RLSA-2023:2758 Moderate: container-tools:rhel8 security, bug fix, and enhancement update

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: golang: net/http: improper sanitization of Transfer-Encoding header CVE-2022-1705 golang: go/parser: stack exhaustion in all Parse functions CVE-2022-1962 golang:...

Security update for govulncheck-vulndb

This update for govulncheck-vulndb fixes the following issues: Update to version 0.0.20251120T220319 2025-11-20T22:03:19Z. jscPED-11136: GO-2023-2331 GO-2024-2587 GO-2025-3770 GO-2025-4007 GO-2025-4134 GO-2025-4135 Update to version 0.0.20251118T154415 2025-11-18T15:44:15Z. jscPED-11136:...

Security update for go1.25-openssl

This update for go1.25-openssl fixes the following issues: Update to version 1.25.1, released 2025-09-03 bsc1244485. Security issues fixed: CVE-2025-47910: net/http: CrossOriginProtection insecure bypass patterns not limited to exact matches bsc1249141. Other issues fixed: go74822 cmd/go: "get...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : go1.25 (SUSE-SU-2025:03200-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:03200-1 advisory. Update to go1.25.1, released 2025-09-03 bsc1244485. Security issues fixed: - CVE-2025-47910: net/http:...

Azure Linux 3.0 Security Update: cri-tools / docker-buildx / kubernetes / opa / prometheus (CVE-2023-45142)

The version of cri-tools / docker-buildx / kubernetes / opa / prometheus installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-45142 advisory. - OpenTelemetry-Go Contrib is a collection of third-party...

SUSE-SU-2023:2598-1 Security update for golang-github-prometheus-prometheus

This update for golang-github-prometheus-prometheus fixes the following issues: golang-github-prometheus-prometheus: - Security issues fixed in this version update to 2.37.6: CVE-2022-46146: Fix basic authentication bypass vulnerability bsc1208049, jscPED-3576 CVE-2022-41715: Update our regexp...

OPENSUSE-SU-2023:0126-1 Security update for syncthing

This update for syncthing fixes the following issues: - Update to 1.13.5 This release fixes CVE-2022-46165 “Cross-site Scripting XSS in Web GUI” Bugfixes: 8503: 'syncthing cli config devices add' reflect error when using --addresses flag 8764: Ignore patterns creating during folder addition are n...