conmon security update

conmon 2.1.3-8 - address CVE-2023-39326 cri-o 1.25.5-1 - Added Oracle Specifile Files for cri-o cri-tools 1.25.0-3 - Resolve CVE-2023-39326 flannel-cni-plugin 1.0.1-4 - Resolve CVE-2023-39326 helm 3.11.1-3 - address CVE-2023-39326 istio 1.16.7-3 - Updated Golang to 1.20.12 to address CVE...

GHSA-R53H-JV2G-VPX6 vulnerabilities

Vulnerabilities for packages: cilium-cli, chartmuseum, flux-source-controller, kubevela, zarf, up, zot, eksctl, k8sgpt, helm-operator, kubescape, helm-push, flux-helm-controller, kots, trivy, k9s...

GHSA-V53G-5GJP-272R vulnerabilities

Vulnerabilities for packages: helm-push, k9s, cilium-cli, eksctl, chartmuseum, helm-operator, flux-helm-controller, kubevela, trivy, k8sgpt, kots, up, zarf, kubescape, zot, flux-source-controller...

CVE-2024-25620 vulnerabilities

Vulnerabilities for packages: cilium-cli, chartmuseum, flux-source-controller, kubevela, zarf, up, zot, eksctl, k8sgpt, helm-operator, kubescape, helm-push, flux-helm-controller, kots, trivy, k9s...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: k3d, aactl, skopeo, ctop, newrelic-infrastructure-agent, argo-workflows-fips, cosign-fips, flux, pulumi, k9s, flux-helm-controller, docker-machine-driver-harvester, trivy, guac, helm-operator-fips, kargo, crane, policy-controller-fips, nerdctl, policy-controller,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: k3d, aactl, skopeo, ctop, newrelic-infrastructure-agent, argo-workflows-fips, cosign-fips, flux, pulumi, k9s, flux-helm-controller, docker-machine-driver-harvester, trivy, guac, helm-operator-fips, kargo, crane, policy-controller-fips, nerdctl, policy-controller,...

CVE-2024-21664 vulnerabilities

Vulnerabilities for packages: spire-server, mc, vexctl, gitsign, kubescape, boring-registry, minio, falcoctl, tekton-chains...

conmon security update

conmon 2.1.3-7 - Resolve CVE-2023-39325 2.1.3-6 - Add ol8baseoslatest, and ol9baseoslatest, to Jenkinsfile 2.1.3-5 - Add systemd-devel as build requirement 2.1.3-4 - Add support ARM build cri-o 1.26.3-3 - Resolve CVE-2023-39325 1.26.3-2 - Add support for ARM build cri-tools 1.26.1-3 - Resolve...

conmon security update

conmon 2.1.3-7 - Resolve CVE-2023-39325 2.1.3-6 - Add ol8baseoslatest, and ol9baseoslatest, to Jenkinsfile 2.1.3-5 - Add systemd-devel as build requirement 2.1.3-4 - Add support ARM build cri-o 1.26.3-3 - Resolve CVE-2023-39325 1.26.3-2 - Add support for ARM build cri-tools 1.26.1-3 - Resolve...

GHSA-45X7-PX36-X8W8 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, aactl, step-ca, flux, actions-runner-controller, secrets-store-csi-driver, fq, tigera-operator, kubeflow, weaviate, node-problem-detector, temporal, crossplane-provider-aws, wavefront-collector-for-kubernetes, flux-image-reflector-controller,...

olcne security update

conmon 2.1.3-7 - Resolve CVE-2023-39325 2.1.3-6 - Add ol8baseoslatest, and ol9baseoslatest, to Jenkinsfile 2.1.3-5 - Add systemd-devel as build requirement 2.1.3-4 - Add support ARM build 2.1.3.3 - Add OL9 support 2.1.3.2 - Update inline with Linux team building conmon for all but OL7. cri-o...

GHSA-7F9X-GW85-8GRF vulnerabilities

Vulnerabilities for packages: vexctl, gitsign, kubescape, falcoctl, tekton-chains...

CVE-2023-49290 vulnerabilities

Vulnerabilities for packages: vexctl, gitsign, kubescape, falcoctl, tekton-chains...

CVE-2023-49290 vulnerabilities

Vulnerabilities for packages: vexctl, falcoctl-fips, tekton-chains, cosign-fips, kubescape, falcoctl, gitsign...

GHSA-2C7C-3MJ9-8FQH vulnerabilities

Vulnerabilities for packages: aactl, fulcio, cosign-fips, timestamp-authority-fips, spire-server, oauth2-proxy, bank-vaults-fips, flux-source-controller, tkn, spire-server-fips, slsa-verifier, kots, flux-kustomize-controller, vexctl, cloudflared, fulcio-fips, dex, falcoctl-fips, cosign,...

GHSA-2C7C-3MJ9-8FQH vulnerabilities

Vulnerabilities for packages: dex, terragrunt, gitsign, fulcio, oauth2-proxy, kots, flux-source-controller, aactl, tekton-chains, cosign, spire-server, argo-workflows, sops, kubescape, tkn, vexctl, cloudflared, rekor, slsa-verifier, flux-kustomize-controller...

Moderate: Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.4.5

Red Hat OpenShift Service Mesh 2.4.5 Containers Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...

Important: Red Hat Security Advisory: Kiali (Kiali 1.65.10) security update

An update is now available for Kiali Kiali 1.65.10 for RHEL 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

Important: Red Hat Security Advisory: Red Hat OpenShift Service Mesh for 2.4.4 security update

An update is now available for Red Hat OpenShift Service Mesh 2.4 for RHEL 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

Important: Red Hat Security Advisory: Red Hat OpenShift Service Mesh for 2.3.8 security update

An update is now available for Red Hat OpenShift Service Mesh 2.3 for RHEL 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...