Astra Linux – Vulnerability in OpenSSL

Issue summary: There is a type confusion vulnerability in the signature verification of signed PKCS7 data. In this vulnerability, an ASN1TYPE union member is accessed without first validating the type, resulting in an invalid or NULL pointer dereferencing during the processing of malformed PKCS7...

GHSA-8FJ7-8H3W-XWFM vulnerabilities

Vulnerabilities for packages: syncthing-fips, terraform-provider-grafana-fips, seaweedfs-operator-fips, apache-beam-python-3.12-sdk, chainctl, crossplane-provider-aws-rolesanywhere, nova-fips, chezmoi, crossplane-provider-terraform, omni-fips, caddy, helm-diff-fips, sops-fips, datadog-agent,...

CVE-2026-27141 vulnerabilities

Vulnerabilities for packages: syncthing-fips, terraform-provider-grafana-fips, seaweedfs-operator-fips, apache-beam-python-3.12-sdk, chainctl, crossplane-provider-aws-rolesanywhere, nova-fips, chezmoi, crossplane-provider-terraform, omni-fips, caddy, helm-diff-fips, sops-fips, datadog-agent,...

RUSTSEC-2026-0043 Timing Side-Channel in AES-CCM Tag Verification in AWS-LC

Observable timing discrepancy in AES-CCM decryption in AWS-LC allows an unauthenticated user to potentially determine authentication tag validity via timing analysis. The impacted implementations are through the EVP CIPHER API: EVPaes128ccm, EVPaes192ccm, and EVPaes256ccm. Customers of AWS servic...

Timing Side-Channel in AES-CCM Tag Verification in AWS-LC

Observable timing discrepancy in AES-CCM decryption in AWS-LC allows an unauthenticated user to potentially determine authentication tag validity via timing analysis. The impacted implementations are through the EVP CIPHER API: EVPaes128ccm, EVPaes192ccm, and EVPaes256ccm. Customers of AWS servic...

CVE-2026-24051 vulnerabilities

Vulnerabilities for packages: cluster-api-provider-vsphere, blob-csi-fips, sops-fips, datadog-agent, cluster-api-gcp-controller, gitaly-fips, sftpgo, backup-restore-operator, cluster-api-fips, cert-manager-webhook-pdns-fips, istio, docker-fips, migrate, gitlab-runner-fips, ceph-csi-operator-fips,...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: cluster-api-provider-vsphere, blob-csi-fips, sops-fips, datadog-agent, cluster-api-gcp-controller, gitaly-fips, sftpgo, backup-restore-operator, cluster-api-fips, cert-manager-webhook-pdns-fips, istio, docker-fips, migrate, gitlab-runner-fips, ceph-csi-operator-fips,...

OESA-2026-1466 openssl security update

OpenSSL is a robust, commercial-grade, and full-featured toolkit for the Transport Layer Security TLS and Secure Sockets Layer SSL protocols. Security Fixes: Issue summary: Writing large, newline-free data into a BIO chain using the line-buffering filter where the next BIO performs short writes c...

GHSA-WVJ2-96WP-FQ3F vulnerabilities

Vulnerabilities for packages: jaeger, opencost-fips, datadog-agent-fips, ferretdb, gptscript, flux-operator, jaeger-fips, github-mcp-server, gitlab-workhorse-ce-fips, osv-scanner, gitlab-workhorse-ce, datadog-agent, flux-operator-fips, opencost...

CVE-2026-27896 vulnerabilities

Vulnerabilities for packages: jaeger, opencost-fips, datadog-agent-fips, ferretdb, gptscript, flux-operator, jaeger-fips, github-mcp-server, gitlab-workhorse-ce-fips, osv-scanner, gitlab-workhorse-ce, datadog-agent, flux-operator-fips, opencost...

CLEANSTART-2026-LS98939 go-git is a highly extensible git implementation library written in pure Go

Multiple security vulnerabilities affect the argo-cd-fips package. go-git is a highly extensible git implementation library written in pure Go. See references for individual vulnerability details...

CLEANSTART-2026-YW12690 go-git is a highly extensible git implementation library written in pure Go

Multiple security vulnerabilities affect the argo-cd-fips package. go-git is a highly extensible git implementation library written in pure Go. See references for individual vulnerability details...

CLEANSTART-2026-QC30410 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate

Multiple security vulnerabilities affect the argo-cd-fips package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. See references for individual vulnerability details...

CLEANSTART-2026-ID51598 Cancelling a query (e

Multiple security vulnerabilities affect the kyverno-fips package. Cancelling a query e. See references for individual vulnerability details...

CLEANSTART-2026-DZ05206 go-git is a highly extensible git implementation library written in pure Go

Multiple security vulnerabilities affect the argo-cd-fips package. go-git is a highly extensible git implementation library written in pure Go. See references for individual vulnerability details...

CLEANSTART-2026-WP10148 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate

Multiple security vulnerabilities affect the argo-cd-fips package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. See references for individual vulnerability details...

CLEANSTART-2026-AC12204 go-git is a highly extensible git implementation library written in pure Go

Multiple security vulnerabilities affect the argo-cd-fips package. go-git is a highly extensible git implementation library written in pure Go. See references for individual vulnerability details...

CLEANSTART-2026-AJ16639 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate

Multiple security vulnerabilities affect the argo-cd-fips package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. See references for individual vulnerability details...

CLEANSTART-2026-ER93728 go-git is a highly extensible git implementation library written in pure Go

Multiple security vulnerabilities affect the argo-cd-fips package. go-git is a highly extensible git implementation library written in pure Go. See references for individual vulnerability details...

CLEANSTART-2026-XZ04425 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the prometheus-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...