wolfGuard

WolfGuard VPNとFIPS 140-3暗号化 WolfGuardは、wolfSSLのFIPS準拠のリファクタリングであり、Linuxカーネルベースの WireGuardを元に、Jason Donenfeldによって設計および作成されました。 使用方法は基本的に同一です。WolfGuardには2つの主要コンポーネントがあります：wolfguard.koカーネルモジュールとwg-fips設定ツールです。 wolfguard.koはlibwolfssl.koカーネルモジュールに依存し、wg-fipsはlibwolfssl.soライブラリに依存します —...

SymCrypt-OpenSSL

SCOSSL - OpenSSL 用 SymCrypt エンジンおよびプロバイダー OpenSSL 用 SymCrypt エンジンおよびプロバイダー SCOSSL により、OpenSSL はコア暗号化操作のプロバイダーとして SymCrypt を使用できます。主な動機は FIPS 認証をサポートすることです。素の OpenSSL 1.1.1 には FIPS 認証済みの暗号モジュールがなく、OpenSSL 3 の fips モジュールは FIPS 140-3 標準で認証されていないためです。 SymCrypt エンジン OpenSSL 1.1.1 SymCrypt プロバイダー OpenS...

wolfssl

MQX向けビルド方法 概要 このMakefileはwolfSSLライブラリーとサンプルプログラムをMQX向けにビルドするためのものです。 以下のターゲットを含んでいます。 wolfssllib: wolfSSL静的ライブラリー test: 暗号アルゴリズムのテスト benchmark: 暗号アルゴリズムのベンチマーク client: TLS クライアントサンプルプログラム server: TLS サーバサンプルプログラム 準備 事前にGCCをインストールしておいてください。 GNU Arm Embedded Toolchain, https://developer.arm.com...

GHSA-3WCJ-GJVF-FVCH vulnerabilities

Vulnerabilities for packages: langfuse, kibana, langfuse-fips, opensearch-dashboards, librechat, opensearch-dashboards-fips...

CVE-2026-56763 vulnerabilities

Vulnerabilities for packages: langfuse, kibana, langfuse-fips, opensearch-dashboards, librechat, opensearch-dashboards-fips...

CVE-2025-71405 vulnerabilities

Vulnerabilities for packages: caddy-fips, step-issuer-fips, cloudflared, buf, gitness, sftpgo, step, dapr, tkn-fips, dapr-fips, rclone-fips, tkn, step-ca, karma, telegraf, kyverno-policy-reporter-ui-fips, step-issuer, step-ca-fips, kyverno-policy-reporter-ui, gogatekeeper, rclone, caddy, step-fip...

GHSA-XCVF-46F4-XWXF vulnerabilities

Vulnerabilities for packages: caddy-fips, step-issuer-fips, cloudflared, buf, gitness, sftpgo, step, dapr, tkn-fips, dapr-fips, rclone-fips, tkn, step-ca, karma, telegraf, kyverno-policy-reporter-ui-fips, step-issuer, step-ca-fips, kyverno-policy-reporter-ui, gogatekeeper, rclone, caddy, step-fip...

CVE-2026-66010 vulnerabilities

Vulnerabilities for packages: langfuse, kibana, awx, gitlab-rails-ce, wazuh-dashboard, wazuh-dashboard-fips, langfuse-fips, gitlab-rails-ce-fips, opensearch-dashboards, librechat, opensearch-dashboards-fips, nextcloud-server...

CVE-2026-71892

In Bouncy Castle for Java before 1.86, the opt-in key-size validation on CMS key-transport recipients, org.bouncycastle.cms.jcajce.JceKeyTransRecipient.setKeySizeValidationtrue, never ran for a message using RFC 9709 content-encryption key derivation id-alg-cek-hkdf-sha256. The branch that should...

CVE-2026-71892

Bouncy Castle for Java versions before 1.86 contain a flaw where opt-in key-size validation on CMS key-transport recipients fails for messages using RFC 9709 content-encryption key derivation (id-alg-cek-hkdf-sha256 ). The root cause is an incorrect comparison between a byte array and an ASN1Obje...

Linux Distros Unpatched Vulnerability : CVE-2026-71892

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Bouncy Castle for Java before 1.86, the opt-in key-size validation on CMS key-transport recipients,...

CVE-2026-89407 vulnerabilities

Vulnerabilities for packages: flyway-fips, solr, cruise-control, apache-pulsar-fips, jenkins-plugin-manager, floci-az, mongodb-search-fips, ontop, gradle, knative-kafka-broker, cass-config-builder-fips, neo4j, ontop-fips, strimzi-kafka-oauth-fips, apicurio-registry-fips, reposilite,...

GHSA-P6PP-M3F8-5C89 vulnerabilities

Vulnerabilities for packages: flyway-fips, solr, cruise-control, apache-pulsar-fips, jenkins-plugin-manager, floci-az, mongodb-search-fips, ontop, gradle, knative-kafka-broker, cass-config-builder-fips, neo4j, ontop-fips, strimzi-kafka-oauth-fips, apicurio-registry-fips, reposilite,...

GO-2026-6615 vulnerabilities

Vulnerabilities for packages: elastic-agent-fips, grafana, grafana-fips, elastic-agent...

GO-2026-6505 vulnerabilities

Vulnerabilities for packages: crossplane-provider-gcp-beta-networksecurity-fips, kube-oidc-proxy, stunnerd, go-sqlcmd, cadvisor-fips, tekton-pipelines, datadog-operator-fips, bank-vaults, node-problem-detector-fips, sftpgo-plugin-pubsub, crossplane-provider-gcp-beta-compute,...

CVE-2026-17508

The Bouncy Castle for Java cryptographic library (versions before 1.86 , LTS before 2.73.13 , and FIPS before bcpkix-fips 1.0.13, 2.0.13, and 2.1.13) contains a vulnerability where password-based key derivation functions (KDFs) use unbounded cost parameters from untrusted input. Specifically, the...

EUVD-2026-91236

In Bouncy Castle for Java before 1.86, several password-based key derivation entry points ran the KDF with cost parameters taken from the untrusted input being processed, without bounding them, so a small input could dictate an arbitrary amount of work before any password or integrity check could...

USN-8818-6 linux-fips vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer TLB invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been...

GHSA-PRGH-XP8R-P3M5 vulnerabilities

Vulnerabilities for packages: langfuse, unleash-fips, librechat...

CVE-2026-101902 vulnerabilities

Vulnerabilities for packages: langfuse, azurite, kubeflow-centraldashboard, kibana, prism, redisinsight, semaphore, wazuh-dashboard, lambda-nodejs, lerna, wazuh-dashboard-fips, langfuse-fips, gitlab-rails-ce-fips, opensearch-dashboards, librechat, opensearch-dashboards-fips, nextcloud-server...