GO-2025-4222 vulnerabilities

Vulnerabilities for packages: nerdctl, containerd, k3s, flannel, istio-fips, rke2-runtime, flannel-fips, buildah, podman, datadog-agent-fips, kuma, amazon-k8s-cni-fips, rootlesskit-fips, istio, datadog-agent, docker, calico-fips, multus-cni-fips, buildkitd-fips, multus-cni, containerd-fips,...

GO-2025-4222 vulnerabilities

Vulnerabilities for packages: flannel, podman, nerdctl, azure-ipam, istio, rootlesskit, multus-cni, docker, buildah, kuma, calico, k3s, buildkitd, containerd, datadog-agent...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: spicedb-operator, gostatsd, newrelic-infra-operator, nova, stakater-reloader, docker-machine-driver-linode, migrate, cluster-api-ipam-provider-in-cluster, paranoia, db-operator, crossplane-provider-aws-kinesis, manifest-tool, litestream, kubernetes-event-exporter,...

CLEANSTART-2026-RM33874 Security fixes in multus-cni-fips 4.3.0-r1

Package multus-cni-fips version 4.3.0-r1 fixes 1 vulnerabilities: CVE-2026-27145...

CLEANSTART-2026-TZ19908 Security fixes in multus-cni-fips 4.1.4-r4

Package multus-cni-fips version 4.1.4-r4 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...

CLEANSTART-2026-UW06838 Security fixes in multus-cni-fips 4.2.3-r1

Package multus-cni-fips version 4.2.3-r1 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...

CLEANSTART-2026-SV56553 Security fixes in multus-cni-fips 4.0.2-r3

Package multus-cni-fips version 4.0.2-r3 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...

CLEANSTART-2026-EW68942 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the multus-cni-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-DD39330 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the multus-cni-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-13.1, container-object-storage-interface-fips, yam, nri-memcached, dragonfly-operator, wave-fips, vault-env, rke2-cloud-provider, promxy-fips, azure-aad-pod-identity-mic, ytt, temporal-ui-server-fips, local-path-provisioner-fips, blob-csi,...

olcne security update

conmon 2.1.3-7 - Resolve CVE-2023-39325 2.1.3-6 - Add ol8baseoslatest, and ol9baseoslatest, to Jenkinsfile 2.1.3-5 - Add systemd-devel as build requirement 2.1.3-4 - Add support ARM build 2.1.3.3 - Add OL9 support 2.1.3.2 - Update inline with Linux team building conmon for all but OL7. cri-o...

kubernetes security update

kubernetes 1.25.11-1 - Added Oracle specific build files for Kubernetes olcne 1.6.2-1 - CVE-2023-2727, CVE-2023-2728 Kubernetes upgraded to 1.25.11 - Add all modules to registry-image-helper - update yq to 4.x 1.6.1-9 - Updated the CVE ID's in Istio-1.16.4 changelog entry 1.6.1-8 - Update Istio...