Moderate: Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.5.2 security update

Red Hat OpenShift Service Mesh Containers for 2.5.2 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...

Important: Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.4.8 security update

Red Hat OpenShift Service Mesh Containers for 2.4.8 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: dex, crane, bom, prometheus-pushgateway-fips, hello-world-golang, prometheus-redis-exporter, etcd-fips, newrelic-infra-operator, ip-masq-agent, aws-flb-firehose-fips, dockerize-fips, gitleaks, mockery, osv-scanner, prometheus-stackdriver-exporter, harbor-registry,...

cri-o security update

cri-o 1.26.4-2 - Address CVE-2024-24786 cri-tools 1.26.1-5 - Address CVE-2024-24786 etcd 3.5.10-3 - Address protobuf CVE-2024-24786 3.5.10-1 - Added Oracle specific build files istio 1.17.8-3 - Address protobuf CVE-2024-24786 - Backport from 1.19.7 to address CVE-2024-23322, CVE-2024-23323,...

cri-o security update

cri-o 1.26.4-2 - Address CVE-2024-24786 cri-tools 1.26.1-5 - Address CVE-2024-24786 etcd 3.5.10-3 - Address protobuf CVE-2024-24786 3.5.10-1 - Added Oracle specific build files istio 1.17.8-3 - Address protobuf CVE-2024-24786 - Backport from 1.19.7 to address CVE-2024-23322, CVE-2024-23323,...

Moderate: Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.5.1 security update

Red Hat OpenShift Service Mesh Containers for 2.5.1 This update has a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section. Red Hat OpenShift...

cri-o security update

cri-o 1.25.5-2 - Address CVE-2024-24786 cri-tools 1.25.0-4 - Address CVE-2024-24786 etcd 3.5.9-4 - Address protobuf CVE-2024-24786 3.5.9-3 - Address CVE-2023-39326 by upgrading golang to version 1.20.12 istio 1.16.7-4 - Address protobuf CVE-2024-24786 - Backport from 1.19.7 to address...

cri-o security update

cri-o 1.25.5-2 - Address CVE-2024-24786 cri-tools 1.25.0-4 - Address CVE-2024-24786 etcd 3.5.9-4 - Address protobuf CVE-2024-24786 3.5.9-3 - Address CVE-2023-39326 by upgrading golang to version 1.20.12 istio 1.16.7-4 - Address protobuf CVE-2024-24786 - Backport from 1.19.7 to address...

olcne security update

1.8.1-2 - Cleanup spec file 1.8.1-1 - Fix OLM upgrade failure - upgrade from 0.17.0 to 0.23.1 failed due to a couple of crds missing - Add hostpathRequiresPrivilged value to rook template cr to be passed to module operator - Fixed Istio-1.18 and Istio-1.19 installation on aarch64 architecture -...

conmon security update

conmon 2.1.3-8 - address CVE-2023-39326 cri-o 1.26.4-1 - Added Oracle Specific Files for cri-o - Cherry-picked upstream commits for OCPBUGS-17150: oci: simplify stopping code https://github.com/cri-o/cri-o/pull/7185 - Fixed CVE-2023-39325: bump golang.org/x/net to v0.17.0 cri-tools 1.26.1-4 -...

conmon security update

conmon 2.1.3-8 - address CVE-2023-39326 cri-o 1.26.4-1 - Added Oracle Specific Files for cri-o - Cherry-picked upstream commits for OCPBUGS-17150: oci: simplify stopping code https://github.com/cri-o/cri-o/pull/7185 - Fixed CVE-2023-39325: bump golang.org/x/net to v0.17.0 cri-tools 1.26.1-4 -...

CVE-2024-28180 vulnerabilities

Vulnerabilities for packages: policy-controller, cosign, flux-source-controller, k3s, nerdctl, oauth2-proxy, rabbitmq-messaging-topology-operator, flux-kustomize-controller, sigstore-scaffolding, grpc-health-probe, caddy, step-ca, bank-vaults, gomplate, dex, guac, frp, melange, slsa-verifier, kot...

CVE-2024-28122 vulnerabilities

Vulnerabilities for packages: falcoctl-fips, external-secrets-fips, spire-server-fips, minio, mc-fips, boring-registry, boring-registry-fips, falcoctl, mc, minio-fips, spire-server...

GHSA-HJ3V-M684-V259 vulnerabilities

Vulnerabilities for packages: falcoctl-fips, external-secrets-fips, spire-server-fips, minio, mc-fips, boring-registry, boring-registry-fips, falcoctl, mc, minio-fips, spire-server...

GHSA-C5Q2-7R4C-MV6G vulnerabilities

Vulnerabilities for packages: dex, temporal-ui-server, tekton-chains, vexctl, aactl, sops, nerdctl, frp, kube-rbac-proxy, step-ca, k3s, slsa-verifier, rekor, timestamp-authority-fips, fulcio-fips, ko, skaffold, gomplate-fips, bank-vaults, fulcio, argo-workflows-fips, vault, policy-controller-fips...

GHSA-C5Q2-7R4C-MV6G vulnerabilities

Vulnerabilities for packages: policy-controller, cosign, flux-source-controller, k3s, nerdctl, oauth2-proxy, rabbitmq-messaging-topology-operator, flux-kustomize-controller, sigstore-scaffolding, grpc-health-probe, caddy, step-ca, bank-vaults, gomplate, dex, guac, frp, melange, slsa-verifier, kot...

BIT-ENVOY-2020-11767

Istio through 1.5.1 and Envoy through 1.14.1 have a data-leak issue. If there is a TCP connection negotiated with SNI over HTTPS to .example.com, a request for a domain concurrently configured explicitly e.g., abc.example.com is sent to the servers listening behind .example.com. The outcome shoul...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: dex, hubble, newrelic-infra-operator, flux, pulumi, kubernetes-csi-external-resizer, aactl, kubeflow-katib, atlantis-fips, crossplane-provider-aws-sns, k3s, docker-compose, mc-fips, bank-vaults, boring-registry, flux-image-reflector-controller,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: dex, hubble, newrelic-infra-operator, flux, pulumi, kubernetes-csi-external-resizer, aactl, kubeflow-katib, atlantis-fips, crossplane-provider-aws-sns, k3s, docker-compose, mc-fips, bank-vaults, boring-registry, flux-image-reflector-controller,...

conmon security update

conmon 2.1.3-8 - address CVE-2023-39326 2.1.3-7 - Resolve CVE-2023-39325 2.1.3-6 - Add ol8baseoslatest, and ol9baseoslatest, to Jenkinsfile 2.1.3-5 - Add systemd-devel as build requirement 2.1.3-4 - Add support ARM build 2.1.3.3 - Add OL9 support 2.1.3.2 - Update inline with Linux team building...