SUSE-SU-2026:0592-1 Security update for vexctl

This update for vexctl fixes the following issues: - Update to version 0.4.1+git78.f951e3a: - CVE-2025-22868: Unexpected memory consumption during token parsing in golang.org/x/oauth2. bsc1239186 - CVE-2024-45337: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in...

OPENSUSE-SU-2026:10230-1 vexctl-0.4.1+git78.f951e3a-1.1 on GA media

These are all security issues fixed in the vexctl-0.4.1+git78.f951e3a-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: confluent-common-docker, local-path-provisioner, rancher-machine, octo-sts, addon-resizer, docker-credential-ecr-login, gitsign, vault-benchmark, kuberay-operator, secrets-store-csi-driver-provider-aws, linkerd2-proxy-init, kubeflow-katib, sftpgo-plugin-pubsub,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-12.8, azuredisk-csi-fips, sftpgo-plugin-geoipfilter, confluent-common-docker, rancher-machine, cluster-api, k8sgpt-operator, pvc-autoresizer, linkerd2-proxy-init, blob-csi-fips, prometheus-beat-exporter-fips, modelmesh-runtime-adapter,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: sonobuoy, fuse-overlayfs-snapshotter, task, aws-flb-firehose, nri-elasticsearch, nodetaint, cadvisor, docker-credential-ecr-login, nri-mysql, flux-image-automation-controller, flux-image-reflector-controller, kuberay-operator, wireguard-go, sbomqs, logstash-exporter,...

CVE-2024-21664 vulnerabilities

Vulnerabilities for packages: boring-registry, mc, minio, falcoctl, kubescape, spire-server, tekton-chains, gitsign, vexctl...

CVE-2023-49290 vulnerabilities

Vulnerabilities for packages: falcoctl, kubescape, tekton-chains, gitsign, vexctl...

CVE-2023-49290 vulnerabilities

Vulnerabilities for packages: vexctl, falcoctl, cosign-fips, tekton-chains, kubescape, gitsign, falcoctl-fips...