GHSA-47M2-4CR7-MHCW vulnerabilities

Vulnerabilities for packages: k3s, spegel, frp, kubo, q, dkron, ipfs-cluster, k8sgateway, kyverno-policy-reporter-ui, caddy, kubernetes-dns-node-cache, traefik, kargo...

CVE-2025-59530 vulnerabilities

Vulnerabilities for packages: dkron, kubernetes-dns-node-cache, traefik, ipfs-cluster-fips, spegel, teleport, kargo, traefik-fips, eks-distro, k8sgateway-fips, rke2-runtime, caddy, kubo, kyverno-policy-reporter-ui, k8sgateway, q, frp, coredns, syncthing, syncthing-fips,...

GHSA-47M2-4CR7-MHCW vulnerabilities

Vulnerabilities for packages: dkron, kubernetes-dns-node-cache, traefik, ipfs-cluster-fips, spegel, teleport, kargo, traefik-fips, eks-distro, k8sgateway-fips, rke2-runtime, caddy, kubo, kyverno-policy-reporter-ui, k8sgateway, q, frp, coredns, syncthing, syncthing-fips,...

[SECURITY] Fedora 41 Update: cri-o1.32-1.32.9-1.fc41

Open Container Initiative-based implementation of Kubernetes Container Runtime Interface...

[SECURITY] Fedora 41 Update: cri-o1.33-1.33.5-1.fc41

Open Container Initiative-based implementation of Kubernetes Container Runtime Interface...

[SECURITY] Fedora 41 Update: cri-o1.34-1.34.1-1.fc41

Open Container Initiative-based implementation of Kubernetes Container Runtime Interface...

[SECURITY] Fedora 41 Update: cri-o1.31-1.31.13-1.fc41

Open Container Initiative-based implementation of Kubernetes Container Runtime Interface...

[SECURITY] Fedora 42 Update: cri-o1.31-1.31.13-1.fc42

Open Container Initiative-based implementation of Kubernetes Container Runtime Interface...

[SECURITY] Fedora 42 Update: cri-o1.33-1.33.5-1.fc42

Open Container Initiative-based implementation of Kubernetes Container Runtime Interface...

[SECURITY] Fedora 42 Update: cri-o1.32-1.32.9-1.fc42

Open Container Initiative-based implementation of Kubernetes Container Runtime Interface...

[SECURITY] Fedora 42 Update: cri-o1.34-1.34.1-1.fc42

Open Container Initiative-based implementation of Kubernetes Container Runtime Interface...

CVE-2025-62159 External Secrets Operator's BeyondTrust Provider has Insecure Secret Retrieval

External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. A vulnerability was discovered in the BeyondTrust provider implementation for External Secrets Operator versions 0.10.1 through 0.19.2. The provider previously...

podman security update

An update is available for podman. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The podman tool manages pods, container images, and containers. It is part of...

Linode Kubernetes Engine Optimization: Save on Compute, Storage, and Networking

...

CVE-2025-59303

HAProxy Kubernetes Ingress Controller before 3.1.13, when the config-snippets feature flag is used, accepts config snippets from users with create/update permissions. This can result in obtaining an ingress token secret as a response. The fixed versions of HAProxy Enterprise Kubernetes Ingress...

Incomplete Filtering of Special Elements

Overview Affected versions of this package are vulnerable to Incomplete Filtering of Special Elements in the config-snippets feature flag. An attacker can access sensitive environment variables, including the Kubernetes service account token secret, by injecting arbitrary HAProxy directives. Note...

PT-2025-41287

Name of the Vulnerable Software and Affected Versions HAProxy Kubernetes Ingress Controller versions prior to 3.1.13 HAProxy Enterprise Kubernetes Ingress Controller versions prior to 3.0.16-ee1 HAProxy Enterprise Kubernetes Ingress Controller versions prior to 1.11.13-ee1 HAProxy Enterprise...

EUVD-2025-33296

HAProxy Kubernetes Ingress Controller before 3.1.13, when the config-snippets feature flag is used, accepts config snippets from users with create/update permissions. This can result in obtaining an ingress token secret as a response. The fixed versions of HAProxy Enterprise Kubernetes Ingress...

HAProxy Kubernetes Ingress Controller 安全漏洞

HAProxy Kubernetes Ingress Controller is a reverse proxy and load balancing tool from US-based HAProxy Inc. A security vulnerability exists in HAProxy Kubernetes Ingress Controller versions prior to 3.1.13, which stems from the configuration snippet feature accepting a configuration snippet from ...

ROS-20251008-05

A vulnerability in the Kubernetes virtual machine cluster management software tool is related to insufficient validation of user input. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...