OPENSUSE-SU-2026:21151-1 Security update for warewulf4

This update for warewulf4 fixes the following issues: Changes in warewulf4: - updated go-jose to fix CVE-2026-34986 bsc1262810 - chi is fixed in the upstream project - updating to v4.7.0 with following security fixes fixed CVE-2026-39821 bsc1266483 fixed CVE-2026-33814 bsc1265653 - v4.7.0 with...

CLEANSTART-2026-NJ50569 Security fixes for CVE-2026-34986, ghsa-78h2-9frx-2jm8 applied in versions: 0.48.1-r0

Multiple security vulnerabilities affect the melange package. These issues are resolved in later releases. See references for individual vulnerability details...

RHEL 9 : podman (RHSA-2026:19173)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:19173 advisory. The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods...

CLEANSTART-2026-FA95643 Security fixes for CVE-2026-33814, CVE-2026-34986, CVE-2026-39883, CVE-2026-39984, ghsa-pmwq-pjrm-6p5r applied in versions: 0.15.1-r0

Multiple security vulnerabilities affect the policy-controller package. These issues are resolved in later releases. See references for individual vulnerability details...

Fedora 44 : apptainer (2026-d516d12934)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-d516d12934 advisory. Update to upstream 1.5.0, fix CVE-2026-32285 and CVE-2026-34986 ---- Update to upstream 1.5.0-rc.2 ---- Update to upstream 1.5.0-rc.1 Tenable has...

openSUSE 16 Security Update : distribution (openSUSE-SU-2026:20686-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20686-1 advisory. This update for distribution fixes the following issues Security issues: - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to...

OPENSUSE-SU-2026:20711-1 Security update for hauler

This update for hauler fixes the following issues: Changes in hauler: - update to 1.4.3 bsc1262353, CVE-2026-39984, bsc1262942, CVE-2026-34986: 1.4 Bump go.opentelemetry.io/otel/sdk from 1.40.0 to 1.43.0 in the gomodules group across 1 directory 1.4 Bump github.com/sigstore/timestamp-authority/v2...

grafana-11.6.14+security01-2.1 on GA media (moderate)

grafana-11.6.14+security01-2.1 on GA media Announcement ID: openSUSE-SU-2026:10677-1 Rating: moderate Cross-References: CVE-2026-34986 CVSS scores: CVE-2026-34986 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-34986 SUSE : 8.7...

buildah security update

1.41.8-3.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117178 2:1.41.8-3 - rebuild for CVE-2026-34986 - Resolves: RHEL-165027...

Fedora 42 : opkssh (2026-245867ac28)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-245867ac28 advisory. Fix CVE-2026-34986 in bundled go-jose Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora: Security Advisory (FEDORA-2026-49fd0d9636)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2026-34986

creationtimestamp| type| source ---|---|--- 2026-04-06 17:21:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mitrngvcy22w 2026-04-06 18:26:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mitvbdh6do2s 2026-04-06 19:28:45+00:00| published-proof-of-concept|...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: knative-eventing, apko, grafana-mimir, ko, dgraph, keda, pulumi, vexctl, argo-workflows, kube-arangodb, tfsec, cloudflared, flux-source-controller, bank-vaults, skopeo, thanos, kiali, cert-manager, dagger, grafana-alloy, grpcurl, rancher-agent, flyte,...