RHBA-2020:2785 Red Hat Bug Fix Advisory: OpenShift Container Platform 4.4.11 packages update

Bulletin has no description...

RHBA-2020:2804 Red Hat Bug Fix Advisory: OpenShift Container Platform 4.3.28 packages update

Bulletin has no description...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.12.65 bug fix and security update

Red Hat OpenShift Container Platform release 4.12.65 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a...

RHSA-2021:0172 Red Hat Security Advisory: OpenShift Container Platform 4.6.13 packages and security update

Bulletin has no description...

RHBA-2020:5356 Red Hat Bug Fix Advisory: OpenShift Container Platform 4.5.23 packages update

Bulletin has no description...

RHSA-2021:1016 Red Hat Security Advisory: OpenShift Container Platform 4.5.37 security update

Bulletin has no description...

RHBA-2020:5123 Red Hat Bug Fix Advisory: OpenShift Container Platform 4.4.31 packages update

Bulletin has no description...

RHSA-2020:5159 Red Hat Security Advisory: OpenShift Container Platform 4.6.6 security update

Bulletin has no description...

RHBA-2020:4229 Red Hat Bug Fix Advisory: OpenShift Container Platform 4.5.15 packages update

Bulletin has no description...

RHSA-2021:0956 Red Hat Security Advisory: OpenShift Container Platform 4.6.23 security update

Bulletin has no description...

RHSA-2020:5119 Red Hat Security Advisory: OpenShift Container Platform 4.5.20 packages and golang security update

Bulletin has no description...

Dockwatch Remote Command Execution Exploit

Dockwatch is a container management web UI for docker. It runs by default without authentication, although guidance is available for how to setup credentials for access. It has a Commands feature that allows a user to run docker commands such as inspect, network, ps. Prior to fix, it did not...

SUSE-SU-2024:3266-1 Security update for SUSE Manager Client Tools

This update fixes the following issues: golang-github-prometheus-prometheus: - Security issues fixed: CVE-2024-6104: Update go-retryablehttp to version 0.7.7 bsc1227038 CVE-2023-45142: Updated otelhttp to version 0.46.1 bsc1228556 - Require Go 1.20 for building - Migrate from disabled to manual...

tomcat security update

An update is available for tomcat. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages...

RLSA-2024:5693 Important: tomcat security update

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: tomcat: Improper Handling of Exceptional Conditions CVE-2024-34750 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...

tomcat security update

An update is available for tomcat. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages...

OpenShift Controller Manager Improper Privilege Management

A flaw was found in OpenShift. This issue occurs due to the misuse of elevated privileges in the OpenShift Container Platform's build process. During the build initialization step, the git-clone container is run with a privileged security context, allowing unrestricted access to the node. An...

GHSA-QQV8-PH7F-H3F7 OpenShift Builder has a path traversal, allows command injection in privileged BuildContainer

A flaw was found in openshift/builder. This vulnerability allows command injection via path traversal, where a malicious user can execute arbitrary commands on the OpenShift node running the builder container. When using the "Docker" strategy, executable files inside the privileged build containe...

GHSA-J8GH-87RX-C7W9 OpenShift Controller Manager Improper Privilege Management

A flaw was found in OpenShift. This issue occurs due to the misuse of elevated privileges in the OpenShift Container Platform's build process. During the build initialization step, the git-clone container is run with a privileged security context, allowing unrestricted access to the node. An...

CVE-2024-45496

A flaw was found in OpenShift. This issue occurs due to the misuse of elevated privileges in the OpenShift Container Platform's build process. During the build initialization step, the git-clone container is run with a privileged security context, allowing unrestricted access to the node. An...