Oracle Linux 10 : openssl (ELSA-2025-21248)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-21248 advisory. 3.5.1-4.0.1 - Replace upstream references Orabug: 34340177 - Update FIPS provider name Orabug: 35824276 1:3.5.1-4 - Fix CVE-2025-9230 Resolves: RHEL-115885...

Security Bulletin: Due to the use of FIPS 140-2 Bouncy Castle Crypto package, IBM EntireX is vulnerable to an Allocation of Resources Without Limits or Throttling vulnerability (CVE-2025-8885).

Summary Due to the use of FIPS 140-2 Bouncy Castle Crypto package, IBM EntireX is vulnerable to an Allocation of Resources Without Limits or Throttling vulnerability CVE-2025-8885. The FIPS 140-2 Bouncy Castle Crypto package has been updated in order to address the vulnerability. Vulnerability...

Oracle Linux 9 : openssl (ELSA-2025-21255)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-21255 advisory. 3.5.1-4.0.1 - Enable openssl-fips-provider dependency Orabug: 36504822 - Temporary disable openssl-fips-provider dependency Orabug: 36504822 - Replace upstream...

CVE-2025-13467 vulnerabilities

Vulnerabilities for packages: keycloak-fips, keycloak...

GHSA-93VM-MQPW-8WH3 vulnerabilities

Vulnerabilities for packages: keycloak-fips, keycloak...

openssl security update

3.5.1-4.0.1 - Enable openssl-fips-provider dependency Orabug: 36504822 - Temporary disable openssl-fips-provider dependency Orabug: 36504822 - Replace upstream references Orabug: 34340177 3.5.1.openela.0.1 - Add OpenELA specific changes 1:3.5.1-4 - Fix CVE-2025-9230 Resolves: RHEL-115929 1:3.5.1-...

GHSA-5GFM-WPXJ-WJGQ vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, kubeflow-katib, opensearch-dashboards, jitsucom-jitsu, kubeflow-centraldashboard, kibana, gitlab-rails-ce-fips, argo-workflows, kubeflow-pipelines, arangodb, gitlab-rails-ce...

GHSA-554W-WPV2-VW27 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, kubeflow-katib, opensearch-dashboards, jitsucom-jitsu, kubeflow-centraldashboard, kibana, gitlab-rails-ce-fips, argo-workflows, kubeflow-pipelines, arangodb, gitlab-rails-ce...

CVE-2025-12816 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, kubeflow-katib, opensearch-dashboards, jitsucom-jitsu, kubeflow-centraldashboard, kibana, gitlab-rails-ce-fips, argo-workflows, kubeflow-pipelines, arangodb, gitlab-rails-ce...

GHSA-65CH-62R8-G69G vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, kubeflow-katib, opensearch-dashboards, jitsucom-jitsu, kubeflow-centraldashboard, kibana, gitlab-rails-ce-fips, argo-workflows, kubeflow-pipelines, arangodb, gitlab-rails-ce...

CVE-2025-66031 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, kubeflow-katib, opensearch-dashboards, jitsucom-jitsu, kubeflow-centraldashboard, kibana, gitlab-rails-ce-fips, argo-workflows, kubeflow-pipelines, arangodb, gitlab-rails-ce...

GHSA-66JQ-2C23-2XH5 vulnerabilities

Vulnerabilities for packages: victoriametrics-operator-fips, victorialogs-fips, victorialogs...

CVE-2025-65942 vulnerabilities

Vulnerabilities for packages: victoriametrics-operator-fips, victorialogs-fips, victorialogs...

Ubuntu: Security Advisory (USN-7889-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openssl security update

3.5.1-4.0.2fips - Update additional upstream references 3.5.1-4.0.1fips - Add FIPS package change: add fips suffix to Release and set Epoch to 10 Orabug: 35824276 - Update FIPS module name Orabug: 35824276 3.5.1-4.0.1 - Enable openssl-fips-provider dependency Orabug: 36504822 - Temporary disable...

GHSA-9MV9-GW4X-7XW4 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce, gitlab-workhorse-ce-fips, gitlab-rails-ce, gitlab-rails-ce-fips...

CVE-2025-2615 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce, gitlab-workhorse-ce-fips, gitlab-rails-ce, gitlab-rails-ce-fips...

CVE-2025-12983 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce, gitlab-workhorse-ce-fips, gitlab-rails-ce, gitlab-rails-ce-fips...

Ubuntu: Security Advisory (USN-7874-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The 2025 Go Cryptography State of the Union

This past August, I delivered my traditional Go Cryptography State of the Union talk at GopherCon US 2025 in New York. It goes into everything that happened at the intersection of Go and cryptography over the last year. You can watch the video with manually edited subtitles, for my fellow subtitl...