azure-storage-azcopy-10.32.2-1.1 on GA media (moderate)

azure-storage-azcopy-10.32.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:10407-1 Rating: moderate Cross-References: CVE-2026-33186 CVSS scores: CVE-2026-33186 SUSE : 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVE-2026-33186 SUSE : 8.6...

OPENSUSE-SU-2026:10407-1 azure-storage-azcopy-10.32.2-1.1 on GA media

These are all security issues fixed in the azure-storage-azcopy-10.32.2-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: op-geth, rke2-runtime-fips, boring-registry, cloudbeat, gcp-compute-persistent-disk-csi-driver-fips, gogatekeeper, docker-fips, keda-fips, kyverno-notation-aws, kserve, argo-rollouts-fips, ferretdb, grafana, kyverno-fips, cluster-api-fips, elastic-agent-fips,...

OPENSUSE-SU-2025:15594-1 azure-storage-azcopy-10.30.1-1.1 on GA media

These are all security issues fixed in the azure-storage-azcopy-10.30.1-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-51744 affecting package azcopy for versions less than 10.25.1-4

CVE-2024-51744 affecting package azcopy for versions less than 10.25.1-4. A patched version of the package is available...

CVE-2025-22870 affecting package azcopy for versions less than 10.25.1-4

CVE-2025-22870 affecting package azcopy for versions less than 10.25.1-4. A patched version of the package is available...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: velero-plugin-for-microsoft-azure, cni-plugins, grype, kafkaexporter, kubernetes-csi-driver-nfs, fluent-operator, prometheus, restic, kubewatch, fulcio, helm-push, tempo, kubernetes-csi-external-attacher, step-kms-plugin, litestream, flannel-cni-plugin,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: velero-plugin-for-microsoft-azure, cni-plugins, grype, kafkaexporter, kubernetes-csi-driver-nfs, fluent-operator, prometheus, restic, kubewatch, fulcio, helm-push, tempo, kubernetes-csi-external-attacher, step-kms-plugin, litestream, flannel-cni-plugin,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: terraform-provider-azapi-fips, hubble-ui-backend-fips, metallb, mongodb-kubernetes-operator-fips, yunikorn-web-fips, azure-aad-pod-identity-mic, gcp-compute-persistent-disk-csi-driver-fips, docker-cli, distribution, docker-fips, kafkaexporter-fips, yunikorn-web,...

CVE-2025-30204 affecting package azcopy for versions less than 10.25.1-3

CVE-2025-30204 affecting package azcopy for versions less than 10.25.1-3. A patched version of the package is available...

CBL Mariner 2.0 Security Update: application-gateway-kubernetes-ingress / azcopy / blobfuse2 / cert-manager / coredns / etcd (CVE-2025-30204)

The version of application-gateway-kubernetes-ingress / azcopy / blobfuse2 / cert-manager / coredns / etcd installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-30204 advisory. - golang-jwt is a Go...

CVE-2025-30204 affecting package azcopy for versions less than 10.25.1-5

CVE-2025-30204 affecting package azcopy for versions less than 10.25.1-5. A patched version of the package is available...

Azure Linux 3.0 Security Update: azcopy / git-lfs / golang / influxdb / keda (CVE-2025-22870)

The version of azcopy / git-lfs / golang / influxdb / keda installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22870 advisory. - Matching of hosts against proxy patterns can improperly treat an IPv6...

CBL Mariner 2.0 Security Update: application-gateway-kubernetes-ingress / azcopy / cert-manager / cf-cli / coredns (CVE-2024-51744)

The version of application-gateway-kubernetes-ingress / azcopy / cert-manager / cf-cli / coredns installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-51744 advisory. - golang-jwt is a Go implementation...

CVE-2024-51744 affecting package azcopy for versions less than 10.25.1-4

CVE-2024-51744 affecting package azcopy for versions less than 10.25.1-4. A patched version of the package is available...

CVE-2025-22870 affecting package azcopy for versions less than 10.25.1-4

CVE-2025-22870 affecting package azcopy for versions less than 10.25.1-4. A patched version of the package is available...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: trufflehog, velero-plugin-for-microsoft-azure, guac, kubeflow-katib, xeol, amazon-cloudwatch-agent, ko, argo-rollouts, prometheus, restic, argo-workflows, kaniko, spire-server, sqlexporter, fulcio, wal-g, aws-eks-pod-identity-agent, actions-runner-controller, promxy,...

AZL-59169 CVE-2025-30204 affecting package azcopy for versions less than 10.25.1-3

golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits via a call to strings.Split its argument which is untrusted data on periods. As a result, in the face of a malicious request whose...

AZL-59209 CVE-2025-30204 affecting package azcopy for versions less than 10.25.1-5

golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits via a call to strings.Split its argument which is untrusted data on periods. As a result, in the face of a malicious request whose...

Azure Linux 3.0 Security Update: azcopy / blobfuse2 / cert-manager / containerized-data-importer / coredns (CVE-2025-22868)

The version of azcopy / blobfuse2 / cert-manager / containerized-data-importer / coredns installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22868 advisory. - An attacker can pass a malicious malforme...