CLEANSTART-2026-FB79569 Security fixes in opentelemetry-collector-contrib-fips 0.159.0-r1

Package opentelemetry-collector-contrib-fips version 0.159.0-r1 fixes 10 vulnerabilities: CVE-2026-56864, CVE-2026-56865, CVE-2026-56860, CVE-2026-56858, CVE-2026-33818...

CLEANSTART-2026-IA07692 Security fixes in opentelemetry-collector-contrib-fips 0.158.0-r2

Package opentelemetry-collector-contrib-fips version 0.158.0-r2 fixes 10 vulnerabilities: CVE-2026-56864, CVE-2026-56865, CVE-2026-56860, CVE-2026-56858, CVE-2026-33818...

CVE-2026-60004 vulnerabilities

Vulnerabilities for packages: gitea, gitea-fips...

PT-2026-89953

Package ollama-fips version 0.32.7-r1 fixes 1 vulnerabilities: ghsa-259r-337f-4rfw...

PT-2026-89952

Package go-fips-1.25 version 1.25.6-r0 fixes 2 vulnerabilities: ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x...

PT-2026-89957

Package prometheus-fips version 3.12.0-r1 fixes 2 vulnerabilities: ghsa-hrxh-6v49-42gf, ghsa-259r-337f-4rfw...

PT-2026-89947

Package ollama-fips version 0.32.1-r1 fixes 1 vulnerabilities: ghsa-259r-337f-4rfw...

PT-2026-89960

Package ollama-fips version 0.32.9-r2 fixes 1 vulnerabilities: ghsa-259r-337f-4rfw...

PT-2026-89966

Package ollama-fips version 0.32.8-r1 fixes 1 vulnerabilities: ghsa-259r-337f-4rfw...

PT-2026-89955

Package ollama-fips version 0.32.4-r1 fixes 1 vulnerabilities: ghsa-259r-337f-4rfw...

PT-2026-89950

Package ollama-fips version 0.32.14-r2 fixes 1 vulnerabilities: ghsa-259r-337f-4rfw...

libreswan: badly formatted X.509 certificate can cause an assertion failure that crashes the daemon process

A flaw was found in Libreswan. An unauthenticated remote attacker can send a specially crafted X.509 certificate payload during an IKEv1 or IKEv2 exchange. This flaw occurs when Libreswan is operating in FIPS Federal Information Processing Standards mode and processing a certificate with an inval...

libreswan: badly formatted X.509 certificate can cause an assertion failure that crashes the daemon process

A flaw was found in Libreswan. An unauthenticated remote attacker can send a specially crafted X.509 certificate payload during an IKEv1 or IKEv2 exchange. This flaw occurs when Libreswan is operating in FIPS Federal Information Processing Standards mode and processing a certificate with an inval...

Oracle Linux 10 : ELSA-2026-60306-0: / golang (ELSA-2026-603060)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-603060 advisory. 1.26.7-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var 1.26.7-1 - Update to Go 1.26.7 fips-1 Tenable has extracted the preceding...

OPENSUSE-SU-2026:21696-1 Security update for go1.25-openssl

This update for go1.25-openssl fixes the following issues: Update to version 1.25.14 cut from the go1.25-fips-release branch at the revision tagged go1.25.14-1-openssl-fips. Security issues fixed: - CVE-2026-33818: encoding/asn1: stack exhaustion when parsing deeply-nested, recursive structures c...

CVE-2026-27878 vulnerabilities

Vulnerabilities for packages: grafana, commercial-grafana, grafana-fips...

GHSA-6XFF-CPCQ-VPW2 vulnerabilities

Vulnerabilities for packages: grafana, commercial-grafana, grafana-fips...

CVE-2026-55856 vulnerabilities

Vulnerabilities for packages: keycloak, camunda-zeebe, flyway-fips, zipkin, keycloak-fips, metabase, request-9047-keycloak-fips, airbyte-platform, airbyte-platform-fips, flyway, reposilite, debezium, camunda...

GHSA-G9JJ-CGMH-9F38 vulnerabilities

Vulnerabilities for packages: keycloak, camunda-zeebe, flyway-fips, zipkin, keycloak-fips, metabase, request-9047-keycloak-fips, airbyte-platform, airbyte-platform-fips, flyway, reposilite, debezium, camunda...

GHSA-QXVW-FVWX-5CP7 vulnerabilities

Vulnerabilities for packages: keycloak, camunda-zeebe, flyway-fips, zipkin, keycloak-fips, metabase, request-9047-keycloak-fips, airbyte-platform, airbyte-platform-fips, flyway, reposilite, debezium, camunda...