CVE-2026-32285 vulnerabilities

Vulnerabilities for packages: dagger, datadog-agent, malcontent, redpanda, loki, grafana-beyla, dgraph, chainloop-control-plane, grafana-fips, chainloop-cli, tempo-fips, gitlab-runner-fips, deck-fips, terragrunt, mcp-grafana, opentelemetry-collector-contrib-fips, elastic-agent-fips, deck, telepor...

CVE-2026-32285 vulnerabilities

Vulnerabilities for packages: eksctl, redpanda, ollama, dagger, prometheus, k3s, terragrunt, weaviate, opentelemetry-collector-contrib, nfpm, datadog-agent, minio, witness, kubevela, maru, lazygit, rclone, grafana-alloy, gitlab-runner, terraform-mcp-server, goreleaser, cri-tools, mcp-grafana,...

Security Beta update 5.2.0 Beta1 for Multi-Linux Manager Client Tools

This update fixes the following issues: golang-github-prometheus-prometheus: CVE-2026-27606: Fix arbitrary file write via path traversal in rollup bsc1258893 Bump rollup to version 4.59.0 Drop SLE 12 support jscPED-15474 CVE-2026-25547: Fix unbounded brace range expansion leading to excessive CPU...

SUSE-SU-2026:1148-1 Security Beta update 5.2.0 Beta1 for Multi-Linux Manager Client Tools

This update fixes the following issues: golang-github-prometheus-prometheus: - CVE-2026-27606: Fix arbitrary file write via path traversal in rollup bsc1258893 Bump rollup to version 4.59.0 - Drop SLE 12 support jscPED-15474 - CVE-2026-25547: Fix unbounded brace range expansion leading to excessi...

Elastic Beats metricbeat 8.0.x < 8.19.13 / 9.0.x < 9.2.5 DoS (ESA-2026-09)

The version of Elastic Beats metricbeat installed on the remote host is 8.0.x prior to 8.19.13, 9.0.x prior to 9.2.5. It is, therefore, affected by a denial of service vulnerability. - Memory Allocation with Excessive Size Value CWE-789 in the Prometheus remotewrite HTTP handler in Metricbeat can...

CVE-2026-26931

Memory Allocation with Excessive Size Value CWE-789 in the Prometheus remotewrite HTTP handler in Metricbeat can lead Denial of Service via Excessive Allocation CAPEC-130...

SUSE SLED15: firewalld-prometheus-config / golang-github-prometheus-alertmanager / etc (SUSE-SU-2026:1008-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1008-1 advisory. golang-github-prometheus-alertmanager, golang-github-prometheus-nodeexporter: - Internal changes...

SUSE SLES15: dracut-saltboot / golang-github-QubitProducts-exporter_exporter / etc (SUSE-SU-2026:1013-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1013-1 advisory. dracut-saltboot: - Version update to 1.1.0: Retry DHCP requests up to 3 times bsc1253004...

CVE-2026-29785 vulnerabilities

Vulnerabilities for packages: kine, telegraf, nats, k3s, nats-top...

GHSA-52JH-2XXH-PWH6 vulnerabilities

Vulnerabilities for packages: kine, telegraf, nats, k3s, nats-top...

CVE-2026-29785 vulnerabilities

Vulnerabilities for packages: rke2-runtime-fips, rke2-runtime, nats-top, k3s, prometheus-nats-exporter, prometheus-nats-exporter-fips, nats, nats-top-fips, milvus, kine, nats-fips, telegraf...

GHSA-52JH-2XXH-PWH6 vulnerabilities

Vulnerabilities for packages: rke2-runtime-fips, rke2-runtime, nats-top, k3s, prometheus-nats-exporter, prometheus-nats-exporter-fips, nats, nats-top-fips, milvus, kine, nats-fips, telegraf...

SUSE CVE-2026-0528

Improper Validation of Array Index CWE-129 exists in Metricbeat can allow an attacker to cause a Denial of Service through Input Data Manipulation CAPEC-153 via specially crafted, malformed payloads sent to the Graphite server metricset or Zookeeper server metricset. Additionally, Improper Input...

Security update for grafana

This update for grafana fixes the following issues: Security issues fixed: CVE-2026-21722: Public dashboards annotations: use dashboard timerange if time selection disabled bsc1258136 CVE-2026-21721: Fixed access control by the dashboard permissions API bsc1257337 CVE-2026-21720: Fixed...

Maintenance update for Multi-Linux Manager 4.3 Release Notes Release Notes

Description: This update fixes the following issues: release-notes-susemanager-proxy: Update to SUSE Manager 4.3.17 CVEs Fixed: CVE-2024-29371, CVE-2026-27727, CVE-2026-27830 Bugs mentioned: bsc1227577, bsc1227579, bsc1236799, bsc1243241, bsc1244724 bsc1248741, bsc1251995, bsc1253068, bsc1253773...

Security update 5.0.7 for Multi-Linux Manager Client Tools

This update fixes the following issues: dracut-saltboot: Version update to 1.1.0: Retry DHCP requests up to 3 times bsc1253004 golang-github-QubitProducts-exporterexporter: Non-customer-facing optimization and update golang-github-boynux-squidexporter: Version update from 1.6.0 to 1.13.0 with the...

SUSE-SU-2026:1013-1 Security update 5.0.7 for Multi-Linux Manager Client Tools

This update fixes the following issues: dracut-saltboot: - Version update to 1.1.0: Retry DHCP requests up to 3 times bsc1253004 golang-github-QubitProducts-exporterexporter: - Non-customer-facing optimization and update golang-github-boynux-squidexporter: - Version update from 1.6.0 to 1.13.0 wi...

Security update for Prometheus

This update for Prometheus fixes the following issues: golang-github-prometheus-alertmanager, golang-github-prometheus-nodeexporter: Internal changes to fix build issues with no impact for customers golang-github-prometheus-prometheus: Security issues fixed: CVE-2026-27606: Fixed arbitrary file...

SUSE-SU-2026:1008-1 Security update for Prometheus

This update for Prometheus fixes the following issues: golang-github-prometheus-alertmanager, golang-github-prometheus-nodeexporter: - Internal changes to fix build issues with no impact for customers golang-github-prometheus-prometheus: - Security issues fixed: CVE-2026-27606: Fixed arbitrary fi...

Memory Allocation with Excessive Size Value

Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in the remotewrite HTTP handler not enabled by default. An attacker can cause excessive memory allocation by sending specially crafted HTTP requests, potentially leading to service disruption...