metrics-adapter-fips, falcosidekick-ui...