OPENSUSE-SU-2026:12207-1 vexctl-0.4.4+git106.aa6ffc8-1.1 on GA media

These are all security issues fixed in the vexctl-0.4.4+git106.aa6ffc8-1.1 package on the GA media of openSUSE Tumbleweed...

GO-2023-2379 vulnerabilities

Vulnerabilities for packages: vexctl, gitsign, tekton-chains, kubescape, cosign-fips, falcoctl, falcoctl-fips...

GO-2024-2454 vulnerabilities

Vulnerabilities for packages: vexctl, external-secrets-fips, gitsign, mc, boring-registry, minio, kubescape, tekton-chains, cosign-fips, spire-server-fips, falcoctl, spire-server, falcoctl-fips...

GO-2024-2719 vulnerabilities

Vulnerabilities for packages: goreleaser, skaffold, spire-server-fips, falcoctl, melange, ko, falcoctl-fips, zot, chainctl, vexctl, policy-controller-fips, tekton-chains, kubescape, slsa-verifier, apko, policy-controller, tkn-fips, aactl, tekton-chains-fips, gitsign, wolfictl,...

GO-2023-2379 vulnerabilities

Vulnerabilities for packages: vexctl, gitsign, tekton-chains, kubescape, falcoctl...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: goreleaser, skaffold, falcoctl, ko, zot, vexctl, sigstore-scaffolding, tekton-chains, kubescape, buildkitd, tflint, policy-controller, gitsign, witness, flux-source-controller, neuvector-sigstore-interface, cosign, trivy, tkn, zarf, teleport, docker,...

GO-2024-2454 vulnerabilities

Vulnerabilities for packages: vexctl, gitsign, mc, boring-registry, minio, kubescape, tekton-chains, falcoctl, spire-server...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: oauth2-proxy, vexctl, tekton-chains, kubescape, slsa-verifier, terragrunt, argo-workflows, aactl, gitsign, rekor, dex, flux-source-controller, cosign, tkn, kots, fulcio, sops, spire-server, cloudflared, flux-kustomize-controller...

GO-2026-4311 vulnerabilities

Vulnerabilities for packages: kots, falco-no-driver, vexctl, aactl, sigstore-scaffolding, gitsign, tekton-chains, kubescape, slsa-verifier, witness, falcoctl, skopeo, cosign, zarf...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: goreleaser, skaffold, falcoctl, docker-cli-buildx, ko, zot, kyverno, vexctl, sigstore-scaffolding, tekton-chains, kubescape, slsa-verifier, buildkitd, tflint, policy-controller, aactl, gitsign, crossplane, witness, flux-source-controller, neuvector-sigstore-interface...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: goreleaser, skaffold, falcoctl, docker-cli-buildx, ko, zot, vexctl, sigstore-scaffolding, tekton-chains, kubescape, tflint, policy-controller, aactl, gitsign, witness, flux-source-controller, neuvector-sigstore-interface, cosign, tkn, zarf, teleport, ratify,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: goreleaser, skaffold, falcoctl, ko, zot, vexctl, sigstore-scaffolding, tekton-chains, kubescape, slsa-verifier, buildkitd, tflint, policy-controller, aactl, gitsign, rekor, witness, flux-source-controller, neuvector-sigstore-interface, cosign, trivy, tkn, zarf,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: goreleaser, flux-image-reflector-controller, snyk-cli, actions-runner-controller, crossplane-provider-azure-sql, src-fingerprint, crossplane-provider-azure-storage, argo-events, falcoctl, guac, k3d, kubevela, zot, crossplane-provider-azure-authorization, step-ca,...

openSUSE 16 Security Update : vexctl (openSUSE-SU-2026:21481-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21481-1 advisory. - CVE-2024-45337: golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto...

OPENSUSE-SU-2026:21481-1 Security update for vexctl

This update for vexctl fixes the following issues: - CVE-2024-45337: golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto bsc1234486. - CVE-2025-22868: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: eksctl, goreleaser, kube-fluentd-operator, rancher-machine, splunk-otel-collector, kubernetes-csi-external-health-monitor, oauth2-proxy, cloud-provider-azure, crossplane-provider-azure-sql, otel-cli, nerdctl, opa-envoy, terraform-provider-azuread, weaviate, falcoctl,...

GHSA-P436-GJF2-799P vulnerabilities

Vulnerabilities for packages: eksctl, rke2-cloud-provider, kubescape-operator, rancher-system-agent, flux-image-reflector-controller, vcluster, nerdctl, guac, k3d, ko, zot, kyverno, harbor-scanner-trivy, vexctl, dagdotdev, kargo, istio, incert, tekton-chains, slsa-verifier, vault-secrets-webhook,...

CVE-2025-15558 vulnerabilities

Vulnerabilities for packages: eksctl, rke2-cloud-provider, kubescape-operator, rancher-system-agent, flux-image-reflector-controller, vcluster, nerdctl, guac, k3d, ko, zot, kyverno, harbor-scanner-trivy, vexctl, dagdotdev, kargo, istio, incert, tekton-chains, slsa-verifier, vault-secrets-webhook,...

GHSA-P436-GJF2-799P vulnerabilities

Vulnerabilities for packages: eksctl, trivy-operator-fips, nerdctl, buildkitd-fips, trufflehog-fips, flux-fips, harbor-scanner-trivy, crossplane-fips, vexctl, flux-source-watcher, tekton-chains, slsa-verifier, harbor-fips, rke2-runtime, image-factory-fips, flux-source-watcher-fips, cloudbeat-fips...

CVE-2025-15558 vulnerabilities

Vulnerabilities for packages: eksctl, trivy-operator-fips, nerdctl, buildkitd-fips, trufflehog-fips, flux-fips, harbor-scanner-trivy, crossplane-fips, vexctl, flux-source-watcher, tekton-chains, slsa-verifier, harbor-fips, rke2-runtime, image-factory-fips, flux-source-watcher-fips, cloudbeat-fips...