jfrog-cli-2.104.1-1.1 on GA media (moderate)

jfrog-cli-2.104.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:10844-1 Rating: moderate Cross-References: CVE-2025-11579 CVSS scores: CVE-2025-11579 SUSE : 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2025-11579 SUSE : 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA...

OPENSUSE-SU-2026:10844-1 jfrog-cli-2.104.1-1.1 on GA media

These are all security issues fixed in the jfrog-cli-2.104.1-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: argo-events, zot, guac, argo-workflows-fips, google-osconfig-agent, pulumi-language-dotnet, kaniko, goreleaser, trivy-operator, trivy-fips, kyverno-fips, syft-fips, zarf, gitaly-fips, mapotf, skaffold-fips, coder, external-secrets-operator-fips, redpanda-console,...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: argo-events, zot, guac, argo-workflows-fips, google-osconfig-agent, pulumi-language-dotnet, kaniko, goreleaser, trivy-operator, trivy-fips, kyverno-fips, syft-fips, zarf, gitaly-fips, mapotf, skaffold-fips, coder, external-secrets-operator-fips, redpanda-console,...

[SECURITY] Fedora 44 Update: jfrog-cli-2.98.0-1.fc44

JFrog CLI is a client that provides a simple interface that automates access to the JFrog products...

Fedora 44 : jfrog-cli (2026-6b87863841)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-6b87863841 advisory. Upstream release 2.98.0. https://github.com/jfrog/jfrog-cli/releases/tag/v2.98.0 Resolves the following security issues: CVE-2025-11579 CVE-2025-665...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: chartmuseum, rancher-fleet-fips, jfrog-cli, cluster-api-helm-controller, zot, consul-k8s-fips, eksctl, kube-arangodb, pluto-fips, nova, helm-docs, cloudbeat, istio, chaos-mesh-fips, helm-operator, tw, kuma, chart-testing-fips, nova-fips, cert-manager-cmctl, consul-k8...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: net-kourier, neuvector-scanner, nats-server-fips, cilium-envoy, goreleaser, trivy-operator, commercial-chainloop-backend, bento, cluster-autoscaler, kyverno-fips, jaeger-fips, gitaly-fips, helm-diff-fips, helm-mapkubeapis, nsc, witness, nerdctl-fips, kube-mgmt-fips,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: net-kourier, neuvector-scanner, nats-server-fips, cilium-envoy, goreleaser, trivy-operator, commercial-chainloop-backend, bento, cluster-autoscaler, kyverno-fips, jaeger-fips, gitaly-fips, helm-diff-fips, helm-mapkubeapis, nsc, witness, nerdctl-fips, kube-mgmt-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: spark-operator-fips, tempo, docker-credential-ecr-login-fips, git-credential-oauth, fluxcd-kustomize-mutating-webhook-fips, git-lfs, hugo-extended, kafkaexporter, longhorn-share-manager-fips, net-kourier, flagger-fips, neuvector-scanner, cloud-sql-proxy,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: argo-events, zot, guac, argo-workflows-fips, google-osconfig-agent, pulumi-language-dotnet, kaniko, trivy-operator, trivy-fips, kyverno-fips, commercial-chainloop-cli, syft-fips, livekit-cli, zarf, gitaly-fips, skaffold-fips, external-secrets-operator-fips, teleport,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: argo-events, zot, guac, argo-workflows-fips, google-osconfig-agent, pulumi-language-dotnet, kaniko, trivy-operator, trivy-fips, kyverno-fips, commercial-chainloop-cli, syft-fips, livekit-cli, zarf, gitaly-fips, skaffold-fips, external-secrets-operator-fips, teleport,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: argo-events, zot, guac, argo-workflows-fips, google-osconfig-agent, pulumi-language-dotnet, kaniko, trivy-operator, trivy-fips, kyverno-fips, commercial-chainloop-cli, syft-fips, livekit-cli, zarf, gitaly-fips, skaffold-fips, external-secrets-operator-fips, teleport,...