CLEANSTART-2026-CC63706 Security fixes in certificate-transparency-trillian-ctserver 1.3.2-r0

Package certificate-transparency-trillian-ctserver version 1.3.2-r0 fixes 7 vulnerabilities: CVE-2025-61726, CVE-2025-61728, CVE-2025-61731, CVE-2025-68119, CVE-2025-61730...

Amazon Linux 2 : amazon-cloudwatch-agent, --advisory ALAS2-2026-3174 (ALAS-2026-3174)

The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300064.1-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3174 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...

Medium: golist

Issue Overview: net/http: memory exhaustion in Request.ParseForm CVE-2025-61726 archive/zip: denial of service when parsing arbitrary ZIP archives CVE-2025-61728 crypto/tls: handshake messages may be processed at the incorrect encryption level CVE-2025-61730 crypto/tls: Config.Clone copies...

Medium: amazon-ecr-credential-helper

Issue Overview: net/http: memory exhaustion in Request.ParseForm CVE-2025-61726 archive/zip: denial of service when parsing arbitrary ZIP archives CVE-2025-61728 crypto/tls: handshake messages may be processed at the incorrect encryption level CVE-2025-61730 crypto/tls: Config.Clone copies...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: fluxcd-kustomize-mutating-webhook, azure-service-operator, x509-certificate-exporter, wuzz, goreleaser, tetragon, metallb, undock, pguser, step, docker-machine-driver-linode, azure-ipam, croc, tofu-controller, temporal-ui-server, spark-operator, kubeflow-pipelines,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: dask-gateway, teleport-operator-fips, argo-cd, http-echo, minio-operator, logstash-exporter-fips, x509-certificate-exporter, kyverno-policy-reporter-kyverno-plugin-fips, k6-operator, kubernetes-event-exporter-fips, local-path-provisioner, consul-fips,...

BELL-CVE-2025-61731

Bulletin has no description...

PT-2026-3230

Name of the Vulnerable Software and Affected Versions versions prior to TLS 1.3 Description A flaw exists in the TLS 1.3 handshake process where messages spanning encryption level boundaries can be processed prematurely. This can lead to minor information disclosure if a network-local attacker...