openSUSE Security Updates Address Keybase and Flannel Vulnerabilities
Severity: Medium (Score: 45.8)
Sources: Linuxsecurity
Published: · Updated:
Keywords: opensuse, security, update, important, install, suse, recommended
Summary
openSUSE has released important security updates for two components: the Keybase client and Flannel. The Keybase client update (2026-0195) addresses vulnerabilities in versions 6.6.2 across multiple architectures, including aarch64 and x86_64. The Flannel update (2026-0149) resolves issues in version 0.28.4, also affecting various architectures. Both updates are critical for users of openSUSE Backports SLE-15-SP7. Users are advised to apply the patches using recommended methods like YaST or zypper. The updates aim to mitigate potential security risks associated with these components. No specific CVEs were mentioned in the articles. The updates are part of ongoing efforts to maintain security in open-source software environments. Key Points: • openSUSE released security updates for Keybase and Flannel components. • Keybase client version 6.6.2 and Flannel version 0.28.4 are affected. • Users should apply patches using YaST or zypper to mitigate risks.
Detailed Analysis
**Impact** openSUSE users running Backports SLE-15-SP7 are affected by vulnerabilities in Keybase Client and Flannel components. These issues potentially expose systems across multiple architectures (aarch64, i586, ppc64le, s390x, x86_64) to security risks, impacting organizations relying on these packages for secure communication and container networking. No specific sectors, geographies, or data breach details are provided. **Technical Details** The updates address security vulnerabilities in Keybase Client (version 6.6.2) and Flannel (version 0.28.4). No CVE identifiers, attack vectors, TTPs, malware, or infrastructure details are mentioned in the articles. Indicators of compromise (IOCs) and kill chain stages are not specified. **Recommended Response** Apply the patches immediately using SUSE recommended methods such as YaST online_update or the "zypper patch" command for Backports SLE-15-SP7. Specifically, install openSUSE-2026-195 for Keybase Client and openSUSE-2026-149 for Flannel. Monitor systems for unusual activity related to these components until patches are applied.
Source articles (2)
- openSUSE Keybase-Client Important Security Issues Update 2026-0195 — Linuxsecurity · 2026-06-09
To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openS… - openSUSE Backports SLE-15-SP7 Flannel Important Security Update 2026-0149 — Linuxsecurity · 2026-06-11
To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openS…
Timeline
- 2026-06-09 — openSUSE Keybase client update released: Security update 2026-0195 addresses vulnerabilities in Keybase client version 6.6.2 for multiple architectures.
- 2026-06-11 — openSUSE Flannel update released: Security update 2026-0149 fixes vulnerabilities in Flannel version 0.28.4, affecting various architectures.