6035 matches found
golang security, bug fix, and enhancement update
1.26.7-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var 1.26.7-1 - Update to Go 1.26.7 fips-1...
GO-2026-6259 vulnerabilities
Vulnerabilities for packages: velero-plugin-for-aws-fips, velero-plugin-for-gcp-fips, velero-plugin-for-gcp, velero-plugin-for-microsoft-azure, velero-plugin-for-aws, velero-plugin-for-microsoft-azure-fips...
GO-2026-6275 vulnerabilities
Vulnerabilities for packages: grafana, commercial-grafana, grafana-fips...
GO-2026-6274 vulnerabilities
Vulnerabilities for packages: grafana, commercial-grafana, grafana-fips...
GO-2026-6258 vulnerabilities
Vulnerabilities for packages: cortex-geomys-fips, cortex-fips, thanos-fips, thanos-receive-controller-fips, tempo, thanos, thanos-receive-controller, cortex, pulumi-language-yaml, tempo-fips...
GO-2026-6250 vulnerabilities
Vulnerabilities for packages: cloudbeat-fips, cloudbeat...
CVE-2026-55677 vulnerabilities
Vulnerabilities for packages: temporal-ui-server-fips, kube-metrics-adapter-fips, temporal-ui-server, falcosidekick-ui-fips, listmonk, kube-metrics-adapter, temporal, temporal-fips, falcosidekick-ui...
GHSA-W67G-5RQW-F597 vulnerabilities
Vulnerabilities for packages: virt-controller-fips, loki-fips, kube-conformance, amazon-ssm-agent-fips, virt-launcher, etcd, virt-api-fips, cilium-fips, gpu-operator-fips, kubernetes, prometheus-fips, virt-handler, eks-distro-fips, gpu-operator, jitsucom-bulker, verticadb-operator, emissary,...
AZL-97671 CVE-2026-75803 affecting package openssl-fips-provider 3.1.2-2
Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is finalized by calling the EVPCipher function. Impact summary: Applications calling EVPCipher on an empty ciphertext and...
AZL-97668 CVE-2026-54874 affecting package openssl-fips-provider 3.1.2-2
Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more memory than the record itself requires. Impact summary: A peer can use a small amount of network traffic to make an OpenSSL DTLS endpoint retain a disproportionately large...
Astra Linux – Vulnerability in OpenSSL
Issue summary: Generating excessively long X9.42 DH keys or checking overly long X9.42 DH keys or parameters can be very slow. Applications that use functions like DHgeneratekey to generate an X9.42 DH key may experience prolonged delays. Similarly, applications that use functions like...
Astra Linux – Vulnerability in OpenSSL
Issue summary: There is a type confusion vulnerability in the signature verification of signed PKCS7 data. In this vulnerability, an ASN1TYPE union member is accessed without first validating the type, resulting in an invalid or NULL pointer dereferencing during the processing of malformed PKCS7...
Astra Linux – Vulnerability in OpenSSL
Issue summary: An application attempting to decrypt messages encrypted using password-based encryption in CMS can trigger an out-of-bounds read and write attack. Impact summary: This out-of-bounds read attack may cause a system crash, leading to a denial of service for the application. The...
SUSE-RU-2026:3712-1 Security update 5.1.5 for Multi-Linux Manager Server
This update fixes the following issues: Release Notes Highlights: - Update to SUSE Multi-Linux Manager 5.1.5 Added known issue for missing BasicConstraints Critical flag Added a note about disk-check parameters semantics change Added a note about enabling FIPS mode after installing SUSE Multi-Lin...
CVE-2026-77354 vulnerabilities
Vulnerabilities for packages: grafana, commercial-grafana, grafana-fips...
GHSA-XHJ3-7XW9-VR34 vulnerabilities
Vulnerabilities for packages: grafana, commercial-grafana, grafana-fips...
GHSA-MMFR-PMJX-HW9W vulnerabilities
Vulnerabilities for packages: grafana, commercial-grafana, grafana-fips...
CVE-2026-76905 vulnerabilities
Vulnerabilities for packages: grafana, commercial-grafana, grafana-fips...