PT-2026-48933

Name of the Vulnerable Software and Affected Versions apptainer versions prior to 1.5.1 Description Incorrect path matching occurs within the limit container paths directive. This issue specifically affects SUID installations where paths listed in limit container paths are string prefixes of othe...

SUSE-SU-2026:2326-1 Security update for go1.25

This update for go1.25 fixes the following issues Update to go1.25.11 bsc1244485: - CVE-2026-27145: crypto/x509: split candidate hostname only once bsc1267450. - CVE-2026-42504: mime: quadratic complexity in WordDecoder.DecodeHeader bsc1267442. - CVE-2026-42507: net/textproto: arbitrary input are...

May 12, 2026—KB5089549 (OS Builds 26200.8457 and 26100.8457)

None None...

June 9, 2026—KB5094128 (OS Build 20348.5256)

None None...

June 9, 2026—KB5094126 (OS Builds 26200.8655 and 26100.8655)

None None...

May 12, 2026—KB5087539(OS Build 26100.32860)

None None...

June 9, 2026—KB5094125 (OS Build 26100.32995)

None None...

May 12, 2026—Hotpatch KB5089466 (OS Builds 26200.8390 and 26100.8390)

None None...

Security update for netty, netty-tcnative

This update for netty, netty-tcnative fixes the following issues CVE-2026-41417: missing validations leads to HTTP request smuggling and RTSP request injection via start-line injection in DefaultHttpRequest.setUri bsc1264350. CVE-2026-42578: HTTP Header Injection via HttpProxyHandler Disabled...

OPENSUSE-SU-2026:10987-1 perl-Git-Repository-1.326.0-1.1 on GA media

These are all security issues fixed in the perl-Git-Repository-1.326.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10981-1 grafana-11.6.14+security04-2.1 on GA media

These are all security issues fixed in the grafana-11.6.14+security04-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10982-1 graphite2-1.3.15-1.1 on GA media

These are all security issues fixed in the graphite2-1.3.15-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10978-1 SDL3_sound-devel-3.2.0-1.1 on GA media

These are all security issues fixed in the SDL3sound-devel-3.2.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10977-1 MozillaFirefox-151.0.3-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-151.0.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10990-1 python-M2Crypto-doc-0.48.0-1.1 on GA media

These are all security issues fixed in the python-M2Crypto-doc-0.48.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10985-1 libIex-3_4-33-3.4.12-1.1 on GA media

These are all security issues fixed in the libIex-34-33-3.4.12-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10979-1 agama-web-ui-21+360.16caae772-44.1 on GA media

These are all security issues fixed in the agama-web-ui-21+360.16caae772-44.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10980-1 flannel-0.28.5-1.1 on GA media

These are all security issues fixed in the flannel-0.28.5-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-48596

Name of the Vulnerable Software and Affected Versions OpenEXR versions 3.4.0 through 3.4.11 Description A heap buffer overflow occurs due to an integer overflow. A heap buffer overflow is a memory corruption issue where data is written beyond the boundaries of a buffer allocated on the heap,...

CLEANSTART-2026-VX15911 Security fixes for CVE-2023-45288, CVE-2023-48795, CVE-2024-24786, CVE-2024-45337, CVE-2024-45338, CVE-2025-22868, CVE-2025-22869, CVE-2025-22870, CVE-2025-22872, CVE-2025-47911, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181, CVE-2025-58190, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27140, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598 applied in versions: 2.10.1-r0, 2.10.1-r1, 2.10.1-r2

Multiple security vulnerabilities affect the kube-state-metrics package. These issues are resolved in later releases. See references for individual vulnerability details...