SUSE: Security Advisory (SUSE-SU-2026:0480-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE CVE-2026-24044

Element Server Suite Community Edition ESS Community deploys a Matrix stack using the provided Helm charts and Kubernetes distribution. The ESS Community Helm Chart secrets initialization hook using matrix-tools container before 0.5.7 is using an insecure Matrix server key generation method,...

SUSE SLES15: helm / helm-bash-completion / helm-fish-completion / etc (SUSE-SU-2026:0480-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:0480-1 advisory. This update for helm rebuilds it against the current GO security release. Tenable has extracted the preceding description bloc...

CVE-2026-24044

CVE-2026-24044 affects Element Server Suite Community Edition (ESS Community) Helm Chart. The issue arises in the Helm Chart secrets initialization hook (using matrix-tools container prior to 0.5.7) where an insecure Matrix server key generation method can produce the same key pair, enabling netw...

CVE-2026-24044 ESS Community Helm Chart has a weak server key generation method

Element Server Suite Community Edition ESS Community deploys a Matrix stack using the provided Helm charts and Kubernetes distribution. The ESS Community Helm Chart secrets initialization hook using matrix-tools container before 0.5.7 is using an insecure Matrix server key generation method,...

CVE-2026-24044

Element Server Suite Community Edition ESS Community deploys a Matrix stack using the provided Helm charts and Kubernetes distribution. The ESS Community Helm Chart secrets initialization hook using matrix-tools container before 0.5.7 is using an insecure Matrix server key generation method,...

CVE-2026-24044 ESS Community Helm Chart has a weak server key generation method

Element Server Suite Community Edition ESS Community deploys a Matrix stack using the provided Helm charts and Kubernetes distribution. The ESS Community Helm Chart secrets initialization hook using matrix-tools container before 0.5.7 is using an insecure Matrix server key generation method,...

CVE-2026-24044 ESS Community Helm Chart has a weak server key generation method

Element Server Suite Community Edition ESS Community deploys a Matrix stack using the provided Helm charts and Kubernetes distribution. The ESS Community Helm Chart secrets initialization hook using matrix-tools container before 0.5.7 is using an insecure Matrix server key generation method,...

Security update for helm

This update for helm rebuilds it against the current GO security release. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product: SUSE Linux Enterprise...

SUSE-SU-2026:0480-1 Security update for helm

This update for helm rebuilds it against the current GO security release...

PT-2026-7886

Name of the Vulnerable Software and Affected Versions Element Server Suite Community Edition ESS Community versions prior to 25.12.1 Description The Element Server Suite Community Edition ESS Community Helm Chart contains a flaw in its secrets initialization hook, specifically within the...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: nri-haproxy-fips, argo-cd, kube-vip-cloud-provider, kyverno-policy-reporter-plugins-trivy, shfmt, teleport-operator-fips, jitsucom-bulker, syncthing-fips, rootlesskit, gptscript, beats, cue-fips, jobset-fips, rancher, spire-server-fips, docker-credential-gcr-fips,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: nri-haproxy-fips, argo-cd, kube-vip-cloud-provider, kyverno-policy-reporter-plugins-trivy, shfmt, teleport-operator-fips, jitsucom-bulker, syncthing-fips, rootlesskit, gptscript, beats, cue-fips, jobset-fips, rancher, spire-server-fips, docker-credential-gcr-fips,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: nri-haproxy-fips, argo-cd, kube-vip-cloud-provider, kyverno-policy-reporter-plugins-trivy, teleport-operator-fips, jitsucom-bulker, syncthing-fips, rootlesskit, gptscript, beats, cue-fips, jobset-fips, rancher, spire-server-fips, docker-credential-gcr-fips,...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.1 bug fix and security update

Red Hat OpenShift Container Platform release 4.21.1 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a...

CVE-2026-24851

CVE-2026-24851 technical details are not publicly available in the provided documents. Monitor for updates.

AZL-76878 CVE-2025-58190 affecting package helm for versions less than 3.14.2-10

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

AZL-76872 CVE-2025-47911 affecting package helm for versions less than 3.14.2-10

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

GHSA-G9Q4-QJX4-2V7Q vulnerabilities

Vulnerabilities for packages: cosign, spire-server, aactl, thanos-operator, kine, croc, scorecard, dask-gateway, eksctl, helm-operator, kubernetes-dashboard, aws-flb-kinesis, nerdctl, osv-scanner, redis-operator, src, cert-manager-cmctl, terraform-provider-pagerduty, steampipe, falco-no-driver,...

CVE-2025-61728 vulnerabilities

Vulnerabilities for packages: cosign, spire-server, aactl, thanos-operator, kine, croc, scorecard, dask-gateway, eksctl, helm-operator, kubernetes-dashboard, aws-flb-kinesis, nerdctl, osv-scanner, redis-operator, src, cert-manager-cmctl, terraform-provider-pagerduty, steampipe, falco-no-driver,...