azure-storage-azcopy-10.32.2-1.1 on GA media (moderate)

azure-storage-azcopy-10.32.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:10407-1 Rating: moderate Cross-References: CVE-2026-33186 CVSS scores: CVE-2026-33186 SUSE : 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVE-2026-33186 SUSE : 8.6...

OPENSUSE-SU-2026:10407-1 azure-storage-azcopy-10.32.2-1.1 on GA media

These are all security issues fixed in the azure-storage-azcopy-10.32.2-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, datadog-agent-fips, volsync, gcp-compute-persistent-disk-csi-driver, kube-metrics-adapter, rancher-webhook, kong-ingress-controller, node-feature-discovery-fips, istio, loki, prometheus, grafana-beyla, ory-kratos-fips, gitlab-rails-ce-fips,...

OPENSUSE-SU-2025:15594-1 azure-storage-azcopy-10.30.1-1.1 on GA media

These are all security issues fixed in the azure-storage-azcopy-10.30.1-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-51744 affecting package azcopy for versions less than 10.25.1-4

CVE-2024-51744 affecting package azcopy for versions less than 10.25.1-4. A patched version of the package is available...

CVE-2025-22870 affecting package azcopy for versions less than 10.25.1-4

CVE-2025-22870 affecting package azcopy for versions less than 10.25.1-4. A patched version of the package is available...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: flannel-cni-plugin, fulcio, gobump, buildkitd, nri-f5, kubernetes-csi-driver-hostpath, kubevela, pluto, k3s, tekton-chains, speedtest-go, aws-privateca-issuer, tw, nri-jmx, undock, hcloud, velero-plugin-for-microsoft-azure, gh, nri-haproxy, kube-rbac-proxy, trino,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: flannel-cni-plugin, fulcio, gobump, buildkitd, nri-f5, kubernetes-csi-driver-hostpath, kubevela, pluto, k3s, tekton-chains, speedtest-go, aws-privateca-issuer, tw, nri-jmx, undock, hcloud, velero-plugin-for-microsoft-azure, gh, nri-haproxy, kube-rbac-proxy, trino,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: wave-fips, sonobuoy, fq, velero-plugin-for-aws, distribution-fips, controller-gen, kube-rbac-proxy-fips, gcp-compute-persistent-disk-csi-driver, victoriametrics-operator-fips, kube-metrics-adapter, kafkaexporter-fips, rancher-webhook, kubeflow-katib,...

CVE-2025-30204 affecting package azcopy for versions less than 10.25.1-3

CVE-2025-30204 affecting package azcopy for versions less than 10.25.1-3. A patched version of the package is available...

CBL Mariner 2.0 Security Update: application-gateway-kubernetes-ingress / azcopy / blobfuse2 / cert-manager / coredns / etcd (CVE-2025-30204)

The version of application-gateway-kubernetes-ingress / azcopy / blobfuse2 / cert-manager / coredns / etcd installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-30204 advisory. - golang-jwt is a Go...

CVE-2025-30204 affecting package azcopy for versions less than 10.25.1-5

CVE-2025-30204 affecting package azcopy for versions less than 10.25.1-5. A patched version of the package is available...

Azure Linux 3.0 Security Update: azcopy / git-lfs / golang / influxdb / keda (CVE-2025-22870)

The version of azcopy / git-lfs / golang / influxdb / keda installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22870 advisory. - Matching of hosts against proxy patterns can improperly treat an IPv6...

CBL Mariner 2.0 Security Update: application-gateway-kubernetes-ingress / azcopy / cert-manager / cf-cli / coredns (CVE-2024-51744)

The version of application-gateway-kubernetes-ingress / azcopy / cert-manager / cf-cli / coredns installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-51744 advisory. - golang-jwt is a Go implementation...

CVE-2024-51744 affecting package azcopy for versions less than 10.25.1-4

CVE-2024-51744 affecting package azcopy for versions less than 10.25.1-4. A patched version of the package is available...

CVE-2025-22870 affecting package azcopy for versions less than 10.25.1-4

CVE-2025-22870 affecting package azcopy for versions less than 10.25.1-4. A patched version of the package is available...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: fulcio, crossplane-provider-azure-storage, grafana-agent-operator, buildkitd, mongo-tools, restic, vexctl, rclone, trufflehog, opentelemetry-operator, thanos, k3s, tekton-chains, terraform-provider-azurerm, flyte, openfga, flux-image-automation-controller,...

AZL-59169 CVE-2025-30204 affecting package azcopy for versions less than 10.25.1-3

golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits via a call to strings.Split its argument which is untrusted data on periods. As a result, in the face of a malicious request whose...

AZL-59209 CVE-2025-30204 affecting package azcopy for versions less than 10.25.1-5

golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits via a call to strings.Split its argument which is untrusted data on periods. As a result, in the face of a malicious request whose...

Azure Linux 3.0 Security Update: azcopy / blobfuse2 / cert-manager / containerized-data-importer / coredns (CVE-2025-22868)

The version of azcopy / blobfuse2 / cert-manager / containerized-data-importer / coredns installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22868 advisory. - An attacker can pass a malicious malforme...