3504 matches found
Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines 1.10.6 release and security update
Red Hat OpenShift Pipelines 1.10.6 has been released. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in t...
Virtuozzo Hybrid Infrastructure 6.0 (6.0.0-243)
In this release, Virtuozzo Hybrid Infrastructure provides an upgrade of the Linux distribution, kernel, and toolset packages. This release also contains a range of new features that cover storage performance, object storage, as well as monitoring and alerts. Additionally, this release delivers...
CureIAM - Clean Accounts Over Permissions In GCP Infra At Scale
Clean up of over permissioned IAM accounts on GCP infra in an automated way CureIAM is an easy-to-use, reliable, and performant engine for Least Privilege Principle Enforcement on GCP cloud infra. It enables DevOps and Security team to quickly clean up accounts in GCP infra that have granted...
GHSA-3F2Q-6294-FMQ5 vulnerabilities
Vulnerabilities for packages: argo-events, argo-workflows, pulumi-kubernetes-operator, task, flux-notification-controller, melange, snyk-cli...
GHSA-3F2Q-6294-FMQ5 vulnerabilities
Vulnerabilities for packages: pulumi-kubernetes-operator, snyk-cli, argo-workflows, argo-events-fips, melange, task, argo-events, flux-notification-controller...
CVE-2023-46402 vulnerabilities
Vulnerabilities for packages: argo-events, argo-workflows, pulumi-kubernetes-operator, task, flux-notification-controller, melange, snyk-cli...
CVE-2023-46402 vulnerabilities
Vulnerabilities for packages: pulumi-kubernetes-operator, snyk-cli, argo-workflows, argo-events-fips, melange, task, argo-events, flux-notification-controller...
GHSA-HQ6Q-C2X6-HMCH vulnerabilities
Vulnerabilities for packages: kubernetes-dns-node-cache, aws-efs-csi-driver-fips, aws-ebs-csi-driver, spark-operator, prometheus-adapter, aws-efs-csi-driver, nodetaint, ip-masq-agent...
CVE-2023-5528 vulnerabilities
Vulnerabilities for packages: kubernetes-dns-node-cache, aws-efs-csi-driver-fips, aws-ebs-csi-driver, spark-operator, prometheus-adapter, aws-efs-csi-driver, nodetaint, ip-masq-agent...
GitLab 11.6 < 16.3.6 / 16.4 < 16.4.2 / 16.5 < 16.5.1 (CVE-2023-3399)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab EE affecting all versions starting from 11.6 before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1. It was...
GitLab 16.2 < 16.3.6 / 16.4 < 16.4.2 / 16.5 < 16.5.1 (CVE-2023-5825)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.2 before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1. A...
CVE-2023-47108 vulnerabilities
Vulnerabilities for packages: docker-compose, cri-tools, envoy-ratelimit, kubernetes-csi-external-resizer, temporal-server, kubernetes, kubevela, k3s, metrics-server, buildkitd, volume-modifier-for-k8s, temporal, kine, kubescape...
Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines Operator security update
An update is now available for OpenShift-Pipelines-1.11-RHEL-8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...
Rocky Linux 8 : container-tools:3.0 (RLSA-2021:4222)
The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:4222 advisory. - An information disclosure flaw was found in Buildah, when building containers using chroot isolation. Running processes in container builds e.g. Dockerfile RUN...
CVE-2023-3399
An issue has been discovered in GitLab EE affecting all versions starting from 11.6 before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1. It was possible for an unauthorised project or group member to read the CI/CD variables using the custom...
Design/Logic Flaw
An issue has been discovered in GitLab EE affecting all versions starting from 11.6 before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1. It was possible for an unauthorised project or group member to read the CI/CD variables using the custom...
CVE-2023-3399
The CVE-2023-3399 entry affects GitLab EE: unauthenticated access to CI/CD variables read via custom project templates by unauthorized project/group members. Affected versions are GitLab EE 11.6 up to 16.3.6, 16.4 up to 16.4.2, and 16.5 up to 16.5.1. The provided sources describe the issue and it...
CVE-2023-3399 Insertion of Sensitive Information Into Sent Data in GitLab
An issue has been discovered in GitLab EE affecting all versions starting from 11.6 before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1. It was possible for an unauthorised project or group member to read the CI/CD variables using the custom...
CVE-2023-3399
An issue has been discovered in GitLab EE affecting all versions starting from 11.6 before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1. It was possible for an unauthorised project or group member to read the CI/CD variables using the custom...
