SUSE (Organization): news timeline & CVEs

SUSE Linux security advisory (AV26-974)

Canadian Cyber Centre relayed SUSE advisory AV26-974 covering Rancher flaws including stored XSS, session issues, and cross-tenant secret disclosure; patches advised.

The Canadian Centre for Cyber Security issued advisory AV26-974 for SUSE Rancher vulnerabilities affecting numerous versions across release lines up to 2.15.2. The flaws include unauthenticated update of public UI settings leading to stored cross-site scripting, sessions not revoked server-side on logout, Fleet agent copying downstream resources with cluster-admin privileges allowing cross-namespace writes, and cross-tenant BundleDeployment and Secret disclosure via spoofed cluster labels during agent-initiated registration. Users and administrators are urged to apply updates as they become available.

Canadian Centre for Cyber SecuritySep 29, 14:33 UTC · 13h agoAdvisory 2 sources

NVIDIA Launches Open Agent Safety Platform: OpenShell Sandboxes Agents on Vera CPUs While Sentry on BlueField-4 Quarantines Them in Milliseconds

NVIDIA launched Open Agent Safety Platform, pairing OpenShell sandboxes with a BlueField-4 watchdog.

NVIDIA launched the Open Agent Safety Platform, pairing the Apache 2.0 OpenShell runtime with Sentry, an out-of-band watchdog on BlueField-4 DPUs. OpenShell isolates each agent in a container or MicroVM and enforces filesystem, process, credential, and hot-reloadable network policy; Sentry uses NVIDIA DOCA to inspect requests and can quarantine an agent in milliseconds even if the host runtime is compromised. The stack is optimized for Vera CPUs, which NVIDIA says can run sandboxes up to 80% faster, and can be enabled on existing Vera plus BlueField-4 systems by a software update. More than 100 organizations are involved, including Anthropic, Salesforce, SAP, Red Hat, and Microsoft, through the Linux Foundation's Open Secure AI Alliance.

MarkTechPostupdated Sep 29, 18:35 UTC · 9h agofirst Sep 28, 19:21 UTC · 1d agoAI safety & security 16 sources2

SUSE Linux security advisory (AV26-968)

Canadian Cyber Centre warns SUSE NeuVector packet-capture filter command injection enables remote code execution on Kubernetes nodes; update advised.

The Canadian Centre for Cyber Security issued advisory AV26-968 on September 28, 2026, covering a vulnerability in SUSE NeuVector affecting versions prior to 5.4.11, 5.5.4, and 5.6.2. The flaw is an OS command injection in the packet-capture (sniffer) filter that can lead to remote code execution on Kubernetes nodes. Users and administrators are encouraged to review the linked SUSE update advisories and apply patches.

Canadian Centre for Cyber Securityupdated Sep 29, 14:33 UTC · 13h agofirst Sep 28, 18:26 UTC · 1d agoAdvisory 2 sources

SUSE

Timeline3 articles

Appears with

SUSE Linux security advisory (AV26-974)

NVIDIA Launches Open Agent Safety Platform: OpenShell Sandboxes Agents on Vera CPUs While Sentry on BlueField-4 Quarantines Them in Milliseconds

SUSE Linux security advisory (AV26-968)