5630 matches found
golang security update
1.25.7-1 - Update to Go 1.25.7 fips-1 - Resolves: RHEL-146476...
go-toolset:ol8 security and bug fix update
go-toolset 1.11.13-1 - Bump version to 1.11.13 - Related: rhbz1743204 - Related: rhbz1743206 golang 1.11.13-2 - Improve error message when using non-FIPS API in FIPS mode. - Fixes CVE-2019-9512. - Fixes CVE-2019-9514. - Resolves: rhbz1745711 - Resolves: rhbz1745705 1.11.6-3 - Updates to be less...
GHSA-V34V-RQ6J-CJ6P vulnerabilities
Vulnerabilities for packages: kibana, langfuse, librechat, langfuse-fips...
CVE-2026-25528 vulnerabilities
Vulnerabilities for packages: kibana, langfuse, librechat, langfuse-fips...
CLEANSTART-2026-PR84319 Security fixes for GHSA-2GH3-RMM4-6RQ5, GHSA-R6V5-FH4H-64XC, GHSA-RHFX-M35P-FF5J, GHSA-XWFJ-JGWM-7WP5 applied in versions: 1.27.5-r1, 1.27.6-r0
Multiple security vulnerabilities affect the ztunnel-fips package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-TR92727 During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succ...
Multiple security vulnerabilities affect the prometheus-operator-fips package. During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should ha...
CLEANSTART-2026-GV85693 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process
Multiple security vulnerabilities affect the cloudnative-pg-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...
CLEANSTART-2026-QI35149 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process
Multiple security vulnerabilities affect the cloudnative-pg-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...
CLEANSTART-2026-FI29887 During the TLS 1
Multiple security vulnerabilities affect the kyverno-fips package. During the TLS 1. See references for individual vulnerability details...
CVE-2026-26014 vulnerabilities
Vulnerabilities for packages: rke2-runtime, rke2-runtime-fips, livekit-egress, spegel, livekit-server-fips, spegel-fips, ipfs-cluster-fips, livekit-cli, ipfs-cluster, k3s, op-geth, telegraf, kubo-fips, livekit-server, kubo...
GHSA-9F3F-WV7R-QC8R vulnerabilities
Vulnerabilities for packages: rke2-runtime, rke2-runtime-fips, livekit-egress, spegel, livekit-server-fips, spegel-fips, ipfs-cluster-fips, livekit-cli, ipfs-cluster, k3s, op-geth, telegraf, kubo-fips, livekit-server, kubo...
CVE-2026-24851 vulnerabilities
Vulnerabilities for packages: grafana-fips, grafana...
GHSA-JQ9F-GM9W-RWM9 vulnerabilities
Vulnerabilities for packages: grafana-fips, grafana...
Ubuntu: Security Advisory (USN-7988-4)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GHSA-R6PH-V2QM-Q3C2 vulnerabilities
Vulnerabilities for packages: openstack-kolla-toolbox-2025.2, awx, jupyter-base-notebook, kubeflow-pipelines-visualization-server, open-webui, opal, label-studio, py3-cassandra-medusa, request-1276, prefect, pgadmin4, datadog-agent-fips, authentik, gitlab-cng-fips, mitmproxy, vllm-openai-cuda-12....
CVE-2026-26007 vulnerabilities
Vulnerabilities for packages: openstack-kolla-toolbox-2025.2, awx, jupyter-base-notebook, kubeflow-pipelines-visualization-server, open-webui, opal, label-studio, py3-cassandra-medusa, request-1276, prefect, pgadmin4, datadog-agent-fips, authentik, gitlab-cng-fips, mitmproxy, vllm-openai-cuda-12....
GHSA-43FC-JF86-J433 vulnerabilities
Vulnerabilities for packages: kubeflow-centraldashboard, redisinsight, awx, kibana, langfuse, opensearch-dashboards-fips, saf, jitsucom-jitsu, librechat, gitlab-rails-ce, nextcloud-server, gitlab-rails-ce-fips, kubeflow-katib, opensearch-dashboards, lerna, prism, arangodb, langfuse-fips...
CVE-2026-25639 vulnerabilities
Vulnerabilities for packages: kubeflow-centraldashboard, redisinsight, awx, kibana, langfuse, opensearch-dashboards-fips, saf, jitsucom-jitsu, librechat, gitlab-rails-ce, nextcloud-server, gitlab-rails-ce-fips, kubeflow-katib, opensearch-dashboards, lerna, prism, arangodb, langfuse-fips...
CLEANSTART-2026-CV28298 SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption
Multiple security vulnerabilities affect the argo-workflows-fips package. SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption. See references for individual vulnerability...