CLEANSTART-2026-CC63706 Security fixes in certificate-transparency-trillian-ctserver 1.3.2-r0

Package certificate-transparency-trillian-ctserver version 1.3.2-r0 fixes 7 vulnerabilities: CVE-2025-61726, CVE-2025-61728, CVE-2025-61731, CVE-2025-68119, CVE-2025-61730...

Amazon Linux 2 : amazon-cloudwatch-agent, --advisory ALAS2-2026-3174 (ALAS-2026-3174)

The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300064.1-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3174 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...

Medium: amazon-ecr-credential-helper

Issue Overview: net/http: memory exhaustion in Request.ParseForm CVE-2025-61726 archive/zip: denial of service when parsing arbitrary ZIP archives CVE-2025-61728 crypto/tls: handshake messages may be processed at the incorrect encryption level CVE-2025-61730 crypto/tls: Config.Clone copies...

Medium: golist

Issue Overview: net/http: memory exhaustion in Request.ParseForm CVE-2025-61726 archive/zip: denial of service when parsing arbitrary ZIP archives CVE-2025-61728 crypto/tls: handshake messages may be processed at the incorrect encryption level CVE-2025-61730 crypto/tls: Config.Clone copies...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: hubble, langfuse, flux-kustomize-controller, kubernetes-event-exporter, dbmate, wire-go, mods, undock, scorecard, terraform, kubernetes-csi-external-resizer, aws-flb-kinesis, terraform-docs, aws-eks-pod-identity-agent, cluster-autoscaler, gitleaks, src-fingerprint,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: prometheus-elasticsearch-exporter-fips, terraform-provider-sendgrid-fips, gitlab-rails-ce-fips, helm-docs, nrdot-collector-k8s, prometheus-alertmanager-fips, agentbeat-fips, grafana-pyroscope, kuberay-operator-fips, cis-operator, nats-top, gogatekeeper,...

BELL-CVE-2025-61731

Bulletin has no description...

PT-2026-3230

Name of the Vulnerable Software and Affected Versions versions prior to TLS 1.3 Description A flaw exists in the TLS 1.3 handshake process where messages spanning encryption level boundaries can be processed prematurely. This can lead to minor information disclosure if a network-local attacker...