OPENSUSE-SU-2025:20073-1 Security update for alloy

This update for alloy fixes the following issues: - CVE-2025-58058: Removed dependency on vulnerable github.com/ulikunitz/xz bsc1248960. - CVE-2025-11065: Fixed sensitive information leak in logs bsc1250621...

SUSE-SU-2025:21137-1 Security update for alloy

This update for alloy fixes the following issues: - CVE-2025-58058: Removed dependency on vulnerable github.com/ulikunitz/xz bsc1248960. - CVE-2025-11065: Fixed sensitive information leak in logs bsc1250621...

CVE-2025-63811 vulnerabilities

Vulnerabilities for packages: jitsucom-bulker, sqlexporter, cluster-api-aws-controller, argo-events, opentelemetry-collector-contrib, splunk-otel-collector, amazon-cloudwatch-agent, grafana-alloy, bento...

GHSA-9MJ6-HXHV-W67J vulnerabilities

Vulnerabilities for packages: jitsucom-bulker, sqlexporter, cluster-api-aws-controller, argo-events, opentelemetry-collector-contrib, splunk-otel-collector, amazon-cloudwatch-agent, grafana-alloy, bento...

CVE-2025-63811 vulnerabilities

Vulnerabilities for packages: argo-events-fips, splunk-otel-collector-fips, dapr-fips, bento, opentelemetry-collector-contrib, amazon-cloudwatch-agent-fips, sqlexporter-fips, cluster-api-aws-controller, grafana-alloy, cluster-api-aws-controller-fips, splunk-otel-collector, argo-events,...

GHSA-9MJ6-HXHV-W67J vulnerabilities

Vulnerabilities for packages: argo-events-fips, splunk-otel-collector-fips, dapr-fips, bento, opentelemetry-collector-contrib, amazon-cloudwatch-agent-fips, sqlexporter-fips, cluster-api-aws-controller, grafana-alloy, cluster-api-aws-controller-fips, splunk-otel-collector, argo-events,...

SUSE SLED15 / SLES15 Security Update : alloy (SUSE-SU-2025:4121-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4121-1 advisory. - update to 1.11.3: - CVE-2025-58058: Fixed memory leaks in xz. bsc1248960 - CVE-2025-11065: Fixed sensitive...

SUSE-SU-2025:4121-1 Security update for alloy

This update for alloy fixes the following issues: - update to 1.11.3: - CVE-2025-58058: Fixed memory leaks in xz. bsc1248960 - CVE-2025-11065: Fixed sensitive Information leak in logs. bsc1250621...

Security update for alloy

This update for alloy fixes the following issues: update to 1.11.3: CVE-2025-58058: Fixed memory leaks in xz. bsc1248960 CVE-2025-11065: Fixed sensitive Information leak in logs. bsc1250621 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

GHSA-9493-H29P-RFM2 vulnerabilities

Vulnerabilities for packages: k3s, kubernetes, sriov-network-device-plugin, podman, grafana-alloy, nvidia-container-toolkit, buildah, node-feature-discovery, falco-no-driver...

GHSA-QW9X-CQR3-WC7R vulnerabilities

Vulnerabilities for packages: k3s, kubernetes, sriov-network-device-plugin, podman, grafana-alloy, nvidia-container-toolkit, buildah, node-feature-discovery, falco-no-driver...

CVE-2025-31133 vulnerabilities

Vulnerabilities for packages: k3s, kubernetes, sriov-network-device-plugin, podman, grafana-alloy, nvidia-container-toolkit, buildah, node-feature-discovery, falco-no-driver...

CVE-2025-52565 vulnerabilities

Vulnerabilities for packages: k3s, kubernetes, sriov-network-device-plugin, podman, grafana-alloy, nvidia-container-toolkit, buildah, node-feature-discovery, falco-no-driver...

CVE-2025-52881 vulnerabilities

Vulnerabilities for packages: xeol, spegel, syft, trivy, kubernetes, skaffold, nerdctl, zot, falco-no-driver, k8s-device-plugin, kubescape-operator, trivy-operator, k3s, k9s, dagger, sriov-network-device-plugin, containerd, zarf, node-feature-discovery, newrelic-infrastructure-agent, undock,...

GHSA-CGRX-MC8F-2PRM vulnerabilities

Vulnerabilities for packages: xeol, spegel, syft, trivy, kubernetes, skaffold, nerdctl, zot, falco-no-driver, k8s-device-plugin, kubescape-operator, trivy-operator, k3s, k9s, dagger, sriov-network-device-plugin, containerd, zarf, node-feature-discovery, newrelic-infrastructure-agent, undock,...

GHSA-CGRX-MC8F-2PRM vulnerabilities

Vulnerabilities for packages: kubescape, amazon-k8s-cni-fips, podman, rke2-runtime, blob-csi-fips, xeol, prometheus-podman-exporter-fips, grafana-alloy-fips, nvidia-container-toolkit, grafana-alloy, cloudbeat-fips, k9s, eks-distro-fips, sriov-network-device-plugin-fips, neuvector-scanner-fips,...

CVE-2025-31133 vulnerabilities

Vulnerabilities for packages: k3s, buildah, rancher-agent, podman, rke2-runtime, falco-no-driver, grafana-alloy-fips, nvidia-container-toolkit, sriov-network-device-plugin, kubernetes, grafana-alloy, cluster-autoscaler, cluster-autoscaler-fips, eks-distro-fips, sriov-network-device-plugin-fips,...

GHSA-QW9X-CQR3-WC7R vulnerabilities

Vulnerabilities for packages: k3s, buildah, rancher-agent, podman, rke2-runtime, falco-no-driver, grafana-alloy-fips, nvidia-container-toolkit, sriov-network-device-plugin, kubernetes, grafana-alloy, cluster-autoscaler, cluster-autoscaler-fips, eks-distro-fips, sriov-network-device-plugin-fips,...

GHSA-9493-H29P-RFM2 vulnerabilities

Vulnerabilities for packages: k3s, buildah, rancher-agent, podman, rke2-runtime, falco-no-driver, grafana-alloy-fips, nvidia-container-toolkit, sriov-network-device-plugin, kubernetes, grafana-alloy, cluster-autoscaler, cluster-autoscaler-fips, eks-distro-fips, sriov-network-device-plugin-fips,...

CVE-2025-52565 vulnerabilities

Vulnerabilities for packages: k3s, buildah, rancher-agent, podman, rke2-runtime, falco-no-driver, grafana-alloy-fips, nvidia-container-toolkit, sriov-network-device-plugin, kubernetes, grafana-alloy, cluster-autoscaler, cluster-autoscaler-fips, eks-distro-fips, sriov-network-device-plugin-fips,...