28 matches found
CLEANSTART-2026-SS34822 ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label
Multiple security vulnerabilities affect the metallb package. The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. See references for individual vulnerability details...
GO-2026-6094 vulnerabilities
Vulnerabilities for packages: hubble, pulumi-kubernetes-operator, datadog-agent, k3s, telegraf, rancher-system-agent, cluster-api-gcp-controller, apisix-ingress-controller, cluster-api-aws-controller, zot, cilium, helm-operator, flux-helm-controller, kapp-controller, cert-manager-webhook-pdns,...
GO-2024-2598 vulnerabilities
Vulnerabilities for packages: capslock, cue, nri-haproxy, goreleaser, vault-k8s, k8sgpt-operator, sbomqs, regclient, yq, flux-helm-controller, gh, gosu, nats, newrelic-prometheus-configurator, temporal-server, govulncheck, docker-credential-gcr, cass-operator, aws-flb-firehose, kaf,...
CLEANSTART-2026-KO15676 Security fixes in metallb 0.13.12-r4
Package metallb version 0.13.12-r4 fixes 2 vulnerabilities: CVE-2024-24786, ghsa-8r3f-844c-mc37...
CLEANSTART-2026-VY83992 Security fixes in metallb 0.16.1-r1
Package metallb version 0.16.1-r1 fixes 10 vulnerabilities: CVE-2026-39824, CVE-2026-25681, CVE-2026-27136, CVE-2026-42502, CVE-2026-42506...
CLEANSTART-2026-BK90625 Security fixes in metallb-fips 0.14.9-r1
Package metallb-fips version 0.14.9-r1 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...
CLEANSTART-2026-LM18792 Security fixes in metallb 0.14.9-r2
Package metallb version 0.14.9-r2 fixes 3 vulnerabilities: CVE-2026-42504, CVE-2026-27145, CVE-2026-42507...
CLEANSTART-2026-VY42311 Security fixes in metallb 0.14.9-r3
Package metallb version 0.14.9-r3 fixes 2 vulnerabilities: CVE-2025-22868, ghsa-6v2p-p543-phr9...
CLEANSTART-2026-NY13907 Security fixes in metallb 0.14.9-r0
Package metallb version 0.14.9-r0 fixes 10 vulnerabilities: CVE-2025-47912, CVE-2025-58183, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188...
GHSA-GCJH-H69Q-9W9G vulnerabilities
Vulnerabilities for packages: hubble, pulumi-kubernetes-operator, datadog-agent, k3s, telegraf, rancher-system-agent, cluster-api-gcp-controller, apisix-ingress-controller, cluster-api-aws-controller, zot, cilium, helm-operator, flux-helm-controller, kapp-controller, cert-manager-webhook-pdns,...
CLEANSTART-2026-SO47947 Security fixes for CVE-2025-47912, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61729, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-29181, CVE-2026-33186, CVE-2026-39821, CVE-2026-39824, CVE-2026-39883, CVE-2026-42502, CVE-2026-42506 applied in versions: 0.15.2-r0, 0.15.2-r1, 0.16.1-r1
Multiple security vulnerabilities affect the metallb package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-IC09970 Security fixes for CVE-2025-22868, CVE-2025-47912, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61729, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27145, CVE-2026-29181, CVE-2026-33186, CVE-2026-39821, CVE-2026-39824, CVE-2026-39883, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, ghsa-6v2p-p543-phr9 applied in versions: 0.14.9-r1, 0.14.9-r2, 0.14.9-r3, 0.15.2-r0, 0.15.2-r1, 0.16.1-r1
Multiple security vulnerabilities affect the metallb package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-JY65496 Security fixes for CVE-2025-47912, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61729, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-29181, CVE-2026-33186, CVE-2026-39821, CVE-2026-39824, CVE-2026-39883, CVE-2026-42502, CVE-2026-42506 applied in versions: 0.15.2-r0, 0.15.2-r1, 0.16.1-r1
Multiple security vulnerabilities affect the metallb package. These issues are resolved in later releases. See references for individual vulnerability details...
CVE-2026-25679 vulnerabilities
Vulnerabilities for packages: controller-gen, docker-credential-acr-env-fips, nri-redis-fips, k6-fips, nri-consul-fips, verticadb-operator-fips, cadvisor, azcopy-fips, falco-no-driver, opentelemetry-collector-fips, consul-k8s, crossplane-provider-aws-kms, ratify-fips, nri-f5-fips,...
CLEANSTART-2026-BJ28314 Within HostnameError
Multiple security vulnerabilities affect the metallb package. Within HostnameError. See references for individual vulnerability details...
CLEANSTART-2026-AJ76138 tar
Multiple security vulnerabilities affect the metallb package. tar. See references for individual vulnerability details...
CLEANSTART-2026-VF66781 Within HostnameError
Multiple security vulnerabilities affect the metallb package. Within HostnameError. See references for individual vulnerability details...
CLEANSTART-2026-EZ55127 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
Multiple security vulnerabilities affect the metallb-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...
GHSA-FGQ5-Q76C-GX78 vulnerabilities
Vulnerabilities for packages: capslock, cue, nri-haproxy, goreleaser, vault-k8s, k8sgpt-operator, sbomqs, regclient, yq, flux-helm-controller, gh, gosu, nats, newrelic-prometheus-configurator, temporal-server, govulncheck, docker-credential-gcr, cass-operator, aws-flb-firehose, kaf,...
olcne security update
conmon 2.1.3-7 - Resolve CVE-2023-39325 2.1.3-6 - Add ol8baseoslatest, and ol9baseoslatest, to Jenkinsfile 2.1.3-5 - Add systemd-devel as build requirement 2.1.3-4 - Add support ARM build 2.1.3.3 - Add OL9 support 2.1.3.2 - Update inline with Linux team building conmon for all but OL7. cri-o...