6740 matches found
AlmaLinux 9.2 [TuxCare] Security Update: buildah / buildah-tests Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1746188134)
The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1746188134 advisory. - A flaw was found in Buildah and subsequently Podman Build which allows containers to mount arbitrary locations on the host...
AlmaLinux 9.2 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl (ALMALINUX9.2:CLSA-2025:1741787087)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1741787087 advisory. - Issue summary: Checking excessively long invalid RSA public keys may take a long time. Impact summary: Applications that use the function...
AlmaLinux 9.6 [TuxCare] Security Update: openssh / openssh-askpass / openssh-clients / openssh-keycat / etc (ALMALINUX9.6:CLSA-2026:1783706054)
The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1783706054 advisory. - A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie- Hellman Group Exchange DH-GEX...
GHSA-27J2-H3M2-8237 vulnerabilities
Vulnerabilities for packages: keycloak, keycloak-fips...
CVE-2026-84939 vulnerabilities
Vulnerabilities for packages: keycloak, keycloak-fips...
GO-2026-6541 vulnerabilities
Vulnerabilities for packages: grafana, grafana-fips...
GO-2026-6488 vulnerabilities
Vulnerabilities for packages: percona-grafana, grafana-fips, grafana-geomys-fips, commercial-grafana, grafana...
GHSA-GX83-3VF8-GH7J vulnerabilities
Vulnerabilities for packages: akhq, datahub-gms, knative-kafka-broker, zookeeper-fips, apache-tomee, kayenta, nextflow, strimzi-kafka-operator, geoserver, elasticsearch-fips, hono, kafbat-ui, apache-nifi, infinispan, floci, pinot, apicurio-registry-fips, cruise-control, traccar, zookeeper,...
GHSA-WJGM-6HV5-3CVF vulnerabilities
Vulnerabilities for packages: akhq, datahub-gms, knative-kafka-broker, zookeeper-fips, apache-tomee, kayenta, nextflow, strimzi-kafka-operator, geoserver, elasticsearch-fips, hono, kafbat-ui, apache-nifi, infinispan, floci, pinot, apicurio-registry-fips, cruise-control, traccar, zookeeper,...
CVE-2026-19032 vulnerabilities
Vulnerabilities for packages: akhq, datahub-gms, knative-kafka-broker, zookeeper-fips, apache-tomee, kayenta, nextflow, strimzi-kafka-operator, geoserver, elasticsearch-fips, hono, kafbat-ui, apache-nifi, infinispan, floci, pinot, apicurio-registry-fips, cruise-control, traccar, zookeeper,...
AZL-105363 CVE-2026-84782 affecting package openssl-fips-provider 3.1.2-2
Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The retransmitted message can be read past the message buffer and the retransmission overwrites the internal state the suspended write needs to resume correctly...
AZL-105354 CVE-2026-75806 affecting package openssl-fips-provider 3.1.2-2
Issue summary: An established DTLS 1.2 association using an AEAD cipher suite can be terminated by a single unauthenticated datagram whose encrypted fragment is shorter than the mandatory explicit IV and authentication tag overhead. Impact summary: An attacker who can send a datagram that is rout...
AZL-105369 CVE-2026-75805 affecting package openssl-fips-provider 3.1.2-2
Issue summary: A CMP client that requests certificate revocation on the basis of a PKCS10 CSR may dereference a NULL pointer and terminate abnormally when processing a crafted revocation response. Impact summary: The NULL pointer dereference happens on a read which leads to a crash and a Denial o...
AZL-105366 CVE-2026-77696 affecting package openssl-fips-provider 3.1.2-2
Issue summary: SM2 signature generation uses non-constant-time arithmetic on secret values, forming a timing side-channel. Impact summary: An attacker able to measure SM2 signing times may learn information about the per-signature secret nonce, which over many signatures can, via a lattice / Hidd...
AZL-105360 CVE-2026-54872 affecting package openssl-fips-provider 3.1.2-2
Issue summary: The generic elliptic-curve scalar multiplication used for ECDSA and SM2 signature operations with curves that do not have a dedicated implementation leaks information about the secret nonce through timing. Impact summary: An attacker able to measure signing times may learn...
AZL-105357 CVE-2026-35189 affecting package openssl-fips-provider 3.1.2-2
Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possible Denial of...
CLEANSTART-2026-HE89623 Security fix for ghsa-gcjh-h69q-9w9g applied in: kube-state-metrics-fips 2.18.0-r3, kube-state-metrics-fips 2.19.1-r1, istio-pilot-discovery 1.31.1-r0
ghsa-gcjh-h69q-9w9g affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CVE-2026-59969
A flaw was found in Apache ZooKeeper. When operating in FIPS Federal Information Processing Standards mode with specific Transport Layer Security TLS settings enabled, ZooKeeper's quorum communication fails to properly verify the hostname of peer certificates. This vulnerability allows a maliciou...
libreswan: badly formatted X.509 certificate can cause an assertion failure that crashes the daemon process
A flaw was found in Libreswan. An unauthenticated remote attacker can send a specially crafted X.509 certificate payload during an IKEv1 or IKEv2 exchange. This flaw occurs when Libreswan is operating in FIPS Federal Information Processing Standards mode and processing a certificate with an inval...