GHSA-HQ6Q-C2X6-HMCH vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver-fips, kubernetes-dns-node-cache, nodetaint, ip-masq-agent, aws-ebs-csi-driver, spark-operator, aws-efs-csi-driver, prometheus-adapter...

GHSA-HQ6Q-C2X6-HMCH vulnerabilities

Vulnerabilities for packages: spark-operator, nodetaint, kubernetes-dns-node-cache, prometheus-adapter, aws-efs-csi-driver, ip-masq-agent...

CVE-2023-5528 vulnerabilities

Vulnerabilities for packages: spark-operator, nodetaint, kubernetes-dns-node-cache, prometheus-adapter, aws-efs-csi-driver, ip-masq-agent...

CVE-2023-5528 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver-fips, kubernetes-dns-node-cache, nodetaint, ip-masq-agent, aws-ebs-csi-driver, spark-operator, aws-efs-csi-driver, prometheus-adapter...

Medium: amazon-efs-utils

Issue Overview: efs-utils is a set of Utilities for Amazon Elastic File System EFS. A potential race condition issue exists within the Amazon EFS mount helper in efs-utils versions v1.34.3 and below. When using TLS to mount file systems, the mount helper allocates a local port for stunnel to...

GHSA-7FXM-F474-HF8W vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver-fips...

GHSA-Q78C-GWQW-JCMC vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, kubeflow-pipelines...

CVE-2023-3955 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, aws-efs-csi-driver, aws-efs-csi-driver-fips...

CVE-2023-3955 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, kubeflow-pipelines...

CVE-2023-3676 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver-fips...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kubernetes-csi-livenessprobe-fips, metrics-server-fips, bank-vaults-fips, falcoctl-fips, kubeflow-fips, kubescape, scorecard, kubevela, prometheus-stackdriver-exporter, slsa-verifier, aactl, dgraph, kiam, terraform-provider-sendgrid, volume-modifier-for-k8s-fips,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: terraform-provider-sendgrid, up, spark-operator, slsa-verifier, dgraph, cortex, kubescape, k3d, aactl, kubevela, scorecard, kubeflow, src, buildkitd...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: bank-vaults, flux-image-automation-controller, prometheus-statsd-exporter, node-problem-detector, pulumi-language-yaml, kubeflow-fips, sigstore-scaffolding, haproxy-ingress, flux-image-reflector-controller, kubevela, prometheus-mongodb-exporter,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: node-problem-detector, pulumi-language-yaml, kubeflow-fips, scorecard, sigstore-scaffolding, haproxy-ingress, kubevela, flux-source-controller, helm, terraform-provider-sendgrid, ip-masq-agent, pulumi-language-java, gitness, minio, kots, fuse-overlayfs-snapshotter,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: cortex, kaf, memcached-exporter, terraform, weaviate, hugo, flux-kustomize-controller, flux-helm-controller, nghttp2, rqlite, conftest, atlantis, haproxy-ingress, aactl, kpt, nri-prometheus, hey, buildkitd, flux-source-controller, nginx-mainline,...

SUSE SLES12 Security Update : aws-efs-utils.11048 (SUSE-SU-2023:1761-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:1761-1 advisory. - CVE-2022-46174: Fixed potential tlsport selection collision by using state file as tlsport lock file bsc1206737. Tenable has extracted the...

SUSE-SU-2023:1761-1 Security update for aws-efs-utils.11048

This update for aws-efs-utils.11048 fixes the following issues: - CVE-2022-46174: Fixed potential tlsport selection collision by using state file as tlsport lock file bsc1206737...

Security Bulletin: Vulnerability in EFS affects AIX (CVE-2021-29861)

Summary UPDATED Mar 17 Corrected the affected upper fileset levels for AIX 7.1 TL5 to show that SP11 is affected. Added iFix for 7.1 TL5 SP11 There is a vulnerability in EFS that affects AIX. Vulnerability Details CVEID:CVE-2021-29861 DESCRIPTION: IBM AIX could allow a non-privileged local user t...

SUSE: Security Advisory (SUSE-SU-2023:0423-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15 / openSUSE 15 Security Update : aws-efs-utils (SUSE-SU-2023:0423-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:0423-1 advisory. - Updated to version 1.34.5: - CVE-2022-46174: Fixed a race condition when mounting filesystems using TLS, which could result ...