7568 matches found
CVE-2026-59969 Apache ZooKeeper: Improper validation of certificate with host mismatch in FIPS mode
Apache ZooKeeper quorum TLS fails to enforce peer hostname verification in FIPS-mode deployments. When sslQuorum=true, zookeeper.fips-mode=true, ssl.quorum.hostnameVerification=true, and ssl.quorum.clientHostnameVerification=true are enabled, the Java SSLSocket quorum path accepts a CA-trusted pe...
PT-2026-93407
Name of the Vulnerable Software and Affected Versions Apache ZooKeeper versions prior to 3.8.7 Apache ZooKeeper versions prior to 3.9.6 Description Quorum TLS fails to enforce peer hostname verification in FIPS-mode deployments. When sslQuorum=true, zookeeper.fips-mode=true,...
openssl security update
3.5.8-1.0.1 - Replace upstream references Orabug: 34340177 - Update FIPS provider name Orabug: 35824276 1:3.5.8-1 - Rebase to OpenSSL 3.5.8 Resolves: RHEL-242944 Resolves: RHEL-246254 Resolves: RHEL-246266 Resolves: RHEL-246306 Resolves: RHEL-246437 Resolves: RHEL-246441 Resolves: RHEL-246445...
CLEANSTART-2026-GE74044 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...
Multiple security vulnerabilities affect the prometheus-node-exporter-fips package. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. S...
CLEANSTART-2026-OE08543 Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures
Multiple security vulnerabilities affect the prometheus-node-exporter-fips package. Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures. See references for individual vulnerability details...
Astra Linux – Vulnerability in OpenSSL
Issue summary: There is a type confusion vulnerability in the signature verification of signed PKCS7 data. In this vulnerability, an ASN1TYPE union member is accessed without first validating the type, resulting in an invalid or NULL pointer dereferencing during the processing of malformed PKCS7...
Astra Linux – Vulnerability in OpenSSL
Issue summary: An application attempting to decrypt messages encrypted using password-based encryption in CMS can trigger an out-of-bounds read and write attack. Impact summary: This out-of-bounds read attack may cause a system crash, leading to a denial of service for the application. The...
Astra Linux – Vulnerability in OpenSSL
Issue summary: A timing side-channel that could potentially allow the recovery of the private key exists in the ECDSA signature computation. Impact summary: A timing side-channel in ECDSA signature computations could allow an attacker to recover the private key. However, measuring the timing woul...
Astra Linux – Vulnerability in OpenSSL
Issue summary: Generating excessively long X9.42 DH keys or checking overly long X9.42 DH keys or parameters can be very slow. Applications that use functions like DHgeneratekey to generate an X9.42 DH key may experience prolonged delays. Similarly, applications that use functions like...
Oracle Linux 10 : ELSA-2026-67154-0: / openssl (ELSA-2026-671540)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-671540 advisory. 3.5.8-1.0.1 - Replace upstream references Orabug: 34340177 - Update FIPS provider name Orabug: 35824276 1:3.5.8-1 - Rebase to OpenSSL 3.5.8 Resolves...
GO-2026-6367 vulnerabilities
Vulnerabilities for packages: kubescape-server-fips, kubescape, kubescape-server, cilium...
GO-2026-6433 vulnerabilities
Vulnerabilities for packages: gitea, gitea-fips...
GHSA-47G6-3P6H-6CPC vulnerabilities
Vulnerabilities for packages: openjdk-jipher-fips, liberica...
CVE-2026-60589 vulnerabilities
Vulnerabilities for packages: openjdk-jipher-fips, liberica...
CVE-2026-70907 vulnerabilities
Vulnerabilities for packages: openjdk-jipher-fips, liberica...
GHSA-WVJ6-93Q8-XHCM vulnerabilities
Vulnerabilities for packages: openjdk-jipher-fips, liberica...
CVE-2026-61308 vulnerabilities
Vulnerabilities for packages: openjdk-jipher-fips, liberica...
GHSA-X2CM-PMMM-V6XC vulnerabilities
Vulnerabilities for packages: openjdk-jipher-fips, liberica...