GHSA-5MP6-JRQ3-R938 vulnerabilities

Vulnerabilities for packages: ontop, kayenta-fips, thingsboard, nacos-docker, camunda, ontop-fips, kayenta, nacos, camunda-zeebe...

CVE-2026-43512 vulnerabilities

Vulnerabilities for packages: ontop, kayenta-fips, thingsboard, nacos-docker, camunda, ontop-fips, kayenta, nacos, camunda-zeebe...

GHSA-FV25-8XCX-GQJC vulnerabilities

Vulnerabilities for packages: ontop, kayenta-fips, thingsboard, nacos-docker, camunda, ontop-fips, kayenta, nacos, camunda-zeebe...

GHSA-GX5V-XP9W-J4CG vulnerabilities

Vulnerabilities for packages: ontop, kayenta-fips, thingsboard, nacos-docker, camunda, ontop-fips, kayenta, nacos, camunda-zeebe...

GHSA-H6FC-48RJ-7QQH vulnerabilities

Vulnerabilities for packages: ontop, kayenta-fips, thingsboard, nacos-docker, camunda, ontop-fips, kayenta, nacos, camunda-zeebe...

GHSA-R29C-68GH-XP6X vulnerabilities

Vulnerabilities for packages: ontop, kayenta-fips, nuxeo, thingsboard, nacos-docker, camunda, ontop-fips, kayenta, nacos, camunda-zeebe...

CVE-2026-41284 vulnerabilities

Vulnerabilities for packages: ontop, kayenta-fips, thingsboard, nacos-docker, camunda, ontop-fips, kayenta, nacos, camunda-zeebe...

CVE-2026-42498 vulnerabilities

Vulnerabilities for packages: ontop, kayenta-fips, thingsboard, nacos-docker, camunda, ontop-fips, kayenta, nacos, camunda-zeebe...

CVE-2026-43513 vulnerabilities

Vulnerabilities for packages: ontop, kayenta-fips, thingsboard, nacos-docker, camunda, ontop-fips, kayenta, nacos, camunda-zeebe...

GHSA-GCGV-V5GF-C543 vulnerabilities

Vulnerabilities for packages: nginx-stable, nginx-mainline, ingress-nginx-controller, ingress-nginx-controller-fips...

CVE-2026-42945 vulnerabilities

Vulnerabilities for packages: nginx-stable, nginx-mainline, ingress-nginx-controller, ingress-nginx-controller-fips...

PT-2026-45345

New FIPS build for lab review incorporating the els13..35 patches and CVE references...

PT-2026-45344

New FIPS build to incorporate els0..els8 patches plus cve references...

SUSE-SU-2026:21754-1 Security update for leancrypto

This update for leancrypto fixes the following issues Security issue: - CVE-2026-34610: The leancrypto library is a cryptographic library that exclusively contains only PQC-resistant cryptographic algorithms. Prior to version 1.7.1, lcx509extractnamesegment casts sizet vlen to uint8t when stori...

SUSE-SU-2026:21824-1 Security update for leancrypto

This update for leancrypto fixes the following issues Security issue: - CVE-2026-34610: The leancrypto library is a cryptographic library that exclusively contains only PQC-resistant cryptographic algorithms. Prior to version 1.7.1, lcx509extractnamesegment casts sizet vlen to uint8t when stori...

parley-core (>=0.2.0, <=0.6.1), pqc-combo (0.1.0) +2 more potentially affected by unknown CVE via libcrux-ml-dsa (>=0.0.4, <=0.0.8)

libcrux-ml-dsa CARGO version =0.0.4, =0.2.0, =0.6.1 - pqc-combo 0.1.0 - pqc-fips 0.0.3 - pqc-nostd 0.1.0 Source cves: unknown CVE Source advisory: OSV:GHSA-FHVH-VW7H-9XF3...

parley-core (>=0.2.0, <=0.6.1), pqc-combo (0.1.0) +2 more potentially affected by unknown CVE via libcrux-ml-dsa (>=0.0.4, <=0.0.8)

libcrux-ml-dsa CARGO version =0.0.4, =0.2.0, =0.6.1 - pqc-combo 0.1.0 - pqc-fips 0.0.3 - pqc-nostd 0.1.0 Source cves: unknown CVE Source advisory: GHSA-FHVH-VW7H-9XF3...

Security update for erlang26

This update for erlang26 fixes the following issues Security issues: CVE-2026-21620: remote arbitrary read/write via TFTP relative path traversal bsc1258663. CVE-2026-23941: HTTP Request Smuggling in Erlang OTP bsc1259687. CVE-2026-23942: path traversal vulnerability in Erlang OTP bsc1259681...

SUSE-SU-2026:2010-1 Security update for erlang26

This update for erlang26 fixes the following issues Security issues: - CVE-2026-21620: remote arbitrary read/write via TFTP relative path traversal bsc1258663. - CVE-2026-23941: HTTP Request Smuggling in Erlang OTP bsc1259687. - CVE-2026-23942: path traversal vulnerability in Erlang OTP bsc125968...

CLEANSTART-2026-OD47693 Security fixes for CVE-2025-0913, CVE-2025-15558, CVE-2025-4673, CVE-2025-47907, CVE-2025-47914, CVE-2025-58181, CVE-2025-62156, CVE-2025-62157, CVE-2026-24051, CVE-2026-25934, CVE-2026-26958, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-35469, ghsa-37cx-329c-33x3, ghsa-3xc5-wrhm-f963, ghsa-c2hv-4pfj-mm2r, ghsa-cfpf-hrx2-8rv6, ghsa-fw7p-63qq-7hpr, ghsa-p436-gjf2-799p, ghsa-p84v-gxvw-73pf applied in versions: 3.7.0-r0, 3.7.3-r0, 3.7.4-r0, 3.7.6-r0, 3.7.9-r0, 3.7.9-r1, 3.7.9-r2, 4.0.2-r0, 4.0.4-r0, 4.0.4-r1

Multiple security vulnerabilities affect the argo-workflows-fips package. These issues are resolved in later releases. See references for individual vulnerability details...