5984 matches found
EUVD-2026-69820
In FIPS mode, Libreswan's adddecodedcert function calls CERTExtractPublicKey and asserts that the result is not NULL. However, CERTExtractPublicKey returns NULL when public key extraction fails, for example if the RSA exponent is set to 0. A remote attacker can send a malformed X.509 certificate ...
CVE-2026-14957 FIPS mode assertion failure via malicious CERT payload
In FIPS mode, Libreswan's adddecodedcert function calls CERTExtractPublicKey and asserts that the result is not NULL. However, CERTExtractPublicKey returns NULL when public key extraction fails, for example if the RSA exponent is set to 0. A remote attacker can send a malformed X.509 certificate ...
CVE-2026-14957
CVE-2026-14957 is a denial-of-service vulnerability in Libreswan (an IPsec/IKE implementation for Linux). In FIPS mode , the add_decoded_cert() function calls CERT_ExtractPublicKey() and asserts the result is non-NULL. When public key extraction fails (e.g., RSA exponent set to 0), the assertion ...
CVE-2026-14957
In FIPS mode, Libreswan's adddecodedcert function calls CERTExtractPublicKey and asserts that the result is not NULL. However, CERTExtractPublicKey returns NULL when public key extraction fails, for example if the RSA exponent is set to 0. A remote attacker can send a malformed X.509 certificate ...
GO-2026-6225 vulnerabilities
Vulnerabilities for packages: crossplane, knative-serving, crossplane-fips, tekton-pipelines-fips, tekton-pipelines, knative-serving-fips, kubeflow-katib...
GHSA-5CC2-282F-JJQ2 vulnerabilities
Vulnerabilities for packages: datadog-agent-fips, keep, airflow, datadog-agent, mlrun-fips, mlrun, keep-fips...
CVE-2026-15925 vulnerabilities
Vulnerabilities for packages: datadog-agent-fips, keep, airflow, datadog-agent, mlrun-fips, mlrun, keep-fips...
Oracle Linux 9 : ELSA-2026-60304-0: / golang (ELSA-2026-603040)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-603040 advisory. 1.26.7-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var 1.26.7-1 - Update to Go 1.26.7 fips-1 - Resolves: RHEL-246425 1.26.5-2 - Update t...
ejbca-pqc-lab
EJBCA Pure PQC Lab — ML-DSA-65 Двухуровневая иерархия PKI Практическая реализация NIST FIPS 204 ML-DSA в двухуровневой иерархии PKI с использованием EJBCA Community Edition. 📖 Полное руководство: Создание пост-квантовой PKI: как я подписал корневой и промежуточный ЦС с помощью ML-DSA на EJBCA Что...
CLEANSTART-2026-OR64895 Security fixes in kubernetes-csi-external-provisioner-fips 6.2.1-r2
Package kubernetes-csi-external-provisioner-fips version 6.2.1-r2 fixes 21 vulnerabilities: CVE-2026-42508, CVE-2026-39835, CVE-2026-46598, CVE-2026-39828, CVE-2026-39829...
CLEANSTART-2026-GR84261 Security fixes in tekton-chains-fips 0.24.0-r1
Package tekton-chains-fips version 0.24.0-r1 fixes 26 vulnerabilities: CVE-2026-33818, CVE-2026-46600, CVE-2026-56853, CVE-2026-56858, CVE-2026-56859...
CLEANSTART-2026-FL25724 Security fixes in local-path-provisioner-fips 0.0.36-r2
Package local-path-provisioner-fips version 0.0.36-r2 fixes 7 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-56853, CVE-2026-56859...
CLEANSTART-2026-CX42077 Security fixes in go-fips-1.25 1.25.6-r1
Package go-fips-1.25 version 1.25.6-r1 fixes 3 vulnerabilities: CVE-2025-68121, CVE-2025-61727, CVE-2025-61732...
CLEANSTART-2026-AD26676 Security fixes in temporal-ui-server-fips 2.50.1-r1
Package temporal-ui-server-fips version 2.50.1-r1 fixes 9 vulnerabilities: CVE-2026-39821, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853, CVE-2026-56858...
CLEANSTART-2026-DG62479 Security fixes in cassandra-reaper-fips 4.1.1-r3
Package cassandra-reaper-fips version 4.1.1-r3 fixes 4 vulnerabilities: CVE-2026-44249, CVE-2026-45416, CVE-2026-50010, CVE-2026-10050...
CLEANSTART-2026-AT59511 Security fixes in cassandra-reaper-fips 4.0.2-r2
Package cassandra-reaper-fips version 4.0.2-r2 fixes 20 vulnerabilities: ghsa-r7wm-3cxj-wff9, ghsa-72hv-8253-57qq, CVE-2026-54512, CVE-2026-54513, CVE-2026-54514...
CLEANSTART-2026-ZE35909 Security fixes in tigera-operator-fips 1.38.16-r1
Package tigera-operator-fips version 1.38.16-r1 fixes 7 vulnerabilities: CVE-2026-53713, CVE-2026-53714, CVE-2026-53715, CVE-2026-53716, CVE-2026-53717...
CLEANSTART-2026-AB16903 Security fixes in fluent-operator-fips 3.10.0-r2
Package fluent-operator-fips version 3.10.0-r2 fixes 10 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...
CLEANSTART-2026-LN51948 Security fixes in go-fips-1.25 1.24.11-r0
Package go-fips-1.25 version 1.24.11-r0 fixes 5 vulnerabilities: CVE-2025-61728, CVE-2025-61726, CVE-2025-68121, CVE-2025-61731, CVE-2025-68119...