Schwachstellen

Kritische Schwachstellen, die das Gate schon kennt.

Alle sechs Stunden holt Attestkeep die Trivy Vulnerability Database, dieselbe, die der Scanner in Ihrem Cluster liest. Das sind die Einträge, die die Database diese Woche als kritisch eingestuft hat, und wann. Nicht, wann die Nachricht kam: wann das Gate es wusste.

Database zuletzt aktualisiert27. Okt. 2026, 19:17 UTC

29kritisch, letzte 7 Tage 411hoch, letzte 7 Tage 649mittel, letzte 7 Tage 145niedrig, letzte 7 Tage

ID	Schwachstelle	Eingestuft seit	Veröffentlicht
SUSE-SU-2026:24333-1 hoch	Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise Micro 6.0)	27. Okt. 2026Build 19:17 UTC
SUSE-SU-2026:24334-1 hoch	Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise Micro 6.0)	27. Okt. 2026Build 19:17 UTC
SUSE-SU-2026:24335-1 hoch	Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise Micro 6.0)	27. Okt. 2026Build 19:17 UTC
SUSE-SU-2026:24336-1 hoch	Security update for the Linux Kernel RT (Live Patch 28 for SUSE Linux Enterprise Micro 6.0)	27. Okt. 2026Build 19:17 UTC
SUSE-SU-2026:24337-1 hoch	Security update for the Linux Kernel (Live Patch 28 for SUSE Linux Enterprise Micro 6.0)	27. Okt. 2026Build 19:17 UTC
SUSE-SU-2026:24338-1 hoch	Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise Micro 6.0)	27. Okt. 2026Build 19:17 UTC
SUSE-SU-2026:24339-1 hoch	Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise Micro 6.0)	27. Okt. 2026Build 19:17 UTC
SUSE-SU-2026:24340-1 hoch	Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise Micro 6.0)	27. Okt. 2026Build 19:17 UTC
SUSE-SU-2026:24341-1 hoch	Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise Micro 6.0)	27. Okt. 2026Build 19:17 UTC
SUSE-SU-2026:24342-1 hoch	Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise Micro 6.0)	27. Okt. 2026Build 19:17 UTC
SUSE-SU-2026:24343-1 hoch	Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise Micro 6.0)	27. Okt. 2026Build 19:17 UTC
SUSE-SU-2026:24344-1 hoch	Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise Micro 6.0)	27. Okt. 2026Build 19:17 UTC
SUSE-SU-2026:24345-1 hoch	Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise Micro 6.0)	27. Okt. 2026Build 19:17 UTC
SUSE-SU-2026:24346-1 hoch	Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise Micro 6.0)	27. Okt. 2026Build 19:17 UTC
SUSE-SU-2026:24347-1 hoch	Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise Micro 6.0)	27. Okt. 2026Build 19:17 UTC
SUSE-SU-2026:24348-1 hoch	Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise Micro 6.0)	27. Okt. 2026Build 19:17 UTC
SUSE-SU-2026:24349-1 hoch	Security update for the Linux Kernel RT (Live Patch 27 for SUSE Linux Enterprise Micro 6.0)	27. Okt. 2026Build 19:17 UTC
SUSE-SU-2026:24350-1 hoch	Security update for the Linux Kernel RT (Live Patch 26 for SUSE Linux Enterprise Micro 6.0)	27. Okt. 2026Build 19:17 UTC
SUSE-SU-2026:24351-1 hoch	Security update for the Linux Kernel RT (Live Patch 25 for SUSE Linux Enterprise Micro 6.0)	27. Okt. 2026Build 19:17 UTC
SUSE-SU-2026:24352-1 hoch	Security update for the Linux Kernel RT (Live Patch 24 for SUSE Linux Enterprise Micro 6.0)	27. Okt. 2026Build 19:17 UTC
SUSE-SU-2026:24353-1 hoch	Security update for the Linux Kernel RT (Live Patch 21 for SUSE Linux Enterprise Micro 6.0)	27. Okt. 2026Build 19:17 UTC
SUSE-SU-2026:24354-1 hoch	Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise Micro 6.0)	27. Okt. 2026Build 19:17 UTC
SUSE-SU-2026:24355-1 hoch	Security update for the Linux Kernel RT (Live Patch 23 for SUSE Linux Enterprise Micro 6.0)	27. Okt. 2026Build 19:17 UTC
