Security update for trivy (important)

openSUSE Security Update: Security update for trivy Announcement ID: openSUSE-SU-2026:0335-1 Rating: important References: 1258543 1276745 1278002 1278624 1278702 1279390 1279392 1279395 1280111 Cross-References: CVE-2026-24122 CVE-2026-37236 CVE-2026-41178 CVE-2026-50163 CVE-2026-53495...

CVE-2026-84303 vulnerabilities

Vulnerabilities for packages: lvm-driver, kuma, commercial-nginx-ingress, trillian, blob-csi, cloud-provider-vsphere, gitlab-runner, istio, vcluster, litestream, datadog-agent, cloud-provider-azure-fips, kubeflow, commercial-grafana, secrets-store-csi-driver-provider-azure, volcano-fips,...

CVE-2026-84303 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, rancher-agent, grafana-mimir, tekton-pipelines, kubeflow-pipelines, calico, datadog-agent, kuma, kubescape-operator, kserve, cloudflared, opentofu, gitlab-runner, k8ssandra-client, smarter-device-manager, argo-cd, dapr,...

distribution-registry-3.1.1-6.1 on GA media (moderate)

distribution-registry-3.1.1-6.1 on GA media Announcement ID: openSUSE-SU-2026:11697-1 Rating: moderate Cross-References: CVE-2026-37236 CVE-2026-84303 CVE-2026-84304 CVE-2026-84445 CVSS scores: CVE-2026-37236 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVE-2026-37236 SUSE : 6.3...

DEBIAN-CVE-2026-84303

gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, the xDS RBAC HTTP filter in internal/xds/httpfilter/rbac/rbac.go does not lowercase header matcher names in normalizeHeaderMatcher even though incoming metadata keys are lowercase. A DENY policy using a mixed-case name such as...