GHSA-8XFX-RJ4P-23JM vulnerabilities

Vulnerabilities for packages: kubebuilder, influx, dgraph, nri-kafka, helm-docs, aws-flb-cloudwatch-fips, kubernetes-dns-node-cache-fips, gitea, cosign-fips, buf, cri-tools, docker-credential-gcr, nri-jmx, smarter-device-manager, nri-cassandra, crossplane-provider-aws-elasticache, fulcio-fips,...

GHSA-J7VJ-RW65-4V26 vulnerabilities

Vulnerabilities for packages: kubebuilder, influx, dgraph, nri-kafka, helm-docs, aws-flb-cloudwatch-fips, kubernetes-dns-node-cache-fips, gitea, cosign-fips, buf, cri-tools, docker-credential-gcr, nri-jmx, smarter-device-manager, nri-cassandra, crossplane-provider-aws-elasticache, fulcio-fips,...

GHSA-3F6R-QH9C-X6MM vulnerabilities

Vulnerabilities for packages: influx, beats-fips, kubernetes-dashboard-api, opa-fips-envoy, helm-docs, aws-flb-cloudwatch-fips, kubernetes-dns-node-cache-fips, gitea, cosign-fips, cri-tools, docker-credential-gcr, nri-jmx, smarter-device-manager, cloud-provider-azure-fips, nri-cassandra,...

Azure Linux 3.0 Security Update: application-gateway-kubernetes-ingress / cert-manager / cf-cli / cni / cni-plugins (CVE-2024-45338)

The version of application-gateway-kubernetes-ingress / cert-manager / cf-cli / cni / cni-plugins installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-45338 advisory. - An attacker can craft an input t...

CVE-2024-45338 affecting package cni-plugins for versions less than 1.4.0-2

CVE-2024-45338 affecting package cni-plugins for versions less than 1.4.0-2. A patched version of the package is available...

CVE-2024-45338 affecting package cni for versions less than 1.1.2-4

CVE-2024-45338 affecting package cni for versions less than 1.1.2-4. A patched version of the package is available...

CVE-2022-29526 affecting package cni for versions less than 1.1.2-4

CVE-2022-29526 affecting package cni for versions less than 1.1.2-4. A patched version of the package is available...

CVE-2024-45338 affecting package cni-plugins for versions less than 1.3.0-7

CVE-2024-45338 affecting package cni-plugins for versions less than 1.3.0-7. A patched version of the package is available...

CBL Mariner 2.0 Security Update: application-gateway-kubernetes-ingress / cert-manager / cf-cli / cni / cni-plugins (CVE-2024-45338)

The version of application-gateway-kubernetes-ingress / cert-manager / cf-cli / cni / cni-plugins installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-45338 advisory. - An attacker can craft an input t...

AZL-54542 CVE-2024-45338 affecting package cni-plugins for versions less than 1.3.0-7

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...

AZL-66912 CVE-2024-45338 affecting package cni for versions less than 1.0.1-20

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...

podman security update

5.2.2-9.0.1 - Add devices on container startup, not on creation - overlay: Put should ignore ENINVAL for Unmount Orabug: 36234694 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117404 4:5.2.2-9 - update to the latest content of...

Moderate: Red Hat Security Advisory: containernetworking-plugins security update

An update for containernetworking-plugins is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Moderate: containernetworking-plugins security update

The Container Network Interface CNI project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated...

ALSA-2024:9089 Moderate: containernetworking-plugins security update

The Container Network Interface CNI project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated...

CVE-2023-3978 affecting package cni-plugins for versions less than 1.3.0-6

CVE-2023-3978 affecting package cni-plugins for versions less than 1.3.0-6. A patched version of the package is available...

RLSA-2024:8110 Important: containernetworking-plugins security update

The Container Network Interface CNI project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated...

containernetworking-plugins security update

An update is available for containernetworking-plugins. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Container Network Interface CNI project consists of a...

CVE-2022-32149 affecting package cni for versions less than 1.1.2-3

CVE-2022-32149 affecting package cni for versions less than 1.1.2-3. A patched version of the package is available...

Important: Red Hat Security Advisory: containernetworking-plugins security update

An update for containernetworking-plugins is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...