Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -5 articles for you...
202
security advisorybuffer overflowDoSImportant Cloudflared Updates for openSUSE Leap 16.0 - ID 2026-20893-1
An update that solves 5 vulnerabilities and has 5 bug fixes can now be installed.. openSUSE security update: security update for cloudflared ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20893-1 Rating: important References: * bsc#1234582 * bsc#1239422 * bsc#1253918 * bsc#1265920 * bsc#1266794 Cross-References: * CVE-2024-45337 * CVE-2025-22869 * CVE-2025-58181 * CVE-2026-33814 * CVE-2026-39821 CVSS scores: * CVE-2024-45337 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2025-22869 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-22869 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-58181 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2025-58181 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-33814 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-39821 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-39821 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N Affected Products: openSUSE Leap 16.0 ------------------------------------------------------------- An update that solves 5 vulnerabilities and has 5 bug fixes can now be installed. Description: This update for cloudflared fixes the following issues: Changes in cloudflared: - Update version to 2026.5.2 * Add more information to proxy-dns removal message * Update tail command to use /management/logs endpoint * Add cloudflared management token command * Fix bugs * Update golang.org/x/net to 0.55.0 (boo#1266794, boo#1265920, CVE-2026-39821 CVE-2026-33814) - Update version to 2026.2.0 * Fix bugs - Update version to 2025.11.1 * bump coredns to solve CVE * add vulncheck to cloudflared * Remove references to cloudflare-go * Add logging format as JSON * Centralize UDP origin proxy dialing as ingress service * Add virtualDNS service * Add OriginDialerService to include TCP * Add --dns-resolver-addrs flag * Remove P256Kyber768Draft00PQKex curve from nonFips curve preferences * Bump go-boring from 1.24.2 to 1.24.4 * Add metrics for virtual DNS origin * set proper url and hostname for cloudflared tail command * Add support for login interstitial auto closure * update fed callback url for login helper * Correct QUIC connection management for datagram handlers * Set endpoint in tunnel credentials when generating locally managed tunnel with a Fed token * Migrate cloudflared-ci pipelines to Gitlab CI * Add support for FedRAMP in originRequest Access config * Add buffers for UDP and ICMP datagrams in datagram v3 * Add write deadline for UDP origin writes * Improve metrics for datagram v3 * Force usage of go-boring 1.24 * Fix import of GPG keys when two keys are provided * Fix parameter order when uploading RPM .repo file to R2 * Add new datagram v3 feature flag * Bump datagram v3 write channel capacity * Fix upload of RPM repo file during double signing * Fix the cloudflared binary path used in the component test * Fix typo causing r2-release-next deployment to fail * Update from go1.24.6 to go1.24.9 * Fix systemd service installation hanging * Add cf-proxy-* to control response headers * Add pipelines for linux packaging * Prefix gitlab steps with operating system * Fix docker hub push step * Fix CVE-2025-58181 boo#1253918 * Fix CVE-2025-22869 boo#1239422 - Update version to 2025.6.0 * Remove dynamic reloading of features for datagram v3 * Add metric for unsupported RPC commands for datagram v3 * Add dynamic loading of features to connections via ConnectionOptionsSnapshot * Use is_default_network instead of is_default to create vnet's * Update go to 1.24 - Update version to 2025.4.2 * emit explicit errors for the service command on unsupported OSes * Fix some issues - Update version to 2024.12.1 * TUN-8748: Migrated datagram V3 flows to use migratedcontext * TUN-8737: update metrics server port selection * TUN-8731: Implement diag/system endpoint * TUN-8728: implement diag/tunnel endpoint * TUN-8730: implement diag/configuration * TUN-8735: add managed/local log collection * TUN-8733: add log collection for docker * TUN-8734: add log collection for kubernetes * TUN-8640: Refactor ICMPRouter to support new ICMPResponders * TUN-8729: implement network collection for diagnostic procedure * TUN-8727: implement metrics, runtime, system, and tunnelstate in diagnostic http client * TUN-8726: implement compression routine to be used in diagnostic procedure * TUN-8732: implement port selection algorithm * TUN-8762: fix argument order when invoking tracert and modify network info output parsing * TUN-8769: fix k8s log collector arguments * TUN-8727: extend client to include function to get cli configuration and tunnel configuration * TUN-8725: implement diagnostic procedure * TUN-8767: include raw output from network collector in diagnostic zip file * TUN-8770: add cli configuration and tunnel configuration to diagnostic zipfile * TUN-8768: add job report to diagnostic zipfile * TUN-8775: Make sure the session Close can only be called once * TUN-8781: Add Trixie, drop Buster. Default to Bookworm * TUN-8640: Add ICMP support for datagram V3 * TUN-8789: make python package installation consistent * TUN-8795: update createrepo to createrepo_c to fix the release_pkgs.py script - fix CVE-2024-45337 and boo#1234582 - Update version to 2024.11.1 * Add cloudflared tunnel health command * PPIP-2310: Update quick tunnel disclaimer * TUN-8621: Prevent QUIC connection from closing before grace period after unregistering * TUN-8484: Print response when QuickTunnel can't be unmarshalled * TUN-8592: Use metadata from the edge to determine if request body is empty for QUIC transport * TUN-8621: Fix cloudflared version in change notes to account for release date * TUN-8638: Add datagram v3serializers and deserializers * TUN-8685: Bump coredns dependency * TUN-8688: Correct UDP bind for IPv6 edge connectivity on macOS * TUN-8694: Fix github release script * TUN-8694: Rework release script * TUN-8661: Refactor connection methods to support future different datagram muxing methods * TUN-8692: remove dashes from session id * TUN-8708: Bump python min version to 3.10 * TUN-8667: Add datagram v3 session manager * TUN-8553: Bump go to 1.22.5 and go-boring 1.22.5-1 * TUN-8700: Add datagram v3 muxer * TUN-8646: Allow experimental feature support for datagram v3 * TUN-8641: Expose methods to simplify V3 Datagram parsing on the edge * VULN-66059: remove ssh server tests * TUN-8709: Add session migration for datagram v3 * TUN-8701: Add metrics and adjust logs for datagram v3 * add: new go-fuzz targets * TUN-8701: Simplify flow registration logs for datagram v3 Patch instructions: To install this openSUSE security update use the suse recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patch openSUSE-Leap-16.0-packagehub-295=1 Package List: - openSUSE Leap 16.0: cloudflared-2026.5.2-bp160.1.1 References: * https://www.suse.com/security/cve/CVE-2024-45337.html * https://www.suse.com/security/cve/CVE-2025-22869.html * https://www.suse.com/security/cve/CVE-2025-58181.html * https://www.suse.com/security/cve/CVE-2026-33814.html * https://www.suse.com/security/cve/CVE-2026-39821.html . Update released for openSUSE addressing 5 important security issues in cloudflared with bug fixes included.. openSUSE cloudflared security update important vulnerabilities. . Severity: Important. LinuxSecurity.com Team
Jun 03, 2026
•Important
OpenSUSE
202
security advisorymoderateDoSopenSUSE Tumbleweed cloudflared Moderate Vulnerability Update 2026-10908-1
An update that solves 2 vulnerabilities can now be installed.. # cloudflared-2026.5.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:10908-1 Rating: moderate Cross-References: * CVE-2026-33814 * CVE-2026-39821 CVSS scores: * CVE-2026-33814 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-39821 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-39821 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N Affected Products: * openSUSE Tumbleweed An update that solves 2 vulnerabilities can now be installed. ## Description: These are all security issues fixed in the cloudflared-2026.5.2-1.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * cloudflared 2026.5.2-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-33814.html * https://www.suse.com/security/cve/CVE-2026-39821.html . Update for openSUSE Tumbleweed addresses two moderate vulnerabilities in cloudflared, enhancing security.. openSUSE cloudflared security patch vulnerabilities. . Severity: moderate. LinuxSecurity.com Team
Jun 02, 2026
•moderate
OpenSUSE
202
security advisorymoderatesecurity issueopenSUSE Tumbleweed: cloudflared Moderate Vuln 2025:15763-1
An update that solves 2 vulnerabilities can now be installed.. # cloudflared-2025.11.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:15763-1 Rating: moderate Cross-References: * CVE-2025-22869 * CVE-2025-58181 CVSS scores: * CVE-2025-22869 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-22869 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-58181 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2025-58181 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N Affected Products: * openSUSE Tumbleweed An update that solves 2 vulnerabilities can now be installed. ## Description: These are all security issues fixed in the cloudflared-2025.11.1-1.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * cloudflared 2025.11.1-1.1 ## References: * https://www.suse.com/security/cve/CVE-2025-22869.html * https://www.suse.com/security/cve/CVE-2025-58181.html . Solve two vulnerabilities in cloudflared with this moderate severity update for openSUSE Tumbleweed.. openSUSE security update, cloudflared vulnerability, moderate risk fix, openSUSE advisory. . LinuxSecurity.com Team
Nov 26, 2025
OpenSUSE
202
security advisorymoderatesecurity updateopenSUSE: 2024:14585-1 moderate: cloudflared 2024.12.1-1.1 Advisory
An update that solves one vulnerability can now be installed.. # cloudflared-2024.12.1-1.1 on GA media Announcement ID: openSUSE-SU-2024:14585-1 Rating: moderate Cross-References: * CVE-2024-45337 CVSS scores: * CVE-2024-45337 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Tumbleweed An update that solves one vulnerability can now be installed. ## Description: These are all security issues fixed in the cloudflared-2024.12.1-1.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * cloudflared 2024.12.1-1.1 ## References: * https://www.suse.com/security/cve/CVE-2024-45337.html . Cloudflare agent version 2024.12.1-1.1 for openSUSE Tumbleweed has received a security patch, targeting vulnerability CVE-2024-45337, classified with moderate risk.. openSUSE security, cloudflared update, security advisory, moderate threat, CVE-2024-45337. . Severity: Important. LinuxSecurity.com Team
Dec 17, 2024
•Important
OpenSUSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!