CVE-2025-49146 vulnerabilities

Vulnerabilities for packages: camunda-zeebe, keycloak, apicurio-registry, sonarqube-10, liquibase...

GHSA-HQ9P-PM7W-8P54 vulnerabilities

Vulnerabilities for packages: camunda-zeebe, keycloak, apicurio-registry, sonarqube-10, liquibase...

CVE-2025-47950 vulnerabilities

Vulnerabilities for packages: juicefs, eks-distro, eks-distro-fips, kubernetes-dns-node-cache, kubernetes-dns-node-cache-fips...

GHSA-F26W-GH5M-QQ77 vulnerabilities

Vulnerabilities for packages: ipfs-cluster-fips, k3s...

CVE-2025-49140 vulnerabilities

Vulnerabilities for packages: ipfs-cluster-fips, k3s...

Fedora 41 : krb5 (2025-42a13f896e)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-42a13f896e advisory. Disallowing use of the arcfour-hmac-md5 encryption type for session keys Add support for the PKINIT paChecksum2 sequence, required for Active Directory...

GHSA-8CJ5-5RVV-WF4V vulnerabilities

Vulnerabilities for packages: kibana, jitsucom-jitsu, tileserver-gl, gitlab-rails-ce-fips, gitlab-rails-ce, tileserver-gl-fips, code-server, sqlpad...

Ubuntu: Security Advisory (USN-7554-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: IBM Watson Speech Services Cartridge v4.8.8 is vulnerable to a man-in-the-middle vulnerability in RFC7250 Raw Public Keys [CVE-2024-12797]

Summary IBM Watson Speech Services Cartridge v4.8.8 is vulnerable to a man-in-the-middle vulnerability in RFC7250 Raw Public Keys RPKs, due to server authentication failure which is susceptible to man-in-the-middle attack CVE-2024-12797. RFC7250 Raw Public Keys are used in our Speech service...

krb5 security update

1.18.2-32.0.1 - Fixed race condition in krb5setpassword Orabug: 33609767 1.18.2-32 - Do not block HMAC-MD4/5 in FIPS mode Resolves: RHEL-86786 - Don't issue RC4 session keys by default CVE-2025-3576 Resolves: RHEL-88049 - Add PKINIT paChecksum2 from MS-PKCA v20230920 Resolves: RHEL-82648...

CVE-2025-4123 vulnerabilities

Vulnerabilities for packages: grafana-fips...

GHSA-Q53Q-GXQ9-MGRJ vulnerabilities

Vulnerabilities for packages: grafana-fips...

K000151542: OpenSSL vulnerability CVE-2025-4575

Security Advisory Description Issue summary: Use of -addreject option with the openssl x509 application adds a trusted use instead of a rejected use for a certificate. Impact summary: If a user intends to make a trusted certificate rejected for a particular use it will be instead marked as truste...

CVE-2025-47290 vulnerabilities

Vulnerabilities for packages: docker-compose-fips, neuvector, neuvector-fips, docker-compose, neuvector-scanner...

GHSA-CM76-QM8V-3J95 vulnerabilities

Vulnerabilities for packages: docker-compose-fips, neuvector, neuvector-fips, docker-compose, neuvector-scanner...

GHSA-CXFP-7PVR-95FF vulnerabilities

Vulnerabilities for packages: wolfictl, cg, melange, zot, k3s...

CVE-2021-35119

Potential out of Bounds read in FIPS event processing due to improper validation of the length from the firmware in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-23218

When running with FIPS mode enabled, Mirantis Container Runtime 20.10.8 leaks memory during TLS Handshakes which could be abused to cause a denial of service...

ALPINE-CVE-2025-4575

Issue summary: Use of -addreject option with the openssl x509 application adds a trusted use instead of a rejected use for a certificate. Impact summary: If a user intends to make a trusted certificate rejected for a particular use it will be instead marked as trusted for that use. A copy & paste...

DEBIAN-CVE-2025-4575

Issue summary: Use of -addreject option with the openssl x509 application adds a trusted use instead of a rejected use for a certificate. Impact summary: If a user intends to make a trusted certificate rejected for a particular use it will be instead marked as trusted for that use. A copy & paste...