CVE-2024-35311

Yubico YubiKey 5 Series before 5.7.0, Security Key Series before 5.7.0, YubiKey Bio Series before 5.6.4, and YubiKey 5 FIPS before 5.7.2 have Incorrect Access Control...

GHSA-JGFP-53C3-624W vulnerabilities

Vulnerabilities for packages: local-static-provisioner, argocd-image-updater, nodetaint, node-feature-discovery, argo-cd-fips, yunikorn-k8shim, azuredisk-csi-fips, kubernetes-dns-node-cache, spark-operator-fips, argo-cd, azuredisk-csi, kubernetes-csi-driver-nfs, emissary, vcluster, calico-fips,...

GHSA-Q9W6-CWJ4-GF4P vulnerabilities

Vulnerabilities for packages: temporal-server, temporal-ui-server-fips, temporal-ui-server, temporal-fips, temporal, temporal-server-fips...

openssl security update

3.2.2-6.0.1.1 - Enable openssl-fips-provider dependency Orabug: 36504822 - Temporary disable openssl-fips-provider dependency Orabug: 36504822 - Replace upstream references Orabug: 34340177 1:3.2.2-6.1 - RFC7250 handshakes with unauthenticated servers don't abort as expected CVE-2024-12797...

SUSE SLED15: crypto-policies / crypto-policies-scripts / krb5 / krb5-32bit / etc (SUSE-SU-2025:0401-1)

"The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0401-1 advisory. Security issue fixed: - CVE-2025-24528: Fixed out-of-bounds write caused by overflow when calculating ul...

AZL-78591 CVE-2024-12797 affecting package openssl-fips-provider 3.1.2-1

Issue summary: Clients using RFC7250 Raw Public Keys RPKs to authenticate a server may fail to notice that the server was not authenticated, because handshakes don't abort as expected when the SSLVERIFYPEER verification mode is set. Impact summary: TLS and DTLS connections using raw public keys m...

CVE-2024-11831 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, arangodb, opensearch-dashboards-fips, drupal...

Security update for crypto-policies, krb5

This update for crypto-policies and krb5 fixes the following issues: Security issue fixed: CVE-2025-24528: Fixed out-of-bounds write caused by overflow when calculating ulog block size can lead to process crash bsc1236619. Feature addition: Add crypto-policies support; jscPED-12018 The default...

SUSE-SU-2025:0401-1 Security update for crypto-policies, krb5

This update for crypto-policies and krb5 fixes the following issues: Security issue fixed: - CVE-2025-24528: Fixed out-of-bounds write caused by overflow when calculating ulog block size can lead to process crash bsc1236619. Feature addition: - Add crypto-policies support; jscPED-12018 The defaul...

Azure Linux 3.0 Security Update: golang (CVE-2024-9355)

The version of golang installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-9355 advisory. - A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an...

CVE-2024-49840

Memory corruption while Invoking IOCTL calls from user-space to validate FIPS encryption or decryption functionality...

AWS VDP: Amazon Comprehend Medical Service Reporting "AWS Internal" for CloudTrail Events Generated from FIPS Endpoints

The Comprehend Medical service was found to have 8 API endpoints that incorrectly reported the user-agent and network information as "AWS Internal" in CloudTrail event logs. This behavior was observed specifically for FIPS endpoints, which may have been an intentional design decision. The...

CVE-2024-45548

Memory corruption while processing FIPS encryption or decryption validation functionality IOCTL call...

CVE-2024-45546

Memory corruption while processing FIPS encryption or decryption IOCTL call invoked from user-space...

CVE-2024-49840

Memory corruption while Invoking IOCTL calls from user-space to validate FIPS encryption or decryption functionality...

CVE-2024-49840

CVE-2024-49840 is described as a memory corruption issue in Qualcomm chipsets that occurs when user-space IOCTL calls are used to validate FIPS encryption/decryption. The affected component is the Qualcomm chipset stack; the underlying cause is memory corruption triggered during IOCTL invocation....

CVE-2024-49840 Use of Out-of-range Pointer Offset in WLAN Windows Host

Memory corruption while Invoking IOCTL calls from user-space to validate FIPS encryption or decryption functionality...

CVE-2024-49840 Use of Out-of-range Pointer Offset in WLAN Windows Host

Memory corruption while Invoking IOCTL calls from user-space to validate FIPS encryption or decryption functionality...

Security update for openssl-3, libpulp, ulp-macros

This update for openssl-3, libpulp, ulp-macros fixes the following issues: openssl-3: - CVE-2024-6119: possible denial of service in X.509 name checks bsc1229465 - CVE-2024-5535: SSLselectnextproto buffer overread bsc1227138 - CVE-2024-4741: Fixed a use-after-free with SSLfreebuffers bsc1225551...

SUSE-SU-2025:20014-1 Security update for openssl-3, libpulp, ulp-macros

This update for openssl-3, libpulp, ulp-macros fixes the following issues: openssl-3: - CVE-2024-6119: possible denial of service in X.509 name checks bsc1229465 - CVE-2024-5535: SSLselectnextproto buffer overread bsc1227138 - CVE-2024-4741: Fixed a use-after-free with SSLfreebuffers bsc1225551 -...