SUSE-SU-2025:20199-1 Security update for pam_pkcs11

This update for pampkcs11 fixes the following issues: - CVE-2025-24031: Fixed segmentation fault on ctrl-c/ctrl-d when asked for PIN bsc1237058. - CVE-2025-24032: Fixed authentication bypass with default value for certpolicy none bsc1237062...

CVE-2022-3114

creationtimestamp| type| source ---|---|--- 2025-04-22 14:03:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12840 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2025-37860

creationtimestamp| type| source ---|---|--- 2025-04-18 07:59:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12407 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/ 2026-04-07 18:00:00+00:00| seen|...

Security update for cosign

This update for cosign fixes the following issues: CVE-2024-6104: cosign: hashicorp/go-retryablehttp: Fixed sensitive information disclosure to log file bsc1227031 CVE-2024-51744: cosign: github.com/golang-jwt/jwt/v4: Fixed bad documentation of error handling in ParseWithClaims leading to...

AZL-60528 CVE-2025-22872 affecting package cert-manager for versions less than 1.12.15-4

The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content...

AZL-60472 CVE-2025-22872 affecting package cert-manager for versions less than 1.11.2-23

The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content...

CVE-2025-23133

creationtimestamp| type| source ---|---|--- 2025-04-16 17:43:37+00:00| seen| https://t.me/cvedetector/23115 2025-05-04 13:18:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14801 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2025-23132

creationtimestamp| type| source ---|---|--- 2025-04-16 17:43:36+00:00| seen| https://t.me/cvedetector/23114 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen|...

CVE-2025-22022

creationtimestamp| type| source ---|---|--- 2025-04-16 13:31:28+00:00| seen| https://t.me/cvedetector/23075 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-01-11 18:01:52+00:00| seen|...

Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in cert-manager

Summary IBM watsonx Orchestrate Cartridge contains a vulnerable version of cert-manager. Vulnerability Details CVEID:CVE-2024-36537 DESCRIPTION: cert-manager could allow a remote authenticated attacker to gain elevated privileges on the system, caused by an insecure permissions flaw. By obtaining...

CVE-2025-32387 vulnerabilities

Vulnerabilities for packages: flux, chart-testing, pluto, zot, rancher-helm, kubescape, cilium-cli, cluster-api-helm-controller, helm-push, zarf, k9s, flux-source-controller, k8ssandra-client, helm-operator, eksctl, trivy, chartmuseum, helm-docs, cert-manager-cmctl, kots, tw, flux-helm-controller...

GHSA-4HFP-H4CW-HJ8P vulnerabilities

Vulnerabilities for packages: flux, chart-testing, pluto, zot, rancher-helm, kubescape, cilium-cli, cluster-api-helm-controller, helm-push, zarf, k9s, flux-source-controller, k8ssandra-client, helm-operator, eksctl, trivy, chartmuseum, helm-docs, cert-manager-cmctl, kots, tw, flux-helm-controller...

CVE-2025-32386 vulnerabilities

Vulnerabilities for packages: flux, chart-testing, pluto, zot, rancher-helm, kubescape, cilium-cli, cluster-api-helm-controller, helm-push, zarf, k9s, flux-source-controller, k8ssandra-client, helm-operator, eksctl, trivy, chartmuseum, helm-docs, cert-manager-cmctl, kots, tw, flux-helm-controller...

GHSA-5XQW-8HWV-WG92 vulnerabilities

Vulnerabilities for packages: flux, chart-testing, pluto, zot, rancher-helm, kubescape, cilium-cli, cluster-api-helm-controller, helm-push, zarf, k9s, flux-source-controller, k8ssandra-client, helm-operator, eksctl, trivy, chartmuseum, helm-docs, cert-manager-cmctl, kots, tw, flux-helm-controller...

CVE-2025-32387 vulnerabilities

Vulnerabilities for packages: zarf, helm-push, flux-fips, chart-testing, cluster-api-helm-controller, consul-k8s, pluto, trivy-fips, k8ssandra-client, chart-testing-fips, harbor-fips, consul-k8s-fips, flux-source-controller-fips, harbor, cert-manager-cmctl-fips, flux, kubescape, helm-operator-fip...

CVE-2025-32386 vulnerabilities

Vulnerabilities for packages: zarf, helm-push, flux-fips, chart-testing, cluster-api-helm-controller, consul-k8s, pluto, trivy-fips, k8ssandra-client, chart-testing-fips, harbor-fips, consul-k8s-fips, flux-source-controller-fips, harbor, cert-manager-cmctl-fips, flux, kubescape, helm-operator-fip...

GHSA-4HFP-H4CW-HJ8P vulnerabilities

Vulnerabilities for packages: zarf, helm-push, flux-fips, chart-testing, cluster-api-helm-controller, consul-k8s, pluto, trivy-fips, k8ssandra-client, chart-testing-fips, harbor-fips, consul-k8s-fips, flux-source-controller-fips, harbor, cert-manager-cmctl-fips, flux, kubescape, helm-operator-fip...

CVE-2024-51744 affecting package cert-manager for versions less than 1.11.2-22

CVE-2024-51744 affecting package cert-manager for versions less than 1.11.2-22. A patched version of the package is available...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: velero-plugin-for-microsoft-azure, cni-plugins, grype, kafkaexporter, kubernetes-csi-driver-nfs, fluent-operator, prometheus, restic, kubewatch, fulcio, helm-push, tempo, kubernetes-csi-external-attacher, step-kms-plugin, litestream, flannel-cni-plugin,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: velero-plugin-for-microsoft-azure, cni-plugins, grype, kafkaexporter, kubernetes-csi-driver-nfs, fluent-operator, prometheus, restic, kubewatch, fulcio, helm-push, tempo, kubernetes-csi-external-attacher, step-kms-plugin, litestream, flannel-cni-plugin,...