GO-2026-5039 vulnerabilities

Vulnerabilities for packages: act, nri-elasticsearch, kaniko, conjur-cli, helm-push, cri-tools, kbld, jaeger-operator, coredns, kube-state-metrics, cortex, kubernetes-csi-node-driver-registrar, crossplane, cert-manager, k3s, percona-server-mongodb-operator, kubernetes-csi-external-snapshotter, q,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: lvm-driver, conjur-cli, kbld, cri-tools, step, esbuild, nri-f5, verticadb-operator, cortex, kubernetes-csi-node-driver-registrar, percona-server-mongodb-operator, redis-operator, k3s, gatekeeper, ghaudit, xeol, crossplane-provider-aws-cloudformation,...

SUSE-SU-2026:22066-1 Security update for elemental-operator

This update for elemental-operator fixes the following issue - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header bsc1260277. Changes for elemental-operator: - Fix substitution - Fix reference in labels - Adapt labels to pass...

Security update for cosign

This update for cosign fixes the following issues: Update to version 3.0.5 jscSLE-23879. Security issues fixed: CVE-2025-11065: github.com/go-viper/mapstructure/v2: sensitive Information leak in logs bsc1250620. CVE-2025-58181: golang.org/x/crypto/ssh: invalidated number of mechanisms can cause...

[SECURITY] Fedora 43 Update: golangci-lint-2.7.1-1.fc43

Fast linters runner for Go...

Fedora 43 : golangci-lint (2025-cc4c533b49)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-cc4c533b49 advisory. Latest version - This build with the latest golang should also fix all the Go CVEs, although I did verify how/if this package is affected by these...

GHSA-FV92-FJC5-JJ9H vulnerabilities

Vulnerabilities for packages: gcsfuse, kube-state-metrics-fips, dagger, aws-otel-collector-fips, cloud-sql-proxy, argo-workflows-fips, timestamp-authority-fips, nri-prometheus, tkn-fips, k9s, podinfo, kyverno, mockery, trivy-operator, argo-events-fips, grafana-alloy, boring-registry, argo-events,...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : cosign (SUSE-SU-2025:1333-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1333-1 advisory. - CVE-2024-6104: cosign: hashicorp/go-retryablehttp: Fixed sensitive information disclosure to l...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: nri-elasticsearch, helm-push, cri-tools, esbuild, kube-state-metrics, nri-f5, cortex, q, k3s, grafana-operator, envoy-ratelimit, render-template, stakater-reloader, capslock, vite, volume-modifier-for-k8s, caddy, kubevela, protoc-gen-go-grpc, k3d, dex, go-bindata,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: kube-state-metrics-fips, grafana-agent-operator, timestamp-authority-fips, kube-state-metrics, haproxy-ingress, kaniko, timoni, flux-source-controller, kubernetes-dashboard-metrics-scraper-fips, kubernetes-dashboard, aws-efs-csi-driver-fips, melange,...

Fedora: Security Advisory for golang-github-golangci-lint-1 (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for golang-github-golangci-lint-1 (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...