Security update for gh (important)

openSUSE security update: security update for gh ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21432-1 Rating: important References: bsc1266618 Cross-References: CVE-2026-39821 CVSS scores: CVE-2026-39821 SUSE : 7.4...

OPENSUSE-SU-2026:11330-1 gh-2.96.0-2.1 on GA media

These are all security issues fixed in the gh-2.96.0-2.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-42502 affecting package gh for versions less than 2.62.0-17

CVE-2026-42502 affecting package gh for versions less than 2.62.0-17. A patched version of the package is available...

CVE-2026-25680 affecting package gh for versions less than 2.62.0-17

CVE-2026-25680 affecting package gh for versions less than 2.62.0-17. A patched version of the package is available...

CVE-2026-25681 affecting package gh for versions less than 2.62.0-17

CVE-2026-25681 affecting package gh for versions less than 2.62.0-17. A patched version of the package is available...

CVE-2026-39835 affecting package gh for versions less than 2.62.0-17

CVE-2026-39835 affecting package gh for versions less than 2.62.0-17. A patched version of the package is available...

CVE-2026-39827 affecting package gh for versions less than 2.62.0-17

CVE-2026-39827 affecting package gh for versions less than 2.62.0-17. A patched version of the package is available...

CVE-2026-39828 affecting package gh for versions less than 2.62.0-17

CVE-2026-39828 affecting package gh for versions less than 2.62.0-17. A patched version of the package is available...

Fedora 44 : gh (2026-f07b3548d4)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-f07b3548d4 advisory. Update to 2.94.0 ---- Update to 2.93.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

MINI-X365-594V-6VGH

Bulletin has no description...

CVE-2026-46597 affecting package gh for versions less than 2.62.0-16

CVE-2026-46597 affecting package gh for versions less than 2.62.0-16. A patched version of the package is available...

CVE-2026-39829 affecting package gh for versions less than 2.62.0-16

CVE-2026-39829 affecting package gh for versions less than 2.62.0-16. A patched version of the package is available...

CVE-2026-39834 affecting package gh for versions less than 2.62.0-16

CVE-2026-39834 affecting package gh for versions less than 2.62.0-16. A patched version of the package is available...

CVE-2026-39830 affecting package gh for versions less than 2.62.0-16

CVE-2026-39830 affecting package gh for versions less than 2.62.0-16. A patched version of the package is available...

CVE-2026-39821 affecting package gh for versions less than 2.62.0-16

CVE-2026-39821 affecting package gh for versions less than 2.62.0-16. A patched version of the package is available...

CVE-2026-42506 affecting package gh for versions less than 2.62.0-16

CVE-2026-42506 affecting package gh for versions less than 2.62.0-16. A patched version of the package is available...

CVE-2026-45803

GitHub CLI (gh) vulnerability: from v1.6.0 to before v2.92.0, terminal escape sequences could be injected via workflow logs when using gh run view --log or --log-failed, due to unsanitized raw log output. An attacker controlling Actions logs (e.g., PR-triggered workflows) could cause terminal man...

CVE-2026-32288 affecting package gh for versions less than 2.62.0-15

CVE-2026-32288 affecting package gh for versions less than 2.62.0-15. A patched version of the package is available...

CVE-2026-5160 affecting package gh for versions less than 2.62.0-15

CVE-2026-5160 affecting package gh for versions less than 2.62.0-15. A patched version of the package is available...

Fedora 44 : gh (2026-5df889949e)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-5df889949e advisory. Update to 2.92.0 and make telemetry sending opt in. Tenable has extracted the preceding description block directly from the Fedora security advisory...