GO-2024-2918 vulnerabilities

Vulnerabilities for packages: sigstore-scaffolding, sqlpad, nuclei, buildkitd, flux, rekor, falcoctl, fulcio, velero, sops, opentelemetry-collector-contrib, py3-cassandra-medusa, restic, spire-server, cortex, step-ca, wal-g, chezmoi, boring-registry, flyte, kubescape, timestamp-authority, zot,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: aws-otel-collector, k3d, flux, kind, migrate, nova, harbor-cli, docker-credential-gcr, docker-machine-driver-harvester, wire-go, polaris, kapp, containerd, pluto, steampipe, cloud-sql-proxy, ko, aws-privateca-issuer, conftest, zot, kube-logging-operator, hubble,...

Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.19.20 security, enhancement & bug fix update

Red Hat OpenShift Data Foundation 4.19.20 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.19.20 security, enhancement & bug fix update FIXED BUGS: ========== DFBUGS-7342: RHODF 4.19.20 release DFBUGS-7332: Backport for 4.19 - GSSODFMCG noobaa-db-pg-cluster won't...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: chisel, flux, kots, external-secrets-operator, trivy-operator, mods, docker-machine-driver-harvester, flux-notification-controller, gh, containerd, k9s, steampipe, act, ko, kubescape, minio, gomplate, zot, terraform-provider-tls, istio, ksops, age, k8sgpt, step, nfpm...

SUSE-SU-2026:21095-1 Security update for sqlite3

This update for sqlite3 fixes the following issues: Update sqlite3 to version 3.51.3: Security issues: - CVE-2025-7709: Integer Overflow in FTS5 Extension bsc1254670. - CVE-2025-70873: SQLite zipfile extension may disclose uninitialized heap memory during inflation bsc1259619. Non security issue:...

SUSE-SU-2026:21173-1 Security update for sqlite3

This update for sqlite3 fixes the following issues: Update sqlite3 to version 3.51.3: Security issues: - CVE-2025-7709: Integer Overflow in FTS5 Extension bsc1254670. - CVE-2025-70873: SQLite zipfile extension may disclose uninitialized heap memory during inflation bsc1259619. Non security issue:...

SUSE SLED15: libsqlite3-0 / libsqlite3-0-32bit / sqlite3 / sqlite3-devel / etc (SUSE-SU-2026:1065-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1065-1 advisory. Update sqlite3 to 3.51.3: - CVE-2025-7709: Integer Overflow in FTS5 Extension bsc1254670. -...

Security update for sqlite3

This update for sqlite3 fixes the following issues: Update sqlite3 to 3.51.3: CVE-2025-7709: Integer Overflow in FTS5 Extension bsc1254670. CVE-2025-70873: SQLite zipfile extension may disclose uninitialized heap memory during inflation bsc1259619. Changelog: Fix the WAL-reset database corruption...

SUSE-SU-2026:1065-1 Security update for sqlite3

This update for sqlite3 fixes the following issues: Update sqlite3 to 3.51.3: - CVE-2025-7709: Integer Overflow in FTS5 Extension bsc1254670. - CVE-2025-70873: SQLite zipfile extension may disclose uninitialized heap memory during inflation bsc1259619. Changelog: Fix the WAL-reset database...

SUSE-SU-2026:20771-1 Security update for sqlite3

This update for sqlite3 fixes the following issues: Update to sqlite3 3.51.3: - CVE-2025-7709: Integer Overflow in FTS5 Extension bsc1254670. - CVE-2025-70873: SQLite zipfile extension may disclose uninitialized heap memory during inflation bsc1259619. Changelog: Update to version 3.51.3: Fix the...

SUSE-SU-2026:0955-1 Security update for sqlite3

This update for sqlite3 fixes the following issues: Update to 3.51.3: - CVE-2025-7709: Integer Overflow in FTS5 Extension bsc1254670. - CVE-2025-70873: SQLite zipfile extension may disclose uninitialized heap memory during inflation bsc1259619. Changelog: Fix the WAL-reset database corruption bug...

Security update for sqlite3

This update for sqlite3 fixes the following issues: Update to 3.51.3: CVE-2025-7709: Integer Overflow in FTS5 Extension bsc1254670. CVE-2025-70873: SQLite zipfile extension may disclose uninitialized heap memory during inflation bsc1259619. Changelog: Fix the WAL-reset database corruption bug:...

SUSE-SU-2026:20794-1 Security update for sqlite3

This update for sqlite3 fixes the following issues: Update to version 3.51.3: - CVE-2025-7709: Integer Overflow in FTS5 Extension bsc1254670. - CVE-2025-70873: SQLite zipfile extension may disclose uninitialized heap memory during inflation bsc1259619. Changelog: Update to version 3.51.3: Fix the...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: gitsign, flux, kots, crossplane-provider-aws-eks, trivy-operator, grafana, flux-notification-controller, k9s, crossplane-provider-aws-dynamodb, kubescape, gomplate, crossplane-provider-keycloak, zot, crossplane-provider-family-aws, crossplane-provider-aws-ec2, ksops,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: gitsign, flux, kots, crossplane-provider-aws-eks, trivy-operator, grafana, flux-notification-controller, k9s, crossplane-provider-aws-dynamodb, kubescape, gomplate, crossplane-provider-keycloak, zot, crossplane-provider-family-aws, crossplane-provider-aws-ec2, ksops,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: cloudbeat, crossplane-provider-keycloak, guac, argo-rollouts, atlantis-fips, cerbos, docker, flux-helm-controller, sops-fips, omni-fips, tekton-pipelines-fips, helm-push, src-fingerprint-fips, vault, datadog-agent, gitea, terraform-provider-azuread, nfpm, trivy,...

EUVD-2023-0749

Malicious code in bioql PyPI...

SUSE-SU-2025:01799-1 Security update for postgresql, postgresql16, postgresql17

This update for postgresql, postgresql16, postgresql17 fixes the following issues: This update ships postgresql17 , and fixes security issues with postgresql16: - bsc1230423: Relax the dependency of extensions on the server version from exact major.minor to greater or equal, after Tom Lane...

CVE-2021-38599

WAL-G before 1.1, when a non-libsodium build e.g., one of the official binary releases published as GitHub Releases is used, silently ignores the libsodium encryption key and uploads cleartext backups. This is arguably a Principle of Least Surprise violation because "the user likely wanted to...

Malware in wal-eth

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...