CVE-2024-51744 affecting package flannel for versions less than 0.24.2-13

CVE-2024-51744 affecting package flannel for versions less than 0.24.2-13. A patched version of the package is available...

flannel-0.26.6-1.1 on GA media (moderate)

flannel-0.26.6-1.1 on GA media Announcement ID: openSUSE-SU-2025:14989-1 Rating: moderate Cross-References: CVE-2025-30204 CVSS scores: CVE-2025-30204 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-30204 SUSE : 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N...

OPENSUSE-SU-2025:14989-1 flannel-0.26.6-1.1 on GA media

These are all security issues fixed in the flannel-0.26.6-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-30204 affecting package flannel for versions less than 0.24.2-12

CVE-2025-30204 affecting package flannel for versions less than 0.24.2-12. A patched version of the package is available...

AZL-59159 CVE-2025-30204 affecting package flannel for versions less than 0.24.2-12

golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits via a call to strings.Split its argument which is untrusted data on periods. As a result, in the face of a malicious request whose...

CVE-2023-44487 affecting package flannel for versions less than 0.14.0-18

CVE-2023-44487 affecting package flannel for versions less than 0.14.0-18. A patched version of the package is available...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: delve, yam, s5cmd, kwok, cass-operator, secrets-store-csi-driver-provider-aws, gobuster, gomplate, nri-mongodb, kine, wazero, flux-image-reflector-controller, kyverno-policy-reporter, aws-flb-kinesis, mockery, cluster-proportional-autoscaler,...

CVE-2023-45288 affecting package flannel for versions less than 0.24.2-10

CVE-2023-45288 affecting package flannel for versions less than 0.24.2-10. A patched version of the package is available...

flannel-0.26.4-1.1 on GA media (moderate)

flannel-0.26.4-1.1 on GA media Announcement ID: openSUSE-SU-2025:14744-1 Rating: moderate Cross-References: CVE-2023-45288 CVSS scores: CVE-2023-45288 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2023-45288 SUSE : 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N...

OPENSUSE-SU-2025:14744-1 flannel-0.26.4-1.1 on GA media

These are all security issues fixed in the flannel-0.26.4-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-24786 affecting package flannel for versions less than 0.24.2-8

CVE-2024-24786 affecting package flannel for versions less than 0.24.2-8. A patched version of the package is available...

Photon OS 4.0: Flannel PHSA-2023-4.0-0427

An update of the flannel package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0427. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 3.0: Flannel PHSA-2023-3.0-0631

An update of the flannel package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-3.0-0631. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Flannel PHSA-2023-5.0-0049

An update of the flannel package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-0049. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

OPENSUSE-SU-2024:10761-1 flannel-0.14.0-1.2 on GA media

These are all security issues fixed in the flannel-0.14.0-1.2 package on the GA media of openSUSE Tumbleweed...

AZL-38659 CVE-2023-45288 affecting package flannel for versions less than 0.24.2-10

An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no...

conmon security update

conmon 2.1.3-8 - address CVE-2023-39326 cri-o 1.26.4-1 - Added Oracle Specific Files for cri-o - Cherry-picked upstream commits for OCPBUGS-17150: oci: simplify stopping code https://github.com/cri-o/cri-o/pull/7185 - Fixed CVE-2023-39325: bump golang.org/x/net to v0.17.0 cri-tools 1.26.1-4 -...

conmon security update

conmon 2.1.3-8 - address CVE-2023-39326 cri-o 1.26.4-1 - Added Oracle Specific Files for cri-o - Cherry-picked upstream commits for OCPBUGS-17150: oci: simplify stopping code https://github.com/cri-o/cri-o/pull/7185 - Fixed CVE-2023-39325: bump golang.org/x/net to v0.17.0 cri-tools 1.26.1-4 -...

AZL-35645 CVE-2024-24786 affecting package flannel for versions less than 0.24.2-8

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

conmon security update

conmon 2.1.3-8 - address CVE-2023-39326 2.1.3-7 - Resolve CVE-2023-39325 2.1.3-6 - Add ol8baseoslatest, and ol9baseoslatest, to Jenkinsfile 2.1.3-5 - Add systemd-devel as build requirement 2.1.3-4 - Add support ARM build 2.1.3.3 - Add OL9 support 2.1.3.2 - Update inline with Linux team building...