GHSA-6HCQ-HMM3-JJ3C vulnerabilities

Vulnerabilities for packages: apache-nifi-registry, apache-activemq, kayenta-fips, nacos-docker, nacos, conductor, kafbat-ui, thingsboard, kayenta, camunda-zeebe, conductor-fips, camunda, kafbat-ui-fips, apache-activemq-fips...

CVE-2026-22737 vulnerabilities

Vulnerabilities for packages: apache-nifi-registry, apache-activemq, kayenta-fips, nacos-docker, nacos, conductor, kafbat-ui, thingsboard, kayenta, camunda-zeebe, conductor-fips, camunda, kafbat-ui-fips, apache-activemq-fips...

pqc-combo (0.1.0), pqc-fips (0.0.3) +1 more potentially affected by unknown CVE via libcrux-ml-dsa (0.0.4)

libcrux-ml-dsa CARGO version 0.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on libcrux-ml-dsa and may be impacted: - pqc-combo 0.1.0 - pqc-fips 0.0.3 - pqc-nostd 0.1.0 Source cves: unknown CVE Source advisory: OSV:GHSA-CP57-FQ8G-QH6V...

GHSA-CP57-FQ8G-QH6V libcrux has an Incorrect Check of Signer Response Norm During Verification

The ML-DSA verification algorithm as specified in FIPS 204, subsection 6.3 requires verifiers to check that the infinity norm of the deserialized signer response $z$ does not exceed $\gamma1 - \beta$ line 13 of Algorithm 8. The same check is required to be performed during signature generation...

pqc-combo (0.1.0), pqc-fips (0.0.3) +1 more potentially affected by unknown CVE via libcrux-ml-dsa (0.0.4)

libcrux-ml-dsa CARGO version 0.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on libcrux-ml-dsa and may be impacted: - pqc-combo 0.1.0 - pqc-fips 0.0.3 - pqc-nostd 0.1.0 Source cves: unknown CVE Source advisory: OSV:GHSA-XRF2-5R3P-5WGJ...

GHSA-CV4X-93XX-WGFJ vulnerabilities

Vulnerabilities for packages: tekton-chains, tkn, tekton-pipelines, tekton-chains-fips, tkn-fips, tekton-pipelines-fips...

CVE-2026-33022 vulnerabilities

Vulnerabilities for packages: tekton-chains, tkn, tekton-pipelines, tekton-chains-fips, tkn-fips, tekton-pipelines-fips...

GHSA-GC5V-M9X4-R6X2 vulnerabilities

Vulnerabilities for packages: jupyter-base-notebook, datahub-ingestion-fips, kubeflow-katib, metaflow-service-fips, pgadmin4-fips, datahub-ingestion, nvidia-nsight-compute-13.3, dbt-core, superset, awx, tritonserver-backend-vllm-cuda-12.9, ansible-operator, emissary,...

CVE-2026-25645 vulnerabilities

Vulnerabilities for packages: jupyter-base-notebook, datahub-ingestion-fips, kubeflow-katib, metaflow-service-fips, pgadmin4-fips, datahub-ingestion, nvidia-nsight-compute-13.3, dbt-core, superset, awx, tritonserver-backend-vllm-cuda-12.9, ansible-operator, emissary,...

Ubuntu: Security Advisory (USN-8098-8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-8121-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-8098-6)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

golang security update

1.25.8-2 - Update to Go 1.25.8 fips-1 - Resolves: RHEL-157451...

GHSA-52JH-2XXH-PWH6 vulnerabilities

Vulnerabilities for packages: nats, rke2-runtime, k3s, milvus, telegraf, prometheus-nats-exporter, nats-top, nats-top-fips, rke2-runtime-fips, prometheus-nats-exporter-fips, nats-fips, kine...

CVE-2026-29785 vulnerabilities

Vulnerabilities for packages: nats, rke2-runtime, k3s, milvus, telegraf, prometheus-nats-exporter, nats-top, nats-top-fips, rke2-runtime-fips, prometheus-nats-exporter-fips, nats-fips, kine...

Ubuntu: Security Advisory (USN-8059-9)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-8112-4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-8112-4: Linux kernel (Azure FIPS) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - MMC subsystem; - Network drivers; - USB Device Class drivers; - BTRFS file system; - HFS+ file...

USN-8059-9: Linux kernel (Azure FIPS) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - SMB network file system; CVE-2025-22037, CVE-2025-37899...

USN-8059-9 linux-azure-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - SMB network file system; CVE-2025-22037, CVE-2025-37899...