CVE-2026-55857 vulnerabilities

Vulnerabilities for packages: keycloak, camunda-zeebe, flyway-fips, zipkin, keycloak-fips, metabase, request-9047-keycloak-fips, airbyte-platform, airbyte-platform-fips, flyway, reposilite, debezium, camunda...

GHSA-XVR9-35CR-46V9 vulnerabilities

Vulnerabilities for packages: keycloak, camunda-zeebe, flyway-fips, zipkin, keycloak-fips, metabase, request-9047-keycloak-fips, airbyte-platform, airbyte-platform-fips, flyway, reposilite, debezium, camunda...

CVE-2026-55858 vulnerabilities

Vulnerabilities for packages: keycloak, camunda-zeebe, flyway-fips, zipkin, keycloak-fips, metabase, request-9047-keycloak-fips, airbyte-platform, airbyte-platform-fips, flyway, reposilite, debezium, camunda...

CVE-2026-12681 vulnerabilities

Vulnerabilities for packages: teleport-operator-fips, teleport, tbot...

GHSA-6HX8-3WJJ-GR8G vulnerabilities

Vulnerabilities for packages: openstack-glance-2026.1, openstack-glance-2025.1-fips, openstack-glance-2025.2, openstack-horizon-2026.1, openstack-glance-2025.2-fips, openstack-nova-2026.1, openstack-placement-2026.1, openstack-horizon-2025.2, openstack-nova-2025.2, openstack-tempest-2026.1,...

GHSA-M452-Q8C9-RG2F vulnerabilities

Vulnerabilities for packages: tez, druid, apache-pulsar, apache-pulsar-fips, pinot-fips, pinot...

CVE-2026-55688 vulnerabilities

Vulnerabilities for packages: tez, druid, apache-pulsar, apache-pulsar-fips, pinot-fips, pinot...

USN-8666-3: Linux kernel (GCP FIPS) vulnerabilities

Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...

USN-8666-3 linux-gcp-fips vulnerabilities

Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...

GO-2026-6293 vulnerabilities

Vulnerabilities for packages: falcosidekick-ui-fips, listmonk, temporal-ui-server, temporal-ui-server-fips, temporal-fips, temporal, kube-metrics-adapter-fips, falcosidekick-ui, kube-metrics-adapter...

golang security, bug fix, and enhancement update

1.26.7-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var 1.26.7-1 - Update to Go 1.26.7 fips-1...

GO-2026-6259 vulnerabilities

Vulnerabilities for packages: velero-plugin-for-microsoft-azure-fips, velero-plugin-for-gcp, velero-plugin-for-aws-fips, velero-plugin-for-aws, velero-plugin-for-microsoft-azure, velero-plugin-for-gcp-fips...

GO-2026-6274 vulnerabilities

Vulnerabilities for packages: grafana, commercial-grafana, grafana-fips...

GO-2026-6275 vulnerabilities

Vulnerabilities for packages: grafana, commercial-grafana, grafana-fips...

GO-2026-6258 vulnerabilities

Vulnerabilities for packages: thanos, cortex-fips, cortex, tempo-fips, cortex-geomys-fips, pulumi-language-yaml, thanos-fips, thanos-receive-controller-fips, thanos-receive-controller, tempo...

GO-2026-6250 vulnerabilities

Vulnerabilities for packages: kubescape-server-fips, kubescape, cloudbeat, kubescape-server, cloudbeat-fips...

CVE-2026-55677 vulnerabilities

Vulnerabilities for packages: falcosidekick-ui-fips, listmonk, temporal-ui-server, temporal-ui-server-fips, temporal-fips, temporal, kube-metrics-adapter-fips, falcosidekick-ui, kube-metrics-adapter...

Denial-of-Service (DoS)

Bouncy Castle for Java FIPS BC-FJA is vulnerable to a Denial-of-Service DoS. the vulnerability is due to the JNI seeding routine repeatedly retrying the RDSEED/RDRAND CPU instructions without a limit when entropy generation fails, which allows an attacker or environmental condition causing...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: openssh (UTSA-2026-104841)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104841 advisory. A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie- Hellman Group Exchange DH-GEX client path. This occurs...

GHSA-W67G-5RQW-F597 vulnerabilities

Vulnerabilities for packages: cluster-api-fips, eks-distro-fips, cloudflared-fips, cosmo-router, rke2-runtime-fips, infinispan-operator, kube-conformance, virt-controller, cosmo-router-fips, kubernetes, amazon-cloudwatch-agent, virt-controller-fips, cluster-api, virt-api-fips, op-geth,...