OPENSUSE-SU-2024:12667-1 helm-3.11.1-1.1 on GA media

These are all security issues fixed in the helm-3.11.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11430-1 terraform-provider-helm-2.0.0-1.4 on GA media

These are all security issues fixed in the terraform-provider-helm-2.0.0-1.4 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13295-1 helm-3.13.0-2.1 on GA media

These are all security issues fixed in the helm-3.13.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12323-1 helm-3.9.4-2.1 on GA media

These are all security issues fixed in the helm-3.9.4-2.1 package on the GA media of openSUSE Tumbleweed...

The vulnerability of the package manager for Kubernetes Helm, related to incorrect path name restrictions for restricted access directories, allows a malicious actor to save Helm Charts outside of the expected directory.

The vulnerability of the package manager for Kubernetes Helm is related to an incorrect restriction on the path name to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to store a Helm Chart outside of the expected directory...

CVE-2023-45288 affecting package helm for versions less than 3.14.2-2

CVE-2023-45288 affecting package helm for versions less than 3.14.2-2. A patched version of the package is available...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: spegel, kyverno-policy-reporter-ui, prometheus-operator, crane, ytt, gcsfuse, src-fingerprint, kube-rbac-proxy-fips, ollama, libnvidia-container, render-template, kots, direnv, docker-credential-ecr-login, vt-cli, nri-redis, xcaddy, kiam, runc,...

GO-2024-2866 Submariner Operator sets unnecessary RBAC permissions in helm charts in github.com/submariner-io/submariner-operator

Submariner Operator sets unnecessary RBAC permissions in helm charts in github.com/submariner-io/submariner-operator...

GO-2024-2575 Helm's Missing YAML Content Leads To Panic in helm.sh/helm/v3

Helm's Missing YAML Content Leads To Panic in helm.sh/helm/v3...

TotalCloud Container Security Best Practices

Qualys Container Security CS, an integral part of TotalCloud 2.0, provides a comprehensive view of the security posture of containerized applications. Operationalizing a new technology tool in an enterprise often presents its own challenges. This blog seeks to help the operations team familiarize...

CVE-2024-31216

The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. The source-controller implements the source.toolkit.fluxcd.io API and is a core component of the GitOps toolkit. Prior to versi...

CVE-2024-31216 source-controller leaks theAzure Storage SAS token into logs on connection errors

The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. The source-controller implements the source.toolkit.fluxcd.io API and is a core component of the GitOps toolkit. Prior to versi...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: spegel, kyverno-policy-reporter-ui, nats-server, neuvector-scanner, osv-scanner, prometheus-postgres-exporter, crane, kubernetes-dashboard-fips, step-ca-fips, redka, prometheus-adapter-fips, opa, govulncheck, paranoia, src-fingerprint, metrics-server, bom, dockerize,...

PT-2024-40461 · Renovate · Renovate

Name of the Vulnerable Software and Affected Versions: Renovate versions 37.158.0 through 37.199.0 Description: Attackers with commit access to the default branch of a repository using Renovate could manipulate registryAliases to execute arbitrary commands. This is due to the registryAliases...

CVE-2024-32473 vulnerabilities

Vulnerabilities for packages: cri-tools, kaniko, neuvector-scanner, policy-controller, dagger, policy-controller-fips, syft, docker-compose, helm-push, harbor-scanner-trivy, wolfictl, k3d, buf, grype, harbor-scanner-trivy-fips, melange...

CVE-2024-32473 vulnerabilities

Vulnerabilities for packages: policy-controller, k3d, cri-tools, grype, melange, kaniko, neuvector-scanner, wolfictl, syft, harbor-scanner-trivy, helm-push, docker-compose, buf, dagger...

GHSA-X84C-P2G9-RQV9 vulnerabilities

Vulnerabilities for packages: cri-tools, kaniko, neuvector-scanner, policy-controller, dagger, policy-controller-fips, syft, docker-compose, helm-push, harbor-scanner-trivy, wolfictl, k3d, buf, grype, harbor-scanner-trivy-fips, melange...

GHSA-X84C-P2G9-RQV9 vulnerabilities

Vulnerabilities for packages: policy-controller, k3d, cri-tools, grype, melange, kaniko, neuvector-scanner, wolfictl, syft, harbor-scanner-trivy, helm-push, docker-compose, buf, dagger...

Important: Red Hat Enhancement Advisory: Advisory for publishing Helm 3.13.2 GA release

GA release of Helm 3.13.2 for OpenShift Container Platform 4.15 This errata advisory is for publishing the GA release of Helm 3.13.2 for OpenShift Container Platform 4.15...

Corezoid helm 安全漏洞

Corezoid helm is a library. A security vulnerability exists in Corezoid helm version v6.5.0, which originates from a vulnerability that allows an attacker to redirect to an arbitrary website by appending a crafted /login/ link to the login page URL...