SUSE-SU-2025:4481-1 Security update for golang-github-prometheus-alertmanager

This update for golang-github-prometheus-alertmanager fixes the following issues: - Update to version 0.28.1 jscPED-13285: Improved performance of inhibition rules when using Equal labels. Improve the documentation on escaping in UTF-8 matchers. Update alertmanagerconfighash metric help to docume...

CVE-2025-61727 vulnerabilities

Vulnerabilities for packages: gitsign, mongo-tools, snyk-cli, opencost, osv-scanner, seaweedfs, kubernetes-csi-external-resizer, regclient, skaffold, rancher-system-agent, task, terraform, infinispan-operator, promxy, sftpgo-plugin-eventstore, cert-manager-webhook-pdns, k3d, kargo, steampipe,...

GHSA-5MH9-3JWC-RP59 vulnerabilities

Vulnerabilities for packages: gitsign, mongo-tools, snyk-cli, opencost, osv-scanner, seaweedfs, kubernetes-csi-external-resizer, regclient, skaffold, rancher-system-agent, task, terraform, infinispan-operator, promxy, sftpgo-plugin-eventstore, cert-manager-webhook-pdns, k3d, kargo, steampipe,...

CVE-2025-65637 vulnerabilities

Vulnerabilities for packages: kubeflow-fips, consul-fips, neuvector-dbgen-fips, prometheus-mongodb-exporter, aws-flb-firehose-fips, src-fingerprint, sonobuoy-fips, php-fpmexporter, stakater-reloader, src-fingerprint-fips, kubernetes-event-exporter-fips, go-discover, aws-flb-cloudwatch-fips,...

GHSA-4F99-4Q7P-P3GH vulnerabilities

Vulnerabilities for packages: kubeflow-fips, consul-fips, neuvector-dbgen-fips, prometheus-mongodb-exporter, aws-flb-firehose-fips, src-fingerprint, sonobuoy-fips, php-fpmexporter, stakater-reloader, src-fingerprint-fips, kubernetes-event-exporter-fips, go-discover, aws-flb-cloudwatch-fips,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: nginx-prometheus-exporter-fips, spire-controller-manager-fips, docker-credential-ecr-login-fips, k8ssandra-client-fips, newrelic-fluent-bit-output, terraform-provider-azuread, neuvector-dbgen-fips, src, openbao-k8s-fips, kafka-proxy, tfsec, hubble-ui, langfuse,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: nodetaint, seaweedfs, rclone, grafana-operator, skaffold, rancher-system-agent, nats, pombump, helm-docs, podman, sftpgo-plugin-eventstore, pguser, spiffe-helper, steampipe, k9s, kubernetes-dashboard-auth, chisel, polaris, kuberlr, pgtimetable, tfsec, mockery, juicef...

AZL-71638 CVE-2025-65637 affecting package prometheus for versions less than 2.37.9-6

A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" and the writer pipe is closed, leaving...

Moderate: Red Hat Security Advisory: Cost Management Metrics Operator Update

Cost Management Metrics Operator version 4.3.0 release. The Cost Management Metrics Operator is a component of the Red Hat Cost Managment service for Openshift. The operator runs on the latest supported versions of Openshift. This operator obtains OpenShift usage data by querying Prometheus every...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: onepassword-operator, spire-controller-manager-fips, docker-credential-ecr-login-fips, k8ssandra-client-fips, flux, terraform-provider-azuread, livekit-egress, neuvector-dbgen-fips, custom-pod-autoscaler-operator, mockgen, aws-s3-controller, openbao-k8s-fips,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: onepassword-operator, spire-controller-manager-fips, docker-credential-ecr-login-fips, k8ssandra-client-fips, flux, terraform-provider-azuread, livekit-egress, neuvector-dbgen-fips, custom-pod-autoscaler-operator, mockgen, aws-s3-controller, openbao-k8s-fips,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: onepassword-operator, spire-controller-manager-fips, docker-credential-ecr-login-fips, k8ssandra-client-fips, flux, terraform-provider-azuread, livekit-egress, neuvector-dbgen-fips, custom-pod-autoscaler-operator, mockgen, aws-s3-controller, openbao-k8s-fips,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: onepassword-operator, spire-controller-manager-fips, docker-credential-ecr-login-fips, k8ssandra-client-fips, flux, terraform-provider-azuread, livekit-egress, neuvector-dbgen-fips, custom-pod-autoscaler-operator, mockgen, aws-s3-controller, openbao-k8s-fips,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: onepassword-operator, spire-controller-manager-fips, docker-credential-ecr-login-fips, k8ssandra-client-fips, flux, terraform-provider-azuread, livekit-egress, neuvector-dbgen-fips, custom-pod-autoscaler-operator, mockgen, aws-s3-controller, openbao-k8s-fips,...

CVE-2025-58183 vulnerabilities

Vulnerabilities for packages: onepassword-operator, spire-controller-manager-fips, docker-credential-ecr-login-fips, k8ssandra-client-fips, flux, terraform-provider-azuread, livekit-egress, neuvector-dbgen-fips, custom-pod-autoscaler-operator, mockgen, aws-s3-controller, openbao-k8s-fips,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: onepassword-operator, spire-controller-manager-fips, docker-credential-ecr-login-fips, k8ssandra-client-fips, flux, terraform-provider-azuread, livekit-egress, neuvector-dbgen-fips, custom-pod-autoscaler-operator, mockgen, aws-s3-controller, openbao-k8s-fips,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: onepassword-operator, spire-controller-manager-fips, docker-credential-ecr-login-fips, k8ssandra-client-fips, flux, terraform-provider-azuread, livekit-egress, neuvector-dbgen-fips, custom-pod-autoscaler-operator, mockgen, aws-s3-controller, openbao-k8s-fips,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: onepassword-operator, spire-controller-manager-fips, docker-credential-ecr-login-fips, k8ssandra-client-fips, flux, terraform-provider-azuread, livekit-egress, neuvector-dbgen-fips, custom-pod-autoscaler-operator, mockgen, aws-s3-controller, openbao-k8s-fips,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: onepassword-operator, spire-controller-manager-fips, docker-credential-ecr-login-fips, k8ssandra-client-fips, flux, terraform-provider-azuread, livekit-egress, neuvector-dbgen-fips, custom-pod-autoscaler-operator, mockgen, aws-s3-controller, openbao-k8s-fips,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: onepassword-operator, spire-controller-manager-fips, docker-credential-ecr-login-fips, k8ssandra-client-fips, flux, terraform-provider-azuread, livekit-egress, neuvector-dbgen-fips, custom-pod-autoscaler-operator, mockgen, aws-s3-controller, openbao-k8s-fips,...