GHSA-R3MM-QXV5-X23H vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips...

GHSA-4XPW-245V-VP2W vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips...

GHSA-94XW-8RG2-4FMC vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips...

GHSA-G8V2-8WGJ-GWX8 vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips...

GHSA-9XWW-4CJX-6W55 vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips...

GHSA-G797-R4R7-WP94 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips...

GHSA-RPPQ-5VQ8-CRRP vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, gitlab-cng-fips...

GHSA-86FP-JR93-HVV2 vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips...

GHSA-V6XP-H7WW-6XQF vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips...

GHSA-J7VJ-RW65-4V26 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib-fips, neuvector-sigstore-interface, syft, wire-go, consul, temporal-fips, kyverno-policy-reporter-kyverno-plugin, fq, logstash-exporter-fips, rabbitmq-default-user-credential-updater, authservice, k8ssandra-client-fips, gh, nri-rabbitm...

GHSA-8XFX-RJ4P-23JM vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib-fips, neuvector-sigstore-interface, syft, wire-go, consul, temporal-fips, kyverno-policy-reporter-kyverno-plugin, fq, logstash-exporter-fips, rabbitmq-default-user-credential-updater, authservice, k8ssandra-client-fips, gh, nri-rabbitm...

GHSA-49GW-VXVF-FC2G vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, syft, wire-go, temporal-fips, kyverno-policy-reporter-kyverno-plugin, fq, logstash-exporter-fips, rabbitmq-default-user-credential-updater, gh, nri-rabbitmq, grafana-operator-fips, nri-nginx, neuvector-dbgen, nats, vexctl,...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib-fips, wire-go, kyverno-policy-reporter-kyverno-plugin, logstash-exporter-fips, rabbitmq-default-user-credential-updater, prometheus-elasticsearch-exporter-fips, conftest-fips, capslock, src-fingerprint, cfssl, azure-aad-pod-identity-mi...

GHSA-3F6R-QH9C-X6MM vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib-fips, neuvector-sigstore-interface, wire-go, consul, temporal-fips, kyverno-policy-reporter-kyverno-plugin, fq, logstash-exporter-fips, x509-certificate-exporter, aws-signer-notation-plugin-fips, k8ssandra-client-fips, cilium-envoy-fip...

GHSA-3WHM-J4XM-RV8X vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib-fips, neuvector-sigstore-interface, syft, wire-go, consul, temporal-fips, yunikorn-k8shim, kyverno-policy-reporter-kyverno-plugin, fq, logstash-exporter-fips, rabbitmq-default-user-credential-updater, x509-certificate-exporter,...

CVE-2025-27144 vulnerabilities

Vulnerabilities for packages: spire-controller-manager-fips, opentelemetry-collector-contrib-fips, spiffe-helper-fips, frp, consul, temporal-fips, rekor, harbor-registry-fips, bank-vaults, guac, containerd-fips, prometheus-podman-exporter, spire-controller-manager, tekton-chains,...

GHSA-C6GW-W398-HV78 vulnerabilities

Vulnerabilities for packages: spire-controller-manager-fips, opentelemetry-collector-contrib-fips, spiffe-helper-fips, frp, consul, temporal-fips, rekor, harbor-registry-fips, bank-vaults, guac, containerd-fips, prometheus-podman-exporter, spire-controller-manager, tekton-chains,...

OESA-2025-1167 etcd security update

%expand: Security Fixes: A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes...

SUSE-SU-2025:0590-1 Security update for netty, netty-tcnative

This update for netty, netty-tcnative fixes the following issues: - CVE-2025-24970: incorrect validation of packets by SslHandler can lead to a native crash. bsc1237037 - CVE-2025-25193: unsafe reading of environment files can lead to an application crash. bsc1237038 Update to netty version 4.1.1...

SUSE CVE-2024-9355

A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted...