7575 matches found
libreswan: badly formatted X.509 certificate can cause an assertion failure that crashes the daemon process
A flaw was found in Libreswan. An unauthenticated remote attacker can send a specially crafted X.509 certificate payload during an IKEv1 or IKEv2 exchange. This flaw occurs when Libreswan is operating in FIPS Federal Information Processing Standards mode and processing a certificate with an inval...
libreswan: badly formatted X.509 certificate can cause an assertion failure that crashes the daemon process
A flaw was found in Libreswan. An unauthenticated remote attacker can send a specially crafted X.509 certificate payload during an IKEv1 or IKEv2 exchange. This flaw occurs when Libreswan is operating in FIPS Federal Information Processing Standards mode and processing a certificate with an inval...
Oracle Linux 10 : ELSA-2026-60306-0: / golang (ELSA-2026-603060)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-603060 advisory. 1.26.7-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var 1.26.7-1 - Update to Go 1.26.7 fips-1 Tenable has extracted the preceding...
OPENSUSE-SU-2026:21696-1 Security update for go1.25-openssl
This update for go1.25-openssl fixes the following issues: Update to version 1.25.14 cut from the go1.25-fips-release branch at the revision tagged go1.25.14-1-openssl-fips. Security issues fixed: - CVE-2026-33818: encoding/asn1: stack exhaustion when parsing deeply-nested, recursive structures c...
CVE-2026-27878 vulnerabilities
Vulnerabilities for packages: grafana-fips, commercial-grafana, grafana...
GHSA-6XFF-CPCQ-VPW2 vulnerabilities
Vulnerabilities for packages: grafana-fips, commercial-grafana, grafana...
CVE-2026-55856 vulnerabilities
Vulnerabilities for packages: flyway-fips, reposilite, zipkin, airbyte-platform-fips, camunda, debezium, flyway, metabase, request-9047-keycloak-fips, camunda-zeebe, airbyte-platform, keycloak-fips, keycloak...
CVE-2026-55857 vulnerabilities
Vulnerabilities for packages: flyway-fips, reposilite, zipkin, airbyte-platform-fips, camunda, debezium, flyway, metabase, request-9047-keycloak-fips, camunda-zeebe, airbyte-platform, keycloak-fips, keycloak...
CVE-2026-55858 vulnerabilities
Vulnerabilities for packages: flyway-fips, reposilite, zipkin, airbyte-platform-fips, camunda, debezium, flyway, metabase, request-9047-keycloak-fips, camunda-zeebe, airbyte-platform, keycloak-fips, keycloak...
GHSA-QXVW-FVWX-5CP7 vulnerabilities
Vulnerabilities for packages: flyway-fips, reposilite, zipkin, airbyte-platform-fips, camunda, debezium, flyway, metabase, request-9047-keycloak-fips, camunda-zeebe, airbyte-platform, keycloak-fips, keycloak...
GHSA-G9JJ-CGMH-9F38 vulnerabilities
Vulnerabilities for packages: flyway-fips, reposilite, zipkin, airbyte-platform-fips, camunda, debezium, flyway, metabase, request-9047-keycloak-fips, camunda-zeebe, airbyte-platform, keycloak-fips, keycloak...
GHSA-XVR9-35CR-46V9 vulnerabilities
Vulnerabilities for packages: flyway-fips, reposilite, zipkin, airbyte-platform-fips, camunda, debezium, flyway, metabase, request-9047-keycloak-fips, camunda-zeebe, airbyte-platform, keycloak-fips, keycloak...
CVE-2026-12681 vulnerabilities
Vulnerabilities for packages: teleport, tbot, teleport-operator-fips...
GHSA-6HX8-3WJJ-GR8G vulnerabilities
Vulnerabilities for packages: openstack-horizon-2025.1-fips, openstack-glance-2025.2-fips, openstack-keystone-2026.1-fips, openstack-glance-2025.2, openstack-horizon-2025.2-fips, openstack-glance-2025.1, openstack-tempest-2026.1, openstack-placement-2026.1-fips, openstack-tempest-2025.1,...
GHSA-M452-Q8C9-RG2F vulnerabilities
Vulnerabilities for packages: pinot, pinot-fips, druid, apache-pulsar, tez, apache-pulsar-fips...
CVE-2026-55688 vulnerabilities
Vulnerabilities for packages: pinot, pinot-fips, druid, apache-pulsar, tez, apache-pulsar-fips...
USN-8666-3 linux-gcp-fips vulnerabilities
Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...
USN-8666-3: Linux kernel (GCP FIPS) vulnerabilities
Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...
GO-2026-6293 vulnerabilities
Vulnerabilities for packages: kube-metrics-adapter, listmonk, temporal, temporal-fips, kube-metrics-adapter-fips, temporal-ui-server, falcosidekick-ui, temporal-ui-server-fips, falcosidekick-ui-fips...
