Ubuntu: Security Advisory (USN-7874-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The 2025 Go Cryptography State of the Union

This past August, I delivered my traditional Go Cryptography State of the Union talk at GopherCon US 2025 in New York. It goes into everything that happened at the intersection of Go and cryptography over the last year. You can watch the video with manually edited subtitles, for my fellow subtitl...

GHSA-F6X5-JH6R-WRFV vulnerabilities

Vulnerabilities for packages: cloud-provider-azure-fips, crossplane-provider-azure-sql, nerdctl, crossplane-provider-azure-authorization, eksctl, falcosidekick-fips, skaffold-fips, grafana-operator-fips, terraform-provider-random-fips, grafana-fips, harbor-registry, crossplane, helm-push, k6-fips...

CVE-2025-47914 vulnerabilities

Vulnerabilities for packages: cloud-provider-azure-fips, crossplane-provider-azure-sql, nerdctl, crossplane-provider-azure-authorization, eksctl, falcosidekick-fips, skaffold-fips, grafana-operator-fips, terraform-provider-random-fips, grafana-fips, harbor-registry, crossplane, helm-push, k6-fips...

GHSA-J5W8-Q4QC-RX2X vulnerabilities

Vulnerabilities for packages: cloud-provider-azure-fips, crossplane-provider-azure-sql, nerdctl, crossplane-provider-azure-authorization, eksctl, vault-benchmark, falcosidekick-fips, gitlab-cng, skaffold-fips, terraform-provider-random-fips, grafana-fips, harbor-registry, crossplane, helm-push,...

CVE-2025-58181 vulnerabilities

Vulnerabilities for packages: cloud-provider-azure-fips, crossplane-provider-azure-sql, nerdctl, crossplane-provider-azure-authorization, eksctl, vault-benchmark, falcosidekick-fips, gitlab-cng, skaffold-fips, terraform-provider-random-fips, grafana-fips, harbor-registry, crossplane, helm-push,...

TencentOS Server 3: grafana (TSSA-2024:0734)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0734 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

Ubuntu: Security Advisory (USN-7865-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Pro FIPS 16.04 LTS : Linux kernel (FIPS) vulnerabilities (USN-7865-1)

"The remote Ubuntu Pro FIPS 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7865-1 advisory. Jean-Claude Graf, Sandro Regge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor...

Ubuntu: Security Advisory (USN-7860-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-64329 vulnerabilities

Vulnerabilities for packages: trivy-operator, cert-manager-cmctl-fips, gitlab-rails-ce-fips, nerdctl, eksctl, flux-source-controller, k3s, gitlab-operator-fips, skaffold-fips, gogatekeeper, chartmuseum-fips, teleport, helm-push, gitlab-rails-ce, kaniko-fips, headlamp-fips, trivy-operator-fips,...

GHSA-PWHC-RPQ9-4C8W vulnerabilities

Vulnerabilities for packages: trivy-operator, cert-manager-cmctl-fips, gitlab-rails-ce-fips, nerdctl, eksctl, flux-source-controller, k3s, gitlab-operator-fips, skaffold-fips, gogatekeeper, chartmuseum-fips, teleport, helm-push, gitlab-rails-ce, kaniko-fips, headlamp-fips, trivy-operator-fips,...

GHSA-M6HQ-P25P-FFR2 vulnerabilities

Vulnerabilities for packages: trivy-operator, cert-manager-cmctl-fips, gitlab-rails-ce-fips, nerdctl, eksctl, flux-source-controller, k3s, gitlab-operator-fips, skaffold-fips, gogatekeeper, chartmuseum-fips, teleport, helm-push, gitlab-rails-ce, kaniko-fips, headlamp-fips, trivy-operator-fips,...

CVE-2024-25621 vulnerabilities

Vulnerabilities for packages: trivy-operator, cert-manager-cmctl-fips, gitlab-rails-ce-fips, nerdctl, eksctl, flux-source-controller, k3s, gitlab-operator-fips, skaffold-fips, gogatekeeper, chartmuseum-fips, teleport, helm-push, gitlab-rails-ce, kaniko-fips, headlamp-fips, trivy-operator-fips,...

CVE-2025-31133 vulnerabilities

Vulnerabilities for packages: podman, sriov-network-device-plugin-fips, eks-distro, kubernetes, nvidia-container-toolkit, rancher-agent, k3s, cluster-autoscaler, node-feature-discovery, cluster-autoscaler-fips, virt-launcher, falco-no-driver, eks-distro-fips, virt-handler, virt-handler-fips,...

GHSA-CGRX-MC8F-2PRM vulnerabilities

Vulnerabilities for packages: trivy-operator, nerdctl, eks-distro, k3s, kubescape-operator-fips, docker-fips, cluster-autoscaler, skaffold-fips, cluster-autoscaler-fips, blob-csi-fips, cni-plugins-fips, virt-launcher, kaniko-fips, trivy-operator-fips, syft-fips, k9s, virt-handler-fips,...

GHSA-QW9X-CQR3-WC7R vulnerabilities

Vulnerabilities for packages: podman, sriov-network-device-plugin-fips, eks-distro, kubernetes, nvidia-container-toolkit, rancher-agent, k3s, cluster-autoscaler, node-feature-discovery, cluster-autoscaler-fips, falco-no-driver, eks-distro-fips, rke2-runtime, sriov-network-device-plugin,...

GHSA-9493-H29P-RFM2 vulnerabilities

Vulnerabilities for packages: podman, sriov-network-device-plugin-fips, eks-distro, kubernetes, nvidia-container-toolkit, rancher-agent, k3s, cluster-autoscaler, node-feature-discovery, cluster-autoscaler-fips, virt-launcher, falco-no-driver, eks-distro-fips, virt-handler, virt-handler-fips,...

CVE-2025-52881 vulnerabilities

Vulnerabilities for packages: trivy-operator, nerdctl, eks-distro, k3s, kubescape-operator-fips, docker-fips, cluster-autoscaler, skaffold-fips, cluster-autoscaler-fips, blob-csi-fips, cni-plugins-fips, virt-launcher, kaniko-fips, trivy-operator-fips, syft-fips, k9s, virt-handler-fips,...

CVE-2025-52565 vulnerabilities

Vulnerabilities for packages: podman, sriov-network-device-plugin-fips, eks-distro, kubernetes, nvidia-container-toolkit, rancher-agent, k3s, cluster-autoscaler, node-feature-discovery, cluster-autoscaler-fips, falco-no-driver, eks-distro-fips, rke2-runtime, sriov-network-device-plugin,...