28 matches found
CLEANSTART-2026-SS34822 ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label
Multiple security vulnerabilities affect the metallb package. The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. See references for individual vulnerability details...
GO-2026-6094 vulnerabilities
Vulnerabilities for packages: emissary, cert-manager, crossplane, tekton-pipelines, cluster-api-ipam-provider-in-cluster, cilium, keda, gatekeeper, kubernetes-csi-external-snapshotter, kots, cluster-api-gcp-controller, node-feature-discovery, tkn, spicedb, flux-notification-controller,...
GO-2024-2598 vulnerabilities
Vulnerabilities for packages: smarter-device-manager, spark-operator, buildkitd, dgraph, configmap-reload, helm, vt-cli, aws-flb-firehose, skaffold, mongo-tools, pulumi-language-java, esbuild, k8sgpt, go-bindata, nri-nginx, sonobuoy, kube-bench, temporal-server, kubewatch, flux-helm-controller,...
CLEANSTART-2026-KO15676 Security fixes in metallb 0.13.12-r4
Package metallb version 0.13.12-r4 fixes 2 vulnerabilities: CVE-2024-24786, ghsa-8r3f-844c-mc37...
CLEANSTART-2026-VY83992 Security fixes in metallb 0.16.1-r1
Package metallb version 0.16.1-r1 fixes 10 vulnerabilities: CVE-2026-39824, CVE-2026-25681, CVE-2026-27136, CVE-2026-42502, CVE-2026-42506...
CLEANSTART-2026-BK90625 Security fixes in metallb-fips 0.14.9-r1
Package metallb-fips version 0.14.9-r1 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...
CLEANSTART-2026-LM18792 Security fixes in metallb 0.14.9-r2
Package metallb version 0.14.9-r2 fixes 3 vulnerabilities: CVE-2026-42504, CVE-2026-27145, CVE-2026-42507...
CLEANSTART-2026-VY42311 Security fixes in metallb 0.14.9-r3
Package metallb version 0.14.9-r3 fixes 2 vulnerabilities: CVE-2025-22868, ghsa-6v2p-p543-phr9...
CLEANSTART-2026-NY13907 Security fixes in metallb 0.14.9-r0
Package metallb version 0.14.9-r0 fixes 10 vulnerabilities: CVE-2025-47912, CVE-2025-58183, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188...
GHSA-GCJH-H69Q-9W9G vulnerabilities
Vulnerabilities for packages: emissary, cert-manager, crossplane, tekton-pipelines, cluster-api-ipam-provider-in-cluster, cilium, keda, gatekeeper, kubernetes-csi-external-snapshotter, kots, cluster-api-gcp-controller, node-feature-discovery, tkn, spicedb, flux-notification-controller,...
CLEANSTART-2026-SO47947 Security fixes for CVE-2025-47912, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61729, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-29181, CVE-2026-33186, CVE-2026-39821, CVE-2026-39824, CVE-2026-39883, CVE-2026-42502, CVE-2026-42506 applied in versions: 0.15.2-r0, 0.15.2-r1, 0.16.1-r1
Multiple security vulnerabilities affect the metallb package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-IC09970 Security fixes for CVE-2025-22868, CVE-2025-47912, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61729, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27145, CVE-2026-29181, CVE-2026-33186, CVE-2026-39821, CVE-2026-39824, CVE-2026-39883, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, ghsa-6v2p-p543-phr9 applied in versions: 0.14.9-r1, 0.14.9-r2, 0.14.9-r3, 0.15.2-r0, 0.15.2-r1, 0.16.1-r1
Multiple security vulnerabilities affect the metallb package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-JY65496 Security fixes for CVE-2025-47912, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61729, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-29181, CVE-2026-33186, CVE-2026-39821, CVE-2026-39824, CVE-2026-39883, CVE-2026-42502, CVE-2026-42506 applied in versions: 0.15.2-r0, 0.15.2-r1, 0.16.1-r1
Multiple security vulnerabilities affect the metallb package. These issues are resolved in later releases. See references for individual vulnerability details...
CVE-2026-25679 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-route53, crossplane-provider-family-aws, snyk-cli, longhorn-cli-fips, beats-fips, prometheus-mysqld-exporter-fips, commercial-expanso-edge, aws-iam-authenticator-fips, docker-compose, helm-diff-fips, secretgen-controller-fips, k6-fips,...
CLEANSTART-2026-BJ28314 Within HostnameError
Multiple security vulnerabilities affect the metallb package. Within HostnameError. See references for individual vulnerability details...
CLEANSTART-2026-AJ76138 tar
Multiple security vulnerabilities affect the metallb package. tar. See references for individual vulnerability details...
CLEANSTART-2026-VF66781 Within HostnameError
Multiple security vulnerabilities affect the metallb package. Within HostnameError. See references for individual vulnerability details...
CLEANSTART-2026-EZ55127 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
Multiple security vulnerabilities affect the metallb-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...
GHSA-FGQ5-Q76C-GX78 vulnerabilities
Vulnerabilities for packages: smarter-device-manager, spark-operator, buildkitd, dgraph, configmap-reload, helm, vt-cli, aws-flb-firehose, skaffold, mongo-tools, pulumi-language-java, esbuild, k8sgpt, go-bindata, nri-nginx, sonobuoy, kube-bench, temporal-server, kubewatch, flux-helm-controller,...
olcne security update
conmon 2.1.3-7 - Resolve CVE-2023-39325 2.1.3-6 - Add ol8baseoslatest, and ol9baseoslatest, to Jenkinsfile 2.1.3-5 - Add systemd-devel as build requirement 2.1.3-4 - Add support ARM build 2.1.3.3 - Add OL9 support 2.1.3.2 - Update inline with Linux team building conmon for all but OL7. cri-o...