SUSE-FU-2026:21213-1 Feature update for libgcrypt, libgpg-error

This update for libgcrypt, libgpg-error fixes the following issues: Update libgcrypt to 1.12.1 jscPED-15059: New and extended interfaces: - Allow access to the FIPS service indicator via the new GCRYCTLFIPSSERVICEINDICATOR control code. - Make SHA-1 non-FIPS internally for the 1.12 API - Add...

GHSA-XM5M-WGH2-RRG3 vulnerabilities

Vulnerabilities for packages: kubescape, flux-source-controller, witness, tkn, trivy-operator, skaffold, kyverno-notation-aws, sigstore-scaffolding, buildkitd, slsa-verifier, goreleaser, spire-server, ratify, teleport, kyverno, trivy, tflint, zarf, policy-controller, neuvector-sigstore-interface,...

CVE-2026-39984 vulnerabilities

Vulnerabilities for packages: kubescape, flux-source-controller, witness, tkn, trivy-operator, skaffold, kyverno-notation-aws, sigstore-scaffolding, buildkitd, slsa-verifier, goreleaser, spire-server, ratify, teleport, kyverno, trivy, tflint, zarf, policy-controller, neuvector-sigstore-interface,...

CVE-2026-33414 vulnerabilities

Vulnerabilities for packages: falco-no-driver, prometheus-podman-exporter-fips, prometheus-podman-exporter...

GHSA-HC8W-H2MF-HP59 vulnerabilities

Vulnerabilities for packages: falco-no-driver, prometheus-podman-exporter-fips, prometheus-podman-exporter...

GHSA-RR7J-V2Q5-CHGV vulnerabilities

Vulnerabilities for packages: librechat, kibana, langfuse, open-webui, langfuse-fips...

GHSA-R4Q5-VMMM-2653 vulnerabilities

Vulnerabilities for packages: prism, kubeflow-pipelines, code-server, argo-workflows, thingsboard-fips, wazuh-dashboard, lerna, langfuse, nextcloud-server, langfuse-fips, redisinsight, kubeflow-katib, gitlab-rails-ce-fips, thingsboard, opensearch-dashboards, saf, gitlab-rails-ce,...

GHSA-39Q2-94RC-95CP vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, wazuh-dashboard-fips, librechat, kibana, opensearch-dashboards, langfuse, opensearch-dashboards-fips, langfuse-fips, nextcloud-server...

GHSA-458J-XX4X-4375 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, librechat, kibana, langfuse, langfuse-fips...

CVE-2026-40890 vulnerabilities

Vulnerabilities for packages: fq, temporal-ui-server-fips, temporal-fips, snyk-cli, kube-metrics-adapter-fips, temporal-ui-server, temporal, kube-metrics-adapter, gotenberg...

GHSA-77FJ-VX54-GVH7 vulnerabilities

Vulnerabilities for packages: fq, temporal-ui-server-fips, temporal-fips, snyk-cli, kube-metrics-adapter-fips, temporal-ui-server, temporal, kube-metrics-adapter, gotenberg...

CVE-2026-39984 vulnerabilities

Vulnerabilities for packages: kubescape-server-fips, trivy-fips, buildkitd-fips, trivy-operator, cloudbeat, kyverno-policy-reporter-plugins-kyverno, sigstore-scaffolding, buildkitd, cloudbeat-fips, trivy, docker, image-factory, tekton-chains-fips, ratify, kyverno,...

GHSA-XM5M-WGH2-RRG3 vulnerabilities

Vulnerabilities for packages: kubescape-server-fips, trivy-fips, buildkitd-fips, trivy-operator, cloudbeat, kyverno-policy-reporter-plugins-kyverno, sigstore-scaffolding, buildkitd, cloudbeat-fips, trivy, docker, image-factory, tekton-chains-fips, ratify, kyverno,...

GHSA-JVFF-X2QM-6286 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, opensearch-dashboards-fips, wazuh-dashboard, librechat...

GHSA-JG4P-7FHP-P32P vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, opensearch-dashboards-fips, wazuh-dashboard, kibana...

CVE-2026-35213 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, opensearch-dashboards-fips, wazuh-dashboard, kibana...

CVE-2026-40293 vulnerabilities

Vulnerabilities for packages: grafana-fips, openfga, openfga-fips, grafana, commercial-grafana...

CLEANSTART-2026-DR81473 HashiCorp’s go-getter library up to v1

Multiple security vulnerabilities affect the harbor-scanner-trivy-fips package. HashiCorp’s go-getter library up to v1. See references for individual vulnerability details...

CLEANSTART-2026-AN01004 filippo

Multiple security vulnerabilities affect the percona-xtradb-cluster-operator-fips package. filippo. See references for individual vulnerability details...

CLEANSTART-2026-YY57430 gRPC-Go is the Go language implementation of gRPC

Multiple security vulnerabilities affect the temporal-server-fips package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...