CVE-2018-17454 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

CVE-2018-17452 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: langfuse-fips, nerdctl, op-geth, rabbitmq-cluster-operator-fips, ratify, request-1279, aws-signer-notation-plugin-fips, azcopy-fips, k8ssandra-client-fips, velero-plugin-for-microsoft-azure-fips, sftpgo-plugin-geoipfilter, metrics-agent-fips,...

Ubuntu 22.04 LTS : Linux kernel (Azure FIPS) vulnerabilities (USN-7910-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7910-1 advisory. Jean-Claude Graf, Sandro Regge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation betwee...

Ubuntu: Security Advisory (USN-7907-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 10 : openssl (ELSA-2025-21248)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-21248 advisory. 3.5.1-4.0.1 - Replace upstream references Orabug: 34340177 - Update FIPS provider name Orabug: 35824276 1:3.5.1-4 - Fix CVE-2025-9230 Resolves: RHEL-115885...

Security Bulletin: Due to the use of FIPS 140-2 Bouncy Castle Crypto package, IBM EntireX is vulnerable to an Allocation of Resources Without Limits or Throttling vulnerability (CVE-2025-8885).

Summary Due to the use of FIPS 140-2 Bouncy Castle Crypto package, IBM EntireX is vulnerable to an Allocation of Resources Without Limits or Throttling vulnerability CVE-2025-8885. The FIPS 140-2 Bouncy Castle Crypto package has been updated in order to address the vulnerability. Vulnerability...

Oracle Linux 9 : openssl (ELSA-2025-21255)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-21255 advisory. 3.5.1-4.0.1 - Enable openssl-fips-provider dependency Orabug: 36504822 - Temporary disable openssl-fips-provider dependency Orabug: 36504822 - Replace upstream...

CVE-2025-13467 vulnerabilities

Vulnerabilities for packages: keycloak, keycloak-fips...

GHSA-93VM-MQPW-8WH3 vulnerabilities

Vulnerabilities for packages: keycloak, keycloak-fips...

openssl security update

3.5.1-4.0.1 - Enable openssl-fips-provider dependency Orabug: 36504822 - Temporary disable openssl-fips-provider dependency Orabug: 36504822 - Replace upstream references Orabug: 34340177 3.5.1.openela.0.1 - Add OpenELA specific changes 1:3.5.1-4 - Fix CVE-2025-9230 Resolves: RHEL-115929 1:3.5.1-...

GHSA-5GFM-WPXJ-WJGQ vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, arangodb, gitlab-rails-ce, gitlab-rails-ce-fips, argo-workflows, kibana, opensearch-dashboards-fips, kubeflow-katib, kubeflow-centraldashboard, kubeflow-pipelines, jitsucom-jitsu...

CVE-2025-12816 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, arangodb, gitlab-rails-ce, gitlab-rails-ce-fips, argo-workflows, kibana, opensearch-dashboards-fips, kubeflow-katib, kubeflow-centraldashboard, kubeflow-pipelines, jitsucom-jitsu...

GHSA-554W-WPV2-VW27 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, arangodb, gitlab-rails-ce, gitlab-rails-ce-fips, argo-workflows, kibana, opensearch-dashboards-fips, kubeflow-katib, kubeflow-centraldashboard, kubeflow-pipelines, jitsucom-jitsu...

GHSA-65CH-62R8-G69G vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, arangodb, gitlab-rails-ce, gitlab-rails-ce-fips, argo-workflows, kibana, opensearch-dashboards-fips, kubeflow-katib, kubeflow-centraldashboard, kubeflow-pipelines, jitsucom-jitsu...

CVE-2025-66031 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, arangodb, gitlab-rails-ce, gitlab-rails-ce-fips, argo-workflows, kibana, opensearch-dashboards-fips, kubeflow-katib, kubeflow-centraldashboard, kubeflow-pipelines, jitsucom-jitsu...

GHSA-66JQ-2C23-2XH5 vulnerabilities

Vulnerabilities for packages: victorialogs-fips, victorialogs, victoriametrics-operator-fips...

CVE-2025-65942 vulnerabilities

Vulnerabilities for packages: victorialogs-fips, victorialogs, victoriametrics-operator-fips...

Ubuntu: Security Advisory (USN-7889-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openssl security update

3.5.1-4.0.2fips - Update additional upstream references 3.5.1-4.0.1fips - Add FIPS package change: add fips suffix to Release and set Epoch to 10 Orabug: 35824276 - Update FIPS module name Orabug: 35824276 3.5.1-4.0.1 - Enable openssl-fips-provider dependency Orabug: 36504822 - Temporary disable...