Important: Red Hat Enhancement Advisory: Red Hat Developer Hub 1.2 release

Red Hat Developer Hub 1.2 has been released. Red Hat Developer Hub RHDH is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters AKS, EKS, GKE. The core features of RHDH include a single pa...

GHSA-V6V8-XJ6M-XWQH vulnerabilities

Vulnerabilities for packages: cosign, crossplane-provider-azure-storage, opentelemetry-collector-contrib-fips, snyk-cli, consul, terragrunt, falcoctl, gh, tekton-chains, timestamp-authority-fips, gomplate, step-ca, chainctl, k3s, crossplane-provider-azure-managedidentity, crossplane-provider-azur...

CVE-2024-6104 vulnerabilities

Vulnerabilities for packages: cosign, crossplane-provider-azure-storage, opentelemetry-collector-contrib-fips, snyk-cli, consul, terragrunt, falcoctl, gh, tekton-chains, timestamp-authority-fips, gomplate, step-ca, chainctl, k3s, crossplane-provider-azure-managedidentity, crossplane-provider-azur...

CVE-2023-48795 affecting package kubernetes for versions less than 1.30.1-1

CVE-2023-48795 affecting package kubernetes for versions less than 1.30.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-24786 affecting package kubernetes for versions less than 1.30.1-1

CVE-2024-24786 affecting package kubernetes for versions less than 1.30.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-21626 affecting package kubernetes for versions less than 1.30.1-1

CVE-2024-21626 affecting package kubernetes for versions less than 1.30.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-3177 affecting package kubernetes for versions less than 1.30.1-1

CVE-2024-3177 affecting package kubernetes for versions less than 1.30.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-45288 affecting package kubernetes for versions less than 1.30.1-1

CVE-2023-45288 affecting package kubernetes for versions less than 1.30.1-1. An upgraded version of the package is available that resolves this issue...

Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to sensitive information exposure in Kubernetes [CVE-2020-8565]

Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to sensitive information exposure in Kubernetes, caused by a flaw when kube-apiserver is using logLevel = 9 CVE-2020-8565. Kubernetes is included in the Speech utilities used by our service. This vulnerabilitiy...

Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to sensitive information exposure in Kubernetes [CVE-2019-11250]

Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to sensitive information exposure in Kubernetes, caused by storing credentials in the log by the client-go library CVE-2019-11250. Kubernetes is included in the Speech utilities used by our service. This...

Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data

Summary IBM has released the below fix for IBM Db2® on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data in response to multiple vulnerabilities found in multiple components. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details...

CVE-2024-22263

Spring Cloud Data Flow is a microservices-based Streaming and Batch data processing in Cloud Foundry and Kubernetes. The Skipper server has the ability to receive upload package requests. However, due to improper sanitization for upload path, a malicious user who has access to skipper server api...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.14.30 packages and security update

Red Hat OpenShift Container Platform release 4.14.30 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...

CVE-2024-22263 Arbitrary File Write Vulnerability in Spring Cloud Data Flow

Spring Cloud Data Flow is a microservices-based Streaming and Batch data processing in Cloud Foundry and Kubernetes. The Skipper server has the ability to receive upload package requests. However, due to improper sanitization for upload path, a malicious user who has access to skipper server api...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.14.30 bug fix and security update

Red Hat OpenShift Container Platform release 4.14.30 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.13.44 bug fix and security update

Red Hat OpenShift Container Platform release 4.13.44 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to the manipulation of inter-site requests, allows a perpetrator to carry out a CSRF attack.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack through the Kubernetes Agent Server...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.15.18 security update

Red Hat OpenShift Container Platform release 4.15.18 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.15. Red Hat Product Security has rated this update as having a...

SUSE CVE-2024-22032

A vulnerability has been identified in which an RKE1 cluster keeps constantly reconciling when secrets encryption configuration is enabled. When reconciling, the Kube API secret values are written in plaintext on the AppliedSpec. Cluster owners, Cluster members, and Project members for projects...

Veeam Kasten for Kubernetes Instant Recovery with Veeam Backup & Replication vPower NFS datastore

Purpose K10 Instant Recovery uses the Veeam Backup and Replication vPower NFS datastore to provide vSphere First Class Disks for storage. This feature enables "instant" recovery of workloads with Kubernetes. Solution The vPower NFS datastore is a fully functional datastore in the vSphere cluster...