Vulnerabilidades

Vulnerabilidades críticas que el gate ya conoce.

Cada seis horas Attestkeep descarga la Trivy vulnerability database, la misma que el scanner lee dentro de su cluster. Estas son las entradas que la database calificó como críticas esta semana, y cuándo. No cuándo salió la noticia: cuándo lo supo el gate.

Última actualización de la database27 oct 2026, 19:17 UTC

29crítica, últimos 7 días 411alta, últimos 7 días 649media, últimos 7 días 145baja, últimos 7 días

ID	Vulnerabilidad	Calificada desde	Publicada
SUSE-SU-2026:24333-1 alta	Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise Micro 6.0)	27 oct 2026build de las 19:17 UTC
SUSE-SU-2026:24334-1 alta	Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise Micro 6.0)	27 oct 2026build de las 19:17 UTC
SUSE-SU-2026:24335-1 alta	Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise Micro 6.0)	27 oct 2026build de las 19:17 UTC
SUSE-SU-2026:24336-1 alta	Security update for the Linux Kernel RT (Live Patch 28 for SUSE Linux Enterprise Micro 6.0)	27 oct 2026build de las 19:17 UTC
SUSE-SU-2026:24337-1 alta	Security update for the Linux Kernel (Live Patch 28 for SUSE Linux Enterprise Micro 6.0)	27 oct 2026build de las 19:17 UTC
SUSE-SU-2026:24338-1 alta	Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise Micro 6.0)	27 oct 2026build de las 19:17 UTC
SUSE-SU-2026:24339-1 alta	Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise Micro 6.0)	27 oct 2026build de las 19:17 UTC
SUSE-SU-2026:24340-1 alta	Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise Micro 6.0)	27 oct 2026build de las 19:17 UTC
SUSE-SU-2026:24341-1 alta	Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise Micro 6.0)	27 oct 2026build de las 19:17 UTC
SUSE-SU-2026:24342-1 alta	Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise Micro 6.0)	27 oct 2026build de las 19:17 UTC
SUSE-SU-2026:24343-1 alta	Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise Micro 6.0)	27 oct 2026build de las 19:17 UTC
SUSE-SU-2026:24344-1 alta	Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise Micro 6.0)	27 oct 2026build de las 19:17 UTC
SUSE-SU-2026:24345-1 alta	Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise Micro 6.0)	27 oct 2026build de las 19:17 UTC
SUSE-SU-2026:24346-1 alta	Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise Micro 6.0)	27 oct 2026build de las 19:17 UTC
SUSE-SU-2026:24347-1 alta	Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise Micro 6.0)	27 oct 2026build de las 19:17 UTC
SUSE-SU-2026:24348-1 alta	Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise Micro 6.0)	27 oct 2026build de las 19:17 UTC
SUSE-SU-2026:24349-1 alta	Security update for the Linux Kernel RT (Live Patch 27 for SUSE Linux Enterprise Micro 6.0)	27 oct 2026build de las 19:17 UTC
SUSE-SU-2026:24350-1 alta	Security update for the Linux Kernel RT (Live Patch 26 for SUSE Linux Enterprise Micro 6.0)	27 oct 2026build de las 19:17 UTC
SUSE-SU-2026:24351-1 alta	Security update for the Linux Kernel RT (Live Patch 25 for SUSE Linux Enterprise Micro 6.0)	27 oct 2026build de las 19:17 UTC
SUSE-SU-2026:24352-1 alta	Security update for the Linux Kernel RT (Live Patch 24 for SUSE Linux Enterprise Micro 6.0)	27 oct 2026build de las 19:17 UTC
SUSE-SU-2026:24353-1 alta	Security update for the Linux Kernel RT (Live Patch 21 for SUSE Linux Enterprise Micro 6.0)	27 oct 2026build de las 19:17 UTC
SUSE-SU-2026:24354-1 alta	Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise Micro 6.0)	27 oct 2026build de las 19:17 UTC
SUSE-SU-2026:24355-1 alta	Security update for the Linux Kernel RT (Live Patch 23 for SUSE Linux Enterprise Micro 6.0)	27 oct 2026build de las 19:17 UTC
