CLEANSTART-2026-CC63706 Security fixes in certificate-transparency-trillian-ctserver 1.3.2-r0

Package certificate-transparency-trillian-ctserver version 1.3.2-r0 fixes 7 vulnerabilities: CVE-2025-61726, CVE-2025-61728, CVE-2025-61731, CVE-2025-68119, CVE-2025-61730...

Amazon Linux 2 : amazon-cloudwatch-agent, --advisory ALAS2-2026-3174 (ALAS-2026-3174)

The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300064.1-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3174 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...

Medium: amazon-ecr-credential-helper

Issue Overview: net/http: memory exhaustion in Request.ParseForm CVE-2025-61726 archive/zip: denial of service when parsing arbitrary ZIP archives CVE-2025-61728 crypto/tls: handshake messages may be processed at the incorrect encryption level CVE-2025-61730 crypto/tls: Config.Clone copies...

Medium: golist

Issue Overview: net/http: memory exhaustion in Request.ParseForm CVE-2025-61726 archive/zip: denial of service when parsing arbitrary ZIP archives CVE-2025-61728 crypto/tls: handshake messages may be processed at the incorrect encryption level CVE-2025-61730 crypto/tls: Config.Clone copies...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-attacher, clickhouse-operator, cass-operator, gcp-compute-persistent-disk-csi-driver, sftpgo-plugin-geoipfilter, flux-image-automation-controller, hivemind, eksctl, azure-service-operator, sftpgo-plugin-kms, secrets-store-csi-driver,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: dask-gateway, chart-testing, crossplane-provider-azure-sql, kbld-fips, flux-source-controller-fips, kine, cfssl, aws-flb-kinesis-fips, request-1279-14, cargobump, kubernetes-dashboard, secretgen-controller-fips, step-fips, authservice-fips, prometheus-beat-exporter,...

BELL-CVE-2025-61731

Bulletin has no description...

PT-2026-3230

Name of the Vulnerable Software and Affected Versions versions prior to TLS 1.3 Description A flaw exists in the TLS 1.3 handshake process where messages spanning encryption level boundaries can be processed prematurely. This can lead to minor information disclosure if a network-local attacker...