16 matches found
openSUSE 16 Security Update : vexctl (openSUSE-SU-2026:21481-1)
The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21481-1 advisory. - CVE-2024-45337: golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto...
OPENSUSE-SU-2026:21481-1 Security update for vexctl
This update for vexctl fixes the following issues: - CVE-2024-45337: golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto bsc1234486. - CVE-2025-22868: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in...
GHSA-7MR4-XJXG-34G6 vulnerabilities
Vulnerabilities for packages: redka, kafka-proxy, cloud-provider-vsphere, terraform-provider-tls, secrets-store-csi-driver-provider-aws, falco-no-driver, gatus, kyverno-notation-aws, crossplane-provider-keycloak, mattermost, jitsucom-bulker, cerbos, grafana-mimir, spire-server,...
GHSA-P436-GJF2-799P vulnerabilities
Vulnerabilities for packages: openbao, flux-notification-controller, flux-helm-controller, incert, k3d, trufflehog, kyverno-notation-aws, vexctl, nerdctl, slsa-verifier, dive, ko, istio, trivy-operator, spire-server, flux-kustomize-controller, rancher-system-agent, zot, paranoia, dagdotdev,...
CVE-2025-15558 vulnerabilities
Vulnerabilities for packages: openbao, flux-notification-controller, flux-helm-controller, incert, k3d, trufflehog, kyverno-notation-aws, vexctl, nerdctl, slsa-verifier, dive, ko, istio, trivy-operator, spire-server, flux-kustomize-controller, rancher-system-agent, zot, paranoia, dagdotdev,...
GHSA-P436-GJF2-799P vulnerabilities
Vulnerabilities for packages: kyverno-policy-reporter-plugins-kyverno-fips, crossplane, cosign-fips, k3d, argo-workflows-fips, cloudbeat, tekton-pipelines-fips, xeol, rke2-runtime-fips, kyverno-policy-reporter-plugins-kyverno, dagdotdev, kwok, rke2-cloud-provider, guac, rancher-system-agent,...
CVE-2025-15558 vulnerabilities
Vulnerabilities for packages: kyverno-policy-reporter-plugins-kyverno-fips, crossplane, cosign-fips, k3d, argo-workflows-fips, cloudbeat, tekton-pipelines-fips, xeol, rke2-runtime-fips, kyverno-policy-reporter-plugins-kyverno, dagdotdev, kwok, rke2-cloud-provider, guac, rancher-system-agent,...
Security update for vexctl
This update for vexctl fixes the following issues: Update to version 0.4.1+git78.f951e3a: CVE-2025-22868: Unexpected memory consumption during token parsing in golang.org/x/oauth2. bsc1239186 CVE-2024-45337: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in...
SUSE-SU-2026:0592-1 Security update for vexctl
This update for vexctl fixes the following issues: - Update to version 0.4.1+git78.f951e3a: - CVE-2025-22868: Unexpected memory consumption during token parsing in golang.org/x/oauth2. bsc1239186 - CVE-2024-45337: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in...
OPENSUSE-SU-2026:10230-1 vexctl-0.4.1+git78.f951e3a-1.1 on GA media
These are all security issues fixed in the vexctl-0.4.1+git78.f951e3a-1.1 package on the GA media of openSUSE Tumbleweed...
CVE-2025-47906 vulnerabilities
Vulnerabilities for packages: checksec, secrets-store-csi-driver-provider-aws, vexctl, local-path-provisioner, rancher-machine, php-fpmexporter, container-object-storage-interface, grafana-operator, vault-k8s, kube-vip-cloud-provider, bank-vaults, confluent-common-docker,...
GHSA-GWRF-JF3H-W649 vulnerabilities
Vulnerabilities for packages: terraform-provider-time, blob-csi-fips, confluent-common-docker, dagdotdev, secrets-store-csi-driver-provider-aws-fips, karpenter, newrelic-fluent-bit-output, linkerd2-proxy-init, vault-k8s, configmap-reload-fips, php-fpmexporter, hivemind, knative-eventing,...
GHSA-FGQ5-Q76C-GX78 vulnerabilities
Vulnerabilities for packages: lazygit, stakater-reloader, skaffold, secrets-store-csi-driver-provider-aws, nri-kafka, up, newrelic-prometheus-configurator, wire-go, render-template, grpcurl, dask-gateway, kubeflow-pipelines, cass-operator, cue, kustomize, govulncheck, s5cmd, docker-cli,...
CVE-2024-21664 vulnerabilities
Vulnerabilities for packages: falcoctl, gitsign, tekton-chains, minio, vexctl, mc, spire-server, kubescape, boring-registry...