GO-2025-4222 vulnerabilities

Vulnerabilities for packages: datadog-agent-fips, flannel, datadog-agent, podman, rootlesskit, flannel-fips, nerdctl, multus-cni, nerdctl-fips, docker, k3s, containerd-fips, containerd, kuma, istio, rke2-runtime, istio-fips, amazon-k8s-cni-fips, buildkitd-fips, calico-fips, rootlesskit-fips,...

GO-2025-4222 vulnerabilities

Vulnerabilities for packages: containerd, multus-cni, istio, rootlesskit, k3s, buildkitd, calico, buildah, azure-ipam, kuma, flannel, datadog-agent, docker, nerdctl, podman...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: kyverno, litestream, crossplane-provider-aws-sns, k3s, pgpool2exporter, libnvidia-container, cloud-provider-aws, dbmate, spire-server, zarf, grafana-mimir, nri-haproxy, kapp-controller, gitlab-pages, aws-efs-csi-driver, containerd, trufflehog,...

CLEANSTART-2026-RM33874 Security fixes in multus-cni-fips 4.3.0-r1

Package multus-cni-fips version 4.3.0-r1 fixes 1 vulnerabilities: CVE-2026-27145...

CLEANSTART-2026-TZ19908 Security fixes in multus-cni-fips 4.1.4-r4

Package multus-cni-fips version 4.1.4-r4 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...

CLEANSTART-2026-UW06838 Security fixes in multus-cni-fips 4.2.3-r1

Package multus-cni-fips version 4.2.3-r1 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...

CLEANSTART-2026-EL85268 Security fixes in multus-cni-fips 3.9.3-r2

Package multus-cni-fips version 3.9.3-r2 fixes 14 vulnerabilities: ghsa-v778-237x-gjrc, ghsa-3vm4-22fp-5rfm, ghsa-4374-p667-p6c8, ghsa-69cg-p879-7622, ghsa-69ch-w2m2-3vjp...

CLEANSTART-2026-SV56553 Security fixes in multus-cni-fips 4.0.2-r3

Package multus-cni-fips version 4.0.2-r3 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...

CLEANSTART-2026-EW68942 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the multus-cni-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-DD39330 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the multus-cni-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: mongo-tools, nri-discovery-kubernetes, conftest-fips, amazon-k8s-cni, db-operator, terraform-provider-azapi, kubecolor, packer, cluster-api-aws-controller, opentelemetry-collector, yace, docker-cli-buildx, authservice, k8sgpt, gatus, grafana-pyroscope,...

olcne security update

conmon 2.1.3-7 - Resolve CVE-2023-39325 2.1.3-6 - Add ol8baseoslatest, and ol9baseoslatest, to Jenkinsfile 2.1.3-5 - Add systemd-devel as build requirement 2.1.3-4 - Add support ARM build 2.1.3.3 - Add OL9 support 2.1.3.2 - Update inline with Linux team building conmon for all but OL7. cri-o...

kubernetes security update

kubernetes 1.25.11-1 - Added Oracle specific build files for Kubernetes olcne 1.6.2-1 - CVE-2023-2727, CVE-2023-2728 Kubernetes upgraded to 1.25.11 - Add all modules to registry-image-helper - update yq to 4.x 1.6.1-9 - Updated the CVE ID's in Istio-1.16.4 changelog entry 1.6.1-8 - Update Istio...