SUSE-SU-2026:21366-1 Security update for tomcat11

This update for tomcat11 fixes the following issues: - Update to Tomcat 11.0.21 - CVE-2026-24880: Request smuggling via invalid chunk extension bsc1261850. - CVE-2026-25854: Occasionally open redirect bsc1261851. - CVE-2026-29129: TLS cipher order is not preserved bsc1261852. - CVE-2026-29145: OC...

SUSE SLES15 Security Update : kubernetes (SUSE-SU-2026:1490-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:1490-1 advisory. This update for kubernetes rebuilds it against the current go 1.25 security release. Tenable has extracted the preceding description block...

SUSE SLES15 Security Update : kubernetes-old (SUSE-SU-2026:1489-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:1489-1 advisory. This update for kubernetes-old rebuilds it against the current go 1.25 security release. Tenable has extracted the preceding description blo...

SUSE-SU-2026:1490-1 Security update for kubernetes

This update for kubernetes rebuilds it against the current go 1.25 security release...

Security update for kubernetes

This update for kubernetes rebuilds it against the current go 1.25 security release. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product: openSUSE Leap...

Security update for kubernetes-old

This update for kubernetes-old rebuilds it against the current go 1.25 security release. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product: openSUSE...

SUSE-SU-2026:1489-1 Security update for kubernetes-old

This update for kubernetes-old rebuilds it against the current go 1.25 security release...

autopoc

AutoPoC Automated proof-of-concept deployments on OpenShift...

CVE-2026-33816 vulnerabilities

Vulnerabilities for packages: kine, spire-server, kots, envoy-gateway, k3s...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, cilium-cli, consul-k8s, trivy, k8sgpt-operator, kargo, argo-workflows, verticadb-operator, vcluster, headlamp, envoy-gateway, jitsucom-bulker, redis-operator, cloudnative-pg, eksctl, kwok, infinispan-operator, teleport, argo-cd, gitlab-kas,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, cilium-cli, consul-k8s, trivy, k8sgpt-operator, kargo, argo-workflows, verticadb-operator, vcluster, headlamp, envoy-gateway, jitsucom-bulker, redis-operator, cloudnative-pg, eksctl, kwok, infinispan-operator, teleport, argo-cd, gitlab-kas,...

CVE-2026-27143 vulnerabilities

Vulnerabilities for packages: buf, cloud-provider-aws, wireguard-go, mongo-tools, docker-cli, spire-server, coredns, verticadb-operator, nri-mssql, envoy-gateway, pvc-autoresizer, delve, gofumpt, prometheus-operator, telegraf, atlantis, opentelemetry-operator, kubernetes-csi-node-driver-registrar...

GHSA-CFP9-33RC-J74F vulnerabilities

Vulnerabilities for packages: buf, cloud-provider-aws, wireguard-go, mongo-tools, docker-cli, spire-server, coredns, verticadb-operator, nri-mssql, envoy-gateway, pvc-autoresizer, delve, gofumpt, prometheus-operator, telegraf, atlantis, opentelemetry-operator, kubernetes-csi-node-driver-registrar...

GHSA-CQRX-3M42-5P5W vulnerabilities

Vulnerabilities for packages: buf, cloud-provider-aws, wireguard-go, mongo-tools, docker-cli, spire-server, coredns, verticadb-operator, nri-mssql, envoy-gateway, pvc-autoresizer, delve, gofumpt, prometheus-operator, telegraf, atlantis, opentelemetry-operator, kubernetes-csi-node-driver-registrar...

CVE-2026-27144 vulnerabilities

Vulnerabilities for packages: buf, cloud-provider-aws, wireguard-go, mongo-tools, docker-cli, spire-server, coredns, verticadb-operator, nri-mssql, envoy-gateway, pvc-autoresizer, delve, gofumpt, prometheus-operator, telegraf, atlantis, opentelemetry-operator, kubernetes-csi-node-driver-registrar...

CVE-2026-6437

creationtimestamp| type| source ---|---|--- 2026-04-17 19:48:06+00:00| seen| https://bsky.app/profile/Kubernetes.activitypub.awakari.com.ap.brid.gy/post/3mjpowzo7s4h2...

GHSA-CFP9-33RC-J74F vulnerabilities

Vulnerabilities for packages: cert-manager, dataplaneapi-fips, aws-application-networking-k8s, gitaly, prometheus-elasticsearch-exporter, k3s, prometheus, apache-beam-java-sdk, pvc-autoresizer, argo-workflows-fips, flux-fips, zabbix-agent2, http-echo, delve, azuredisk-csi, boringssl-fips-static,...

CVE-2026-27143 vulnerabilities

Vulnerabilities for packages: cert-manager, dataplaneapi-fips, aws-application-networking-k8s, gitaly, prometheus-elasticsearch-exporter, k3s, prometheus, apache-beam-java-sdk, pvc-autoresizer, argo-workflows-fips, flux-fips, zabbix-agent2, http-echo, delve, azuredisk-csi, boringssl-fips-static,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: cilium-cli, trident-fips, trivy-operator, plugin-barman-cloud-fips, juicefs-csi-driver, kubeflow-pipelines, k3s, zarf-fips, argo-workflows-fips, k8s-driver-manager-fips, rancher-fleet, gitlab-kas, cloudnative-pg, postgres-operator, argocd-image-updater,...

GHSA-CQRX-3M42-5P5W vulnerabilities

Vulnerabilities for packages: cert-manager, dataplaneapi-fips, aws-application-networking-k8s, gitaly, prometheus-elasticsearch-exporter, k3s, prometheus, apache-beam-java-sdk, pvc-autoresizer, argo-workflows-fips, flux-fips, zabbix-agent2, http-echo, delve, azuredisk-csi, boringssl-fips-static,...