SUSE-SU-2026:24356-1 hoch	Security update for the Linux Kernel RT (Live Patch 22 for SUSE Linux Enterprise Micro 6.0)	27. Okt. 2026Build 19:17 UTC
SUSE-SU-2026:24357-1 hoch	Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)	27. Okt. 2026Build 19:17 UTC
SUSE-SU-2026:24359-1 hoch	Security update for go1.26	27. Okt. 2026Build 19:17 UTC
SUSE-SU-2026:24360-1 hoch	Security update for go1.27	27. Okt. 2026Build 19:17 UTC
SUSE-SU-2026:24362-1 hoch	Security update for cpupower	27. Okt. 2026Build 19:17 UTC
SUSE-SU-2026:4904-1 hoch	Security update for python, python-base, python-doc	27. Okt. 2026Build 19:17 UTC
SUSE-SU-2026:4907-1 hoch	Security update for openssh8.4	27. Okt. 2026Build 19:17 UTC
SUSE-SU-2026:4909-1 hoch	Security update for squid	27. Okt. 2026Build 19:17 UTC
SUSE-SU-2026:4913-1 hoch	Security update for gcc7	27. Okt. 2026Build 19:17 UTC
openSUSE-SU-2026:12268-1 hoch	azure-storage-azcopy-10.34.1-1.1 on GA media	27. Okt. 2026Build 19:17 UTC
openSUSE-SU-2026:12271-1 hoch	kured-1.23.0-1.1 on GA media	27. Okt. 2026Build 19:17 UTC
CVE-2026-116260 hoch	libimobiledevice: libimobiledevice: Denial of Service via double free in service_receive	27. Okt. 2026Build 07:13 UTC	26. Okt. 2026
CVE-2026-104849 hoch	tinypool: Tinypool: Prototype Pollution Gadget to RCE in run() options	27. Okt. 2026Build 07:13 UTC	2. Okt. 2026
CVE-2026-116124 hoch	libgsf: libgsf: Arbitrary code execution via heap-based buffer overflow in OLE2 parser	27. Okt. 2026Build 01:25 UTC	26. Okt. 2026
CVE-2026-105483 hoch	nodejs: nodejs: TLS certificate hostname bypass via fullwidth-digit IP hostnames	27. Okt. 2026Build 01:25 UTC	23. Okt. 2026
CVE-2026-55888 hoch	xdg-desktop-portal: xdg-desktop-portal: Unauthorized host file access via unvalidated FileChooser filenames	27. Okt. 2026Build 01:25 UTC	23. Okt. 2026
CVE-2026-110354 hoch	haproxy: haproxy: Denial of Service via specially crafted HTTP/1.1 chunked request	27. Okt. 2026Build 01:25 UTC	22. Okt. 2026
CVE-2026-110353 hoch	haproxy: HAProxy: Denial of Service via truncated HTTP/2 PING frame	27. Okt. 2026Build 01:25 UTC	22. Okt. 2026
CVE-2026-98869 hoch	kernel: bpf: Infer zext_dst based on static register liveness analysis	27. Okt. 2026Build 01:25 UTC	21. Okt. 2026
CVE-2023-7356 hoch	kernel: Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID	27. Okt. 2026Build 01:25 UTC	21. Okt. 2026
CVE-2026-111943 hoch	crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates	27. Okt. 2026Build 01:25 UTC	21. Okt. 2026
CVE-2026-113812 hoch	perl-mozilla-ca: Mozilla::CA: TLS server impersonation via compromised intermediate certificates	27. Okt. 2026Build 01:25 UTC	20. Okt. 2026
CVE-2025-71436 hoch	raptor2: raptor2: arbitrary code execution via heap-based buffer overflow in language tag handling	27. Okt. 2026Build 01:25 UTC	20. Okt. 2026
CVE-2026-112396 hoch	pillow: pillow: arbitrary code execution via heap use-after-free during TIFF encoding	27. Okt. 2026Build 01:25 UTC	19. Okt. 2026
CVE-2026-112258 hoch	gimp: gimp: use-after-free in XCF loader via PROP_LINKED and PROP_SELECTION on channels	27. Okt. 2026Build 01:25 UTC	19. Okt. 2026
CVE-2026-112395 hoch	pillow: pillow: Information disclosure via crafted tiled TIFF image	27. Okt. 2026Build 01:25 UTC	19. Okt. 2026
CVE-2026-112394 hoch	pillow: pillow: Information disclosure via out-of-bounds read in raw decoders	27. Okt. 2026Build 01:25 UTC	19. Okt. 2026

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.