Ansible may expose private key

A flaw was found in the Ansible Automation Platform. When creating a new keypair, the ec2key module prints out the private key directly to the standard output. This flaw allows an attacker to fetch those keys from the log files, compromising the system's confidentiality, integrity, and availabili...

CVE-2026-42145 Coolify: File Upload Without Type or Size Validation in Database Backup Restore

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.474, the file upload endpoint app/Http/Controllers/UploadController.php for database backup restore uploads did not enforce file type or size validation, allowing an authenticat...

SUSE CVE-2026-14631

webpack-dev-server versions 5.2.5 and earlier terminate the whole Node.js process when an unauthenticated peer sends either a normal HTTP request with a malformed Host header or a WebSocket upgrade to the default /ws endpoint with a malformed Origin header. The malformed value causes an uncaught...

OPENSUSE-SU-2026:11205-1 rustup-1.28.2~0-4.1 on GA media

These are all security issues fixed in the rustup-1.28.20-4.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-42145: Unrestricted Upload of File with Dangerous Type

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.474, the file upload endpoint app/Http/Controllers/UploadController.php for database backup restore uploads did not enforce file type or size validation, allowing an authenticat...

OPENSUSE-SU-2026:11197-1 apptainer-1.5.1-3.1 on GA media

These are all security issues fixed in the apptainer-1.5.1-3.1 package on the GA media of openSUSE Tumbleweed...

helm3-3.21.2-2.1 on GA media (moderate)

helm3-3.21.2-2.1 on GA media Announcement ID: openSUSE-SU-2026:11187-1 Rating: moderate Cross-References: CVE-2026-48978 CVSS scores: CVE-2026-48978 SUSE : 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N CVE-2026-48978 SUSE : 2.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N...

helm-4.2.2-2.1 on GA media (moderate)

helm-4.2.2-2.1 on GA media Announcement ID: openSUSE-SU-2026:11186-1 Rating: moderate Cross-References: CVE-2026-48978 CVSS scores: CVE-2026-48978 SUSE : 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N CVE-2026-48978 SUSE : 2.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N...

OPENSUSE-SU-2026:11206-1 sccache-0.16.0~0-2.1 on GA media

These are all security issues fixed in the sccache-0.16.00-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11203-1 python313-httplib2-0.32.0-1.1 on GA media

These are all security issues fixed in the python313-httplib2-0.32.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11198-1 cosign-3.1.1-1.1 on GA media

These are all security issues fixed in the cosign-3.1.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11207-1 libsuricata8_0_5-8.0.5-2.1 on GA media

These are all security issues fixed in the libsuricata805-8.0.5-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11208-1 tomcat-9.0.119-1.1 on GA media

These are all security issues fixed in the tomcat-9.0.119-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-56861

Name of the Vulnerable Software and Affected Versions openSUSE Tumbleweed suricata package versions prior to 8.0.5-2.1 Description A UNIX Symbolic Link Symlink Following issue exists where the suricata user can escalate privileges to root. A symlink is a special type of file that serves as a...

Gitea Configuration Compromise

The vulnerability of the Docker image configuration of the Git repository management system Gitea is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2026-40140

BeyondTrust Remote Support and Privileged Remote Access contain a high-severity pre-authentication vulnerability in the network communication subsystem. Insufficient validation of client-supplied input may allow an unauthenticated remote attacker to trigger a denial-of-service condition affecting...

CVE-2026-40140 High-Severity Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access

BeyondTrust Remote Support and Privileged Remote Access contain a high-severity pre-authentication vulnerability in the network communication subsystem. Insufficient validation of client-supplied input may allow an unauthenticated remote attacker to trigger a denial-of-service condition affecting...

Important: Red Hat Security Advisory: Red Hat OpenShift GitOps v1.21.1 security update

Important: Red Hat OpenShift GitOps v1.21.1 security update An update is now available for Red Hat OpenShift GitOps. Bug Fixes and Enhancements: GITOPS-10083 RC 1.21.0-7: Missing permission for web-based terminal in Argocd UI GITOPS-10178 OpenShift GitOps operator v1.21.0 breaks Redis-HA...

OPENSUSE-SU-2026:11185-1 gi-docgen-2026.1-1.1 on GA media

These are all security issues fixed in the gi-docgen-2026.1-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-55849

A weakness has been identified in radareorg radare2 up to 6.1.6. Affected is the function cmd print in the library libr/core/cmd print.inc of the component pb Print Command Handler. This manipulation causes integer overflow. The attack needs to be launched locally. The exploit has been made...