SUSE-SU-2026:24356-1 alta	Security update for the Linux Kernel RT (Live Patch 22 for SUSE Linux Enterprise Micro 6.0)	27 oct 2026build de las 19:17 UTC
SUSE-SU-2026:24357-1 alta	Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)	27 oct 2026build de las 19:17 UTC
SUSE-SU-2026:24359-1 alta	Security update for go1.26	27 oct 2026build de las 19:17 UTC
SUSE-SU-2026:24360-1 alta	Security update for go1.27	27 oct 2026build de las 19:17 UTC
SUSE-SU-2026:24362-1 alta	Security update for cpupower	27 oct 2026build de las 19:17 UTC
SUSE-SU-2026:4904-1 alta	Security update for python, python-base, python-doc	27 oct 2026build de las 19:17 UTC
SUSE-SU-2026:4907-1 alta	Security update for openssh8.4	27 oct 2026build de las 19:17 UTC
SUSE-SU-2026:4909-1 alta	Security update for squid	27 oct 2026build de las 19:17 UTC
SUSE-SU-2026:4913-1 alta	Security update for gcc7	27 oct 2026build de las 19:17 UTC
openSUSE-SU-2026:12268-1 alta	azure-storage-azcopy-10.34.1-1.1 on GA media	27 oct 2026build de las 19:17 UTC
openSUSE-SU-2026:12271-1 alta	kured-1.23.0-1.1 on GA media	27 oct 2026build de las 19:17 UTC
CVE-2026-116260 alta	libimobiledevice: libimobiledevice: Denial of Service via double free in service_receive	27 oct 2026build de las 07:13 UTC	26 oct 2026
CVE-2026-104849 alta	tinypool: Tinypool: Prototype Pollution Gadget to RCE in run() options	27 oct 2026build de las 07:13 UTC	2 oct 2026
CVE-2026-116124 alta	libgsf: libgsf: Arbitrary code execution via heap-based buffer overflow in OLE2 parser	27 oct 2026build de las 01:25 UTC	26 oct 2026
CVE-2026-105483 alta	nodejs: nodejs: TLS certificate hostname bypass via fullwidth-digit IP hostnames	27 oct 2026build de las 01:25 UTC	23 oct 2026
CVE-2026-55888 alta	xdg-desktop-portal: xdg-desktop-portal: Unauthorized host file access via unvalidated FileChooser filenames	27 oct 2026build de las 01:25 UTC	23 oct 2026
CVE-2026-110354 alta	haproxy: haproxy: Denial of Service via specially crafted HTTP/1.1 chunked request	27 oct 2026build de las 01:25 UTC	22 oct 2026
CVE-2026-110353 alta	haproxy: HAProxy: Denial of Service via truncated HTTP/2 PING frame	27 oct 2026build de las 01:25 UTC	22 oct 2026
CVE-2026-98869 alta	kernel: bpf: Infer zext_dst based on static register liveness analysis	27 oct 2026build de las 01:25 UTC	21 oct 2026
CVE-2023-7356 alta	kernel: Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID	27 oct 2026build de las 01:25 UTC	21 oct 2026
CVE-2026-111943 alta	crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates	27 oct 2026build de las 01:25 UTC	21 oct 2026
CVE-2026-113812 alta	perl-mozilla-ca: Mozilla::CA: TLS server impersonation via compromised intermediate certificates	27 oct 2026build de las 01:25 UTC	20 oct 2026
CVE-2025-71436 alta	raptor2: raptor2: arbitrary code execution via heap-based buffer overflow in language tag handling	27 oct 2026build de las 01:25 UTC	20 oct 2026
CVE-2026-112396 alta	pillow: pillow: arbitrary code execution via heap use-after-free during TIFF encoding	27 oct 2026build de las 01:25 UTC	19 oct 2026
CVE-2026-112258 alta	gimp: gimp: use-after-free in XCF loader via PROP_LINKED and PROP_SELECTION on channels	27 oct 2026build de las 01:25 UTC	19 oct 2026
CVE-2026-112395 alta	pillow: pillow: Information disclosure via crafted tiled TIFF image	27 oct 2026build de las 01:25 UTC	19 oct 2026
CVE-2026-112394 alta	pillow: pillow: Information disclosure via out-of-bounds read in raw decoders	27 oct 2026build de las 01:25 UTC	19 oct 2026

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.