RHEL 9 : podman (RHSA-2025:20909)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:20909 advisory. The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use...

ALSA-2025:20909 Important: podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fixes: database/sql: Postgres Scan Race Condition CVE-2025-47907 podman: Podman kube play comman...

Important: podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fixes: database/sql: Postgres Scan Race Condition CVE-2025-47907 podman: Podman kube play comman...

GHSA-VWQ2-JX9Q-9H9F Soft Serve is vulnerable to SSRF through its Webhooks

SUMMARY We have identified and verified an SSRF vulnerability where webhook URLs are not validated, allowing repository administrators to create webhooks targeting internal services, private networks, and cloud metadata endpoints. AFFECTED COMPONENTS VERIFIED 1. Webhook Creation...

Moderate: Red Hat Security Advisory: Red Hat Developer Hub 1.8.0 release.

Red Hat Developer Hub 1.8.0 has been released. Red Hat Developer Hub RHDH is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters AKS, EKS, GKE. The core features of RHDH include a single...

Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes 2.12.6 security update

Red Hat Advanced Cluster Management for Kubernetes 2.12 General Availability release images, which add new features and enhancements, bug fixes, and updated container images. Red Hat Advanced Cluster Management for Kubernetes 2.12 images Red Hat Advanced Cluster Management for Kubernetes provides...

Moderate: Red Hat Security Advisory: multicluster engine for Kubernetes v2.7.7 security update

The multicluster engine for Kubernetes 2.7 General Availability release images, which add new features and enhancements, bug fixes, and updated container images. The multicluster engine for Kubernetes v2.7 images The multicluster engine for Kubernetes provides the foundational components that are...

KubeVirt Affected by an Authentication Bypass in Kubernetes Aggregation Layer

...

SUSE CVE-2025-58356

Constellation is the first Confidential Kubernetes. The Constellation CVM image uses LUKS2-encrypted volumes for persistent storage. When opening an encrypted storage device, the CVM uses the libcryptsetup function cryptactivatebypasshrase. If the VM is successful in opening the partition with th...

SUSE CVE-2025-61688

Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to 1.1.5 and 1.0.2, Omni might leak sensitive information via an API...

AZL-69802 CVE-2025-64435 affecting package kubevirt for versions less than 1.6.3-1

KubeVirt is a virtual machine management add-on for Kubernetes. Prior to 1.7.0-beta.0, a logic flaw in the virt-controller allows an attacker to disrupt the control over a running VMI by creating a pod with the same labels as the legitimate virt-launcher pod associated with the VMI. This can...

CVE-2025-64434 KubeVirt Improper TLS Certificate Management Handling Allows API Identity Spoofing

KubeVirt is a virtual machine management add-on for Kubernetes. Prior to 1.5.3 and 1.6.1, due to the peer verification logic in virt-handler via verifyPeerCert, an attacker who compromises a virt-handler instance, could exploit these shared credentials to impersonate virt-api and execute privileg...

Incorrect Permission Assignment for Critical Resource

Overview Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource due to the virt-api component failing to validate the CN field in client TLS certificates against allowed values in the extension-apiserver-authentication configmap. An attacker can...

EUVD-2025-38218

KubeVirt is a virtual machine management add-on for Kubernetes. Versions 1.5.3 and below, and 1.6.0 contained a flawed implementation of the Kubernetes aggregation layer's authentication flow which could enable bypass of RBAC controls. It was discovered that the virt-api component fails to...

CVE-2025-64432 KubeVirt Affected by an Authentication Bypass in Kubernetes Aggregation Layer

KubeVirt is a virtual machine management add-on for Kubernetes. Versions 1.5.3 and below, and 1.6.0 contained a flawed implementation of the Kubernetes aggregation layer's authentication flow which could enable bypass of RBAC controls. It was discovered that the virt-api component fails to...

GHSA-QW9X-CQR3-WC7R vulnerabilities

Vulnerabilities for packages: k3s, nvidia-container-toolkit, buildah, kubernetes, node-feature-discovery, grafana-alloy, falco-no-driver, sriov-network-device-plugin, podman...

CVE-2025-31133 vulnerabilities

Vulnerabilities for packages: kubernetes-fips, node-feature-discovery, prometheus-podman-exporter, virt-handler, node-feature-discovery-fips, azure-container-networking, sriov-network-device-plugin, buildah, k3s, eks-distro, cluster-autoscaler-fips, cluster-autoscaler, grafana-alloy-fips, rancher...

GHSA-QW9X-CQR3-WC7R vulnerabilities

Vulnerabilities for packages: kubernetes-fips, node-feature-discovery, prometheus-podman-exporter, node-feature-discovery-fips, azure-container-networking, sriov-network-device-plugin, buildah, k3s, eks-distro, cluster-autoscaler-fips, cluster-autoscaler, grafana-alloy-fips, rancher, grafana-allo...

GHSA-9493-H29P-RFM2 vulnerabilities

Vulnerabilities for packages: kubernetes-fips, node-feature-discovery, prometheus-podman-exporter, virt-handler, node-feature-discovery-fips, azure-container-networking, sriov-network-device-plugin, buildah, k3s, eks-distro, cluster-autoscaler-fips, cluster-autoscaler, grafana-alloy-fips, rancher...

CVE-2025-52565 vulnerabilities

Vulnerabilities for packages: kubernetes-fips, node-feature-discovery, prometheus-podman-exporter, node-feature-discovery-fips, azure-container-networking, sriov-network-device-plugin, buildah, k3s, eks-distro, cluster-autoscaler-fips, cluster-autoscaler, grafana-alloy-fips, rancher, grafana-allo...