CLEANSTART-2026-BK90625 Security fixes in metallb-fips 0.14.9-r1

Package metallb-fips version 0.14.9-r1 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-eks, cert-exporter-fips, volume-modifier-for-k8s, addon-resizer, lvm-driver-fips, neuvector, backup-restore-operator, boring-registry, gcp-compute-persistent-disk-csi-driver, kyverno-policy-reporter-plugins-trivy,...

CLEANSTART-2026-EZ55127 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the metallb-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...