SUSE-SU-2026:1013-1 Security update 5.0.7 for Multi-Linux Manager Client Tools

This update fixes the following issues: dracut-saltboot: - Version update to 1.1.0: Retry DHCP requests up to 3 times bsc1253004 golang-github-QubitProducts-exporterexporter: - Non-customer-facing optimization and update golang-github-boynux-squidexporter: - Version update from 1.6.0 to 1.13.0 wi...

Security update 5.0.7 for Multi-Linux Manager Client Tools

This update fixes the following issues: golang-github-QubitProducts-exporterexporter: Non-customer-facing optimization and update golang-github-boynux-squidexporter: Version update from 1.6.0 to 1.13.0 with the following highlighted changes and fixes jscPED-14971: Added compatibility for Squid 6...

SUSE-SU-2026:1011-1 Security update 5.0.7 for Multi-Linux Manager Client Tools

This update fixes the following issues: golang-github-QubitProducts-exporterexporter: - Non-customer-facing optimization and update golang-github-boynux-squidexporter: - Version update from 1.6.0 to 1.13.0 with the following highlighted changes and fixes jscPED-14971: Added compatibility for Squi...

CVE-2026-32040

OpenClaw versions prior to 2026.2.23 contain an html injection vulnerability in the HTML session exporter that allows attackers to execute arbitrary javascript by injecting malicious mimeType values in image content blocks. Attackers can craft session entries with specially crafted mimeType...

CVE-2026-32040

OpenClaw contains an html injection vulnerability in the HTML session exporter for versions prior to 2026.2.23. The issue arises from unvalidated mimeType values in image content blocks inside data-URL contexts, which can break out of the img src data-URL and enable cross-site scripting when the ...

CVE-2026-32040 OpenClaw < 2026.2.23 - HTML Injection via Unvalidated Image MIME Type in Data-URL Interpolation

OpenClaw versions prior to 2026.2.23 contain an html injection vulnerability in the HTML session exporter that allows attackers to execute arbitrary javascript by injecting malicious mimeType values in image content blocks. Attackers can craft session entries with specially crafted mimeType...

EUVD-2026-13328

OpenClaw versions prior to 2026.2.23 contain an html injection vulnerability in the HTML session exporter that allows attackers to execute arbitrary javascript by injecting malicious mimeType values in image content blocks. Attackers can craft session entries with specially crafted mimeType...

CVE-2026-32040

OpenClaw versions prior to 2026.2.23 contain an html injection vulnerability in the HTML session exporter that allows attackers to execute arbitrary javascript by injecting malicious mimeType values in image content blocks. Attackers can craft session entries with specially crafted mimeType...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: azure-ipam, nri-apache, configmap-reload, rancher-helm, crossplane-provider-aws-dynamodb, timestamp-authority, falcoctl, crossplane-provider-aws-s3, coredns, crossplane-provider-aws-memorydb, nri-postgresql, nova, nri-nginx, kapp-controller,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: azure-ipam, nri-apache, configmap-reload, rancher-helm, crossplane-provider-aws-dynamodb, timestamp-authority, falcoctl, crossplane-provider-aws-s3, coredns, crossplane-provider-aws-memorydb, nri-postgresql, nova, nri-nginx, kapp-controller,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: azure-ipam, nri-apache, configmap-reload, rancher-helm, crossplane-provider-aws-dynamodb, timestamp-authority, falcoctl, crossplane-provider-aws-s3, coredns, crossplane-provider-aws-memorydb, nri-postgresql, nova, nri-nginx, kapp-controller,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: ceph-csi-operator, mcp-grafana-fips, secrets-store-csi-driver-provider-gcp-fips, grafana-mimir, sriov-network-device-plugin-fips, terraform-provider-azapi-fips, steampipe, rancher, metrics-server-fips, blob-csi-fips, cluster-api-gcp-controller-fips, kubeflow-katib,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: cluster-proportional-autoscaler, sbom-convert, ceph-csi-operator, mcp-grafana-fips, pgtimetable, custom-pod-autoscaler-fips, grafana-mimir, secrets-store-csi-driver-provider-gcp-fips, sriov-network-device-plugin-fips, terraform-provider-azapi-fips, pushprox-fips,...

CLEANSTART-2026-JZ91219 Within HostnameError

Security vulnerability affects the prometheus-redis-exporter package. Within HostnameError...

CLEANSTART-2026-DT66006 Within HostnameError

Security vulnerability affects the prometheus-redis-exporter package. Within HostnameError...

Important: Red Hat Security Advisory: Red Hat build of OpenTelemetry 3.9.0 release

Red Hat build of OpenTelemetry 3.9.0 has been released This release of the Red Hat build of OpenTelemetry provides new features, security improvements, and bug fixes. Breaking changes: The deprecated OpenCensus Receiver, which provided backward compatibility with the OpenCensus project for easier...

Security update 5.1.2 for Multi-Linux Manager Client Tools

This update fixes the following issues: dracut-saltboot: Update to version 1.1.0 Retry DHCP requests up to 3 times bsc1253004 golang-github-QubitProducts-exporterexporter: Non-customer-facing optimization around source building golang-github-boynux-squidexporter: Update to version 1.13.0...

SUSE-SU-2026:0630-1 Security update 5.1.2 for Multi-Linux Manager Client Tools

This update fixes the following issues: dracut-saltboot: - Update to version 1.1.0 Retry DHCP requests up to 3 times bsc1253004 golang-github-QubitProducts-exporterexporter: - Non-customer-facing optimization around source building golang-github-boynux-squidexporter: - Update to version 1.13.0...

Security update 5.1.2 for Multi-Linux Manager Client Tools

This update fixes the following issues: golang-github-QubitProducts-exporterexporter: Non-customer-facing optimization around source building golang-github-boynux-squidexporter: Update to version 1.13.0 jscPED-14971 Add support for squid-internal-mgr path for metrics. Update to version 1.12.0 Add...

SUSE-SU-2026:0628-1 Security update 5.1.2 for Multi-Linux Manager Client Tools

This update fixes the following issues: golang-github-QubitProducts-exporterexporter: - Non-customer-facing optimization around source building golang-github-boynux-squidexporter: - Update to version 1.13.0 jscPED-14971 - Add support for squid-internal-mgr path for metrics. - Update to version...