CLEANSTART-2026-CC63706 Security fixes in certificate-transparency-trillian-ctserver 1.3.2-r0

Package certificate-transparency-trillian-ctserver version 1.3.2-r0 fixes 7 vulnerabilities: CVE-2025-61726, CVE-2025-61728, CVE-2025-61731, CVE-2025-68119, CVE-2025-61730...

Amazon Linux 2 : amazon-cloudwatch-agent, --advisory ALAS2-2026-3174 (ALAS-2026-3174)

The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300064.1-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3174 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...

Medium: amazon-ecr-credential-helper

Issue Overview: net/http: memory exhaustion in Request.ParseForm CVE-2025-61726 archive/zip: denial of service when parsing arbitrary ZIP archives CVE-2025-61728 crypto/tls: handshake messages may be processed at the incorrect encryption level CVE-2025-61730 crypto/tls: Config.Clone copies...

Medium: golist

Issue Overview: net/http: memory exhaustion in Request.ParseForm CVE-2025-61726 archive/zip: denial of service when parsing arbitrary ZIP archives CVE-2025-61728 crypto/tls: handshake messages may be processed at the incorrect encryption level CVE-2025-61730 crypto/tls: Config.Clone copies...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudfront, k3s, restic, wgcf, petname, opentofu, azcopy, swagger, hydra, step, custom-pod-autoscaler, linkerd2-proxy-init, cargobump, crossplane-provider-aws-ec2, timescaledb-parallel-copy, kubernetes-csi-external-provisioner, git-lfs,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: mockgen, helm-operator-fips, git-lfs, azurefile-csi-fips, confluent-cp-docker-utils, knative-operator-fips, nri-f5, docker-fips, kubernetes-release, crossplane-provider-aws-efs-fips, apache-exporter, govulncheck, step-fips, gitlab-runner,...

BELL-CVE-2025-61731

Bulletin has no description...

PT-2026-3230

Name of the Vulnerable Software and Affected Versions versions prior to TLS 1.3 Description A flaw exists in the TLS 1.3 handshake process where messages spanning encryption level boundaries can be processed prematurely. This can lead to minor information disclosure if a network-local attacker...