PT-2025-29379

Name of the Vulnerable Software and Affected Versions Tanium versions affected versions not specified Trivy version 0.64.1 Description Tanium Benchmark had an issue with incorrect default permissions. Trivy version 0.64.1 was patched to address a key fix for container security. Recommendations At...

trivy-0.64.1-1.1 on GA media (moderate)

trivy-0.64.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:15341-1 Rating: moderate Cross-References: CVE-2025-53547 CVSS scores: CVE-2025-53547 SUSE : 8.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:H CVE-2025-53547 SUSE : 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H...

OPENSUSE-SU-2025:15341-1 trivy-0.64.1-1.1 on GA media

These are all security issues fixed in the trivy-0.64.1-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-53547 vulnerabilities

Vulnerabilities for packages: k8ssandra-client, rancher-helm, tw, helm-operator, k8sgpt, consul-k8s, cluster-api-helm-controller, kargo, eksctl, trivy, zot, envoy-gateway, linkerd2, cilium-cli, chartmuseum, helm-docs, flux-source-controller, istio, pluto, rancher-fleet, helm-push, kots,...

GHSA-557J-XG8C-Q2MM vulnerabilities

Vulnerabilities for packages: k8ssandra-client, rancher-helm, tw, helm-operator, k8sgpt, consul-k8s, cluster-api-helm-controller, kargo, eksctl, trivy, zot, envoy-gateway, linkerd2, cilium-cli, chartmuseum, helm-docs, flux-source-controller, istio, pluto, rancher-fleet, helm-push, kots,...

CVE-2025-53547 vulnerabilities

Vulnerabilities for packages: consul-k8s, flux, pluto, k8ssandra-client-fips, helm-operator, k8ssandra-client, linkerd2-fips, envoy-gateway-fips, helm-operator-fips, zarf, trivy-operator-fips, cerbos-fips, cluster-api-helm-controller, kargo, kots, linkerd2, rancher-helm, k9s, helm-push,...

GHSA-557J-XG8C-Q2MM vulnerabilities

Vulnerabilities for packages: consul-k8s, flux, pluto, k8ssandra-client-fips, helm-operator, k8ssandra-client, linkerd2-fips, envoy-gateway-fips, helm-operator-fips, zarf, trivy-operator-fips, cerbos-fips, cluster-api-helm-controller, kargo, kots, linkerd2, rancher-helm, k9s, helm-push,...

openSUSE Security Advisory (openSUSE-SU-2025:0080-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE 15 Security Update : trivy (openSUSE-SU-2025:0080-1)

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2025:0080-1 advisory. Update to version 0.59.1: - CVE-2025-27144: Fixed Go JOSE's Parsing Vulnerable to Denial of Service boo1237618. Tenable has extracted the preceding...

OPENSUSE-SU-2025:0080-1 Security update for trivy

This update for trivy fixes the following issues: Update to version 0.59.1: - CVE-2025-27144: Fixed Go JOSE's Parsing Vulnerable to Denial of Service boo1237618...

Security update for trivy (important)

openSUSE Security Update: Security update for trivy Announcement ID: openSUSE-SU-2025:0080-1 Rating: important References: 1237618 Cross-References: CVE-2025-27144 CVSS scores: CVE-2025-27144 SUSE: 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Affected Products: openSUSE...

OPENSUSE-SU-2025:14840-1 trivy-0.59.1-1.1 on GA media

These are all security issues fixed in the trivy-0.59.1-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: trust-manager-fips, prometheus-adapter, addon-resizer-fips, cloudflared, flux-notification-controller, melange, kpt, newrelic-infra-operator, k3d, prometheus-pushgateway-fips, metrics-server, k9s, secrets-store-csi-driver-provider-gcp, go-licenses, falcosidekick-fips...

openSUSE Security Advisory (openSUSE-SU-2024:0268-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (openSUSE-SU-2024:0269-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (openSUSE-SU-2025:0056-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE 15 Security Update : trivy (openSUSE-SU-2025:0056-1)

The remote openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025:0056-1 advisory. Update to version 0.58.2 boo1234512, CVE-2024-45337, boo1235265, CVE-2024-45338: fixmisconf: allow null values only for tf variables backport:...

OPENSUSE-SU-2025:0056-1 Security update for trivy

This update for trivy fixes the following issues: Update to version 0.58.2 boo1234512, CVE-2024-45337, boo1235265, CVE-2024-45338: fixmisconf: allow null values only for tf variables backport: release/v0.58 8238 fixsuse: SUSE - update OSType constants and references for compatility backport:...

Security update for trivy (moderate)

openSUSE Security Update: Security update for trivy Announcement ID: openSUSE-SU-2025:0056-1 Rating: moderate References: 1227010 1234512 1235265 Cross-References: CVE-2024-34155 CVE-2024-34156 CVE-2024-34158 CVE-2024-3817 CVE-2024-45337 CVE-2024-45338 CVE-2025-21613 CVE-2025-21614 CVSS scores:...

trivy-0.58.2-1.1 on GA media (moderate)

trivy-0.58.2-1.1 on GA media Announcement ID: openSUSE-SU-2025:14713-1 Rating: moderate Cross-References: CVE-2024-3817 CVE-2024-45337 CVE-2024-45338 CVE-2025-21613 CVSS scores: CVE-2024-45337 SUSE : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2024-45338 SUSE : 5.9...