Ubuntu: Security Advisory (USN-8060-6)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-8074-2: Linux kernel (Azure FIPS) vulnerabilities

It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. CVE-2024-36331 Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt...

CLEANSTART-2026-SM37781 Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic

Multiple security vulnerabilities affect the cert-manager-fips package. Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic See references for individual vulnerability details...

CLEANSTART-2026-XJ84245 Rack is a modular Ruby web server interface

Multiple security vulnerabilities affect the logstash-fips package. Rack is a modular Ruby web server interface. See references for individual vulnerability details...

CLEANSTART-2026-EW93264 Security fixes for GHSA-4CX2-FC23-5WG6, GHSA-6XW4-3V39-52MM, GHSA-72QJ-48G4-5XGX, GHSA-MR3Q-G2MV-MR4Q, GHSA-P543-XPFM-54CP, GHSA-VC5P-V9HR-52MJ, GHSA-VQG5-3255-V292 applied in versions: 9.0.8-r2, 9.0.8-r3, 9.0.8-r4, 9.3.0-r1, 9.3.0-r2

Multiple security vulnerabilities affect the logstash-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VC01496 Security fixes for GHSA-F6X5-JH6R-WRFV, GHSA-J5W8-Q4QC-RX2X applied in versions: 0.8.4-r0

Multiple security vulnerabilities affect the k8ssandra-client-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-65P9-R9H6-22VJ AWS-LC has Timing Side-Channel in AES-CCM Tag Verification

Summary AWS-LC is an open-source, general-purpose cryptographic library. Impact Observable timing discrepancy in AES-CCM decryption in AWS-LC allows an unauthenticated user to potentially determine authentication tag validity via timing analysis. The impacted implementations are through the EVP...

CVE-2025-23419 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller-fips, ingress-nginx-controller...

Astra Linux – Vulnerability in OpenSSL

Issue summary: There is a type confusion vulnerability in the signature verification of signed PKCS7 data. In this vulnerability, an ASN1TYPE union member is accessed without first validating the type, resulting in an invalid or NULL pointer dereferencing during the processing of malformed PKCS7...

GHSA-8FJ7-8H3W-XWFM vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, pulumi-language-yaml, chezmoi, crossplane-provider-aws-ecr, nemo, terraform-provider-acme, crossplane-provider-aws-rolesanywhere, opentelemetry-collector-contrib-fips, crossplane-provider-aws-iam-fips, descheduler, flux-fips,...

CVE-2026-27141 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, pulumi-language-yaml, chezmoi, crossplane-provider-aws-ecr, nemo, terraform-provider-acme, crossplane-provider-aws-rolesanywhere, opentelemetry-collector-contrib-fips, crossplane-provider-aws-iam-fips, descheduler, flux-fips,...

RUSTSEC-2026-0043 Timing Side-Channel in AES-CCM Tag Verification in AWS-LC

Observable timing discrepancy in AES-CCM decryption in AWS-LC allows an unauthenticated user to potentially determine authentication tag validity via timing analysis. The impacted implementations are through the EVP CIPHER API: EVPaes128ccm, EVPaes192ccm, and EVPaes256ccm. Customers of AWS servic...

Timing Side-Channel in AES-CCM Tag Verification in AWS-LC

Observable timing discrepancy in AES-CCM decryption in AWS-LC allows an unauthenticated user to potentially determine authentication tag validity via timing analysis. The impacted implementations are through the EVP CIPHER API: EVPaes128ccm, EVPaes192ccm, and EVPaes256ccm. Customers of AWS servic...

CVE-2026-24051 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, k6, headlamp-fips, argo-rollouts-fips, policy-controller-fips, vault-fips, conftest, vault-secrets-webhook, steampipe, argocd-image-updater-fips, zitadel, cert-manager, aws-otel-collector-fips, kubernetes-csi-external-attacher, vitess, spire-serve...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, k6, headlamp-fips, argo-rollouts-fips, policy-controller-fips, vault-fips, conftest, vault-secrets-webhook, steampipe, argocd-image-updater-fips, zitadel, cert-manager, aws-otel-collector-fips, kubernetes-csi-external-attacher, vitess, spire-serve...

OESA-2026-1466 openssl security update

OpenSSL is a robust, commercial-grade, and full-featured toolkit for the Transport Layer Security TLS and Secure Sockets Layer SSL protocols. Security Fixes: Issue summary: Writing large, newline-free data into a BIO chain using the line-buffering filter where the next BIO performs short writes c...

CVE-2026-27896 vulnerabilities

Vulnerabilities for packages: flux-operator, ferretdb, github-mcp-server, jaeger-fips, opencost, gitlab-workhorse-ce-fips, jaeger, gptscript, datadog-agent, flux-operator-fips, gitlab-workhorse-ce, opencost-fips, datadog-agent-fips, osv-scanner...

GHSA-WVJ2-96WP-FQ3F vulnerabilities

Vulnerabilities for packages: flux-operator, ferretdb, github-mcp-server, jaeger-fips, opencost, gitlab-workhorse-ce-fips, jaeger, gptscript, datadog-agent, flux-operator-fips, gitlab-workhorse-ce, opencost-fips, datadog-agent-fips, osv-scanner...

CLEANSTART-2026-LS98939 go-git is a highly extensible git implementation library written in pure Go

Multiple security vulnerabilities affect the argo-cd-fips package. go-git is a highly extensible git implementation library written in pure Go. See references for individual vulnerability details...

CLEANSTART-2026-YW12690 go-git is a highly extensible git implementation library written in pure Go

Multiple security vulnerabilities affect the argo-cd-fips package. go-git is a highly extensible git implementation library written in pure Go. See references for individual vulnerability details...