SUSE-SU-2026:0592-1 Security update for vexctl

This update for vexctl fixes the following issues: - Update to version 0.4.1+git78.f951e3a: - CVE-2025-22868: Unexpected memory consumption during token parsing in golang.org/x/oauth2. bsc1239186 - CVE-2024-45337: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in...

OPENSUSE-SU-2026:10230-1 vexctl-0.4.1+git78.f951e3a-1.1 on GA media

These are all security issues fixed in the vexctl-0.4.1+git78.f951e3a-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: blobfuse2, addon-resizer, rancher-machine, pvc-autoresizer, kube-vip-cloud-provider, mongodb-kubernetes-operator, shfmt, lvm-driver, nats, docker-credential-ecr-login, grafana-operator, kserve-rest-proxy, git-lfs, vault-k8s, php-fpmexporter, ctop, k8sgpt-operator,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: gitsign, kubernetes-dashboard-fips, kubeflow-katib, node-problem-detector-fips, gostatsd, etcd-fips, eks-distro-fips, karma-fips, pvc-autoresizer, nvidia-nsight-compute-13.1, sftpgo-plugin-geoipfilter, wazero-fips, checksec, container-object-storage-interface,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: protoc-gen-go-grpc, kind, amass, shfmt, rqlite, nats, helm, skaffold, pulumi-kubernetes-operator, nats-server, gobuster, chartmuseum, php-fpmexporter, sbom-scorecard, ctop, controller-gen, prometheus-adapter, cri-tools, kubernetes-event-exporter,...

CVE-2024-21664 vulnerabilities

Vulnerabilities for packages: tekton-chains, kubescape, spire-server, gitsign, vexctl, falcoctl, boring-registry, mc, minio...

CVE-2023-49290 vulnerabilities

Vulnerabilities for packages: falcoctl-fips, cosign-fips, vexctl, falcoctl, kubescape, gitsign, tekton-chains...

CVE-2023-49290 vulnerabilities

Vulnerabilities for packages: tekton-chains, kubescape, gitsign, vexctl, falcoctl...