OPENSUSE-SU-2026:21611-1 Security update for apptainer

This update for apptainer fixes the following issues: Changes in apptainer: - Update github.com/moby/go-archive to v0.3.0 to fix CVE-2026-17106: The tar extraction routines in moby/go-archive do not confine filesystem operations to the destination directory. A crafted archive can create or...

ROOT-APP-GOBINARY-CVE-2026-56864 CVE-2026-56864 in golang.org/x/mod - Patched by Root

Root has patched CVE-2026-56864 in the golang.org/x/mod package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-56865 CVE-2026-56865 in golang.org/x/mod - Patched by Root

Root has patched CVE-2026-56865 in the golang.org/x/mod package for Root:Go. Multiple fixed versions available...

Security update for container-suseconnect

This update for container-suseconnect rebuilds it against the current go security release. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product: SUSE...

GO-2026-6191 vulnerabilities

Vulnerabilities for packages: telegraf...

GO-2026-6223 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-fips, kubeflow-pipelines, kubeflow-pipelines-driver-fips...

GO-2026-6114 vulnerabilities

Vulnerabilities for packages: kine, rancher-support-bundle-kit, dapr-fips, kcp, dapr, multicluster-controlplane-fips, multicluster-controlplane, milvus, kcp-fips...

GO-2026-6112 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-bedrock-fips, crossplane-provider-azure-managedidentity, crossplane-provider-aws-route53recoveryreadiness-fips, crossplane-provider-aws-grafana, crossplane-provider-aws-cognitoidentity-fips, crossplane-provider-aws-batch-fips,...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: agentbeat-fips, cluster-api-provider-vsphere, perses-fips, cloud-provider-aws, newrelic-k8s-metrics-adapter, eck-operator, cert-manager-istio-csr, ocm-kubernetes-controller-fips, cass-operator-fips-no-pvc-delete, cass-operator-fips, openfga,...

GO-2026-6213 vulnerabilities

Vulnerabilities for packages: kaniko-fips, coder-fips, packer-fips, flux, cerbos, grafana-alloy-fips, steampipe, redpanda-console, witness, kyverno, xeol, xeol-fips, flux-image-automation-controller-fips, src-fingerprint, gitlab-runner-fips, dagger, pulumi-language-yaml, mapotf-fips,...

GO-2026-6162 vulnerabilities

Vulnerabilities for packages: zot, trivy-operator, jfrog-cli, trivy-fips, skaffold-fips, falcoctl, kubescape, tekton-chains, spire-server, cosign, crossplane-fips, skaffold, tkn, policy-controller, goreleaser, policy-controller-fips, zarf-fips, kyverno, spire-server-fips, cloudbeat,...

GO-2026-5966 vulnerabilities

Vulnerabilities for packages: filebrowser...

GO-2026-6112 vulnerabilities

Vulnerabilities for packages: crossplane-provider-family-azure, crossplane-provider-aws-dynamodb, terraform-provider-grafana, crossplane-provider-aws-elasticache, kubevela, crossplane-provider-aws-cloudformation, crossplane-provider-azure-authorization, gitness, crossplane-provider-aws-s3,...

GO-2026-6238 vulnerabilities

Vulnerabilities for packages: cilium, splunk-otel-collector, witness, nerdctl, delve, k3s, kubescape, kuma, kubescape-operator, falcoctl, gitaly, hubble, hubble-ui, docker, containerd, vitess...

GO-2026-6237 vulnerabilities

Vulnerabilities for packages: kube-vip, cni-plugins...

Security update for go1.26 (important)

openSUSE security update: security update for go1.26 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21593-1 Rating: important References: bsc1255111 bsc1266609 bsc1275024 bsc1275025 bsc1275026 bsc1275028 bsc1275029 bsc1275032 bsc1275033 bsc1275034...

Security update for ctop (important)

openSUSE Security Update: Security update for ctop Announcement ID: openSUSE-SU-2026:0292-1 Rating: important References: 1248710 1257431 1265800 1266632 1267805 Cross-References: CVE-2022-21698 CVE-2024-45310 CVE-2026-10722 CVE-2026-33814 CVE-2026-39821 CVSS scores: CVE-2022-21698 SUSE: 7.5...

CVE-2026-76761

A vulnerability was identified in chenhg5 cc-connect up to 1.4.1. This affects the function shellExecCommand of the file core/engine.go of the component Management API. Such manipulation of the argument exec leads to os command injection. It is possible to launch the attack remotely. The exploit ...

CVE-2026-76760 chenhg5 cc-connect webhook.go authenticate code injection

A vulnerability was found in chenhg5 cc-connect up to 1.4.1. Affected by this vulnerability is the function Authenticate of the file core/webhook.go. The manipulation of the argument exec results in code injection. The attack may be performed from remote. The exploit has been made public and coul...

CVE-2026-14978

HashiCorp go-slug 0.4.0 through 0.18.2 could allow a local attacker to bypass .terraformignore exclusions and cause sensitive files to be included in Terraform slug uploads due to improper handling of Unicode normalization during path matching...