GO-2025-4222 vulnerabilities

Vulnerabilities for packages: datadog-agent-fips, rootlesskit-fips, flannel, containerd, istio-fips, azure-ipam, multus-cni-fips, multus-cni, buildah, nerdctl, istio, podman, buildkitd, amazon-k8s-cni-fips, calico-fips, nerdctl-fips, rootlesskit, containerd-fips, k3s, kuma, docker, rke2-runtime,...

GO-2025-4222 vulnerabilities

Vulnerabilities for packages: buildah, containerd, datadog-agent, calico, kuma, flannel, k3s, azure-ipam, buildkitd, docker, nerdctl, istio, podman, rootlesskit, multus-cni...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: opa-envoy, gitlab-runner, crossplane-provider-azure-storage, docker-cli-buildx, azure-workload-identity-webhook, nri-prometheus, vault-benchmark, crossplane-provider-aws-sns, argo-events, lazydocker, harbor, kubevela, ingress-nginx-controller,...

CLEANSTART-2026-RM33874 Security fixes in multus-cni-fips 4.3.0-r1

Package multus-cni-fips version 4.3.0-r1 fixes 1 vulnerabilities: CVE-2026-27145...

CLEANSTART-2026-TZ19908 Security fixes in multus-cni-fips 4.1.4-r4

Package multus-cni-fips version 4.1.4-r4 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...

CLEANSTART-2026-UW06838 Security fixes in multus-cni-fips 4.2.3-r1

Package multus-cni-fips version 4.2.3-r1 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...

CLEANSTART-2026-SV56553 Security fixes in multus-cni-fips 4.0.2-r3

Package multus-cni-fips version 4.0.2-r3 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...

CLEANSTART-2026-EW68942 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the multus-cni-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-DD39330 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the multus-cni-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: wave-fips, verticadb-operator, kubernetes-release, fq, gofumpt, gcp-compute-persistent-disk-csi-driver, kube-metrics-adapter, kubelet-csr-approver-fips, kubeflow-katib, node-feature-discovery-fips, rancher-fleet, crossplane-provider-azure, bazelisk, loki, prometheus,...

olcne security update

conmon 2.1.3-7 - Resolve CVE-2023-39325 2.1.3-6 - Add ol8baseoslatest, and ol9baseoslatest, to Jenkinsfile 2.1.3-5 - Add systemd-devel as build requirement 2.1.3-4 - Add support ARM build 2.1.3.3 - Add OL9 support 2.1.3.2 - Update inline with Linux team building conmon for all but OL7. cri-o...

kubernetes security update

kubernetes 1.25.11-1 - Added Oracle specific build files for Kubernetes olcne 1.6.2-1 - CVE-2023-2727, CVE-2023-2728 Kubernetes upgraded to 1.25.11 - Add all modules to registry-image-helper - update yq to 4.x 1.6.1-9 - Updated the CVE ID's in Istio-1.16.4 changelog entry 1.6.1-8 - Update Istio...