CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-hostpath, logstash-exporter-fips, cass-operator, terraform-provider-azurerm, rabbitmq-messaging-topology-operator, docker-compose, prometheus-redis-exporter-fips, cosign-fips, vault-k8s-fips, kustomize, prometheus-beat-exporter,...

AZL-35580 CVE-2024-24786 affecting package kubernetes for versions less than 1.28.4-12

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: ferretdb, ytt, kubernetes-dashboard-metrics-scraper, up, litefs, sbom-scorecard, nats, kubernetes-dashboard, kind, direnv, grafana-operator, local-path-provisioner, k8ssandra-operator, configmap-reload, kubewatch, nfs-subdir-external-provisioner, slsa-verifier,...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: ferretdb, ytt, kubernetes-dashboard-metrics-scraper, up, litefs, sbom-scorecard, nats, kubernetes-dashboard, kind, direnv, grafana-operator, local-path-provisioner, k8ssandra-operator, configmap-reload, kubewatch, nfs-subdir-external-provisioner, slsa-verifier,...

CVE-2024-24783 vulnerabilities

Vulnerabilities for packages: minio-fips, prometheus-pushgateway-fips, aws-load-balancer-controller, newrelic-infrastructure-agent, capslock, nri-mssql, esbuild, mockery, tigera-operator-fips, nfs-subdir-external-provisioner-fips, logstash-exporter-fips, cass-operator, wait-for-port,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: syft, ferretdb, kubernetes-dashboard-metrics-scraper, crossplane-provider-aws-sqs, litefs, kargo, nats, spicedb, boring-registry, up, kubernetes-dashboard, ollama, grafana-operator, local-path-provisioner, k8ssandra-operator, configmap-reload, kubewatch,...

CVE-2023-48795 affecting package kubernetes for versions less than 1.28.4-4

CVE-2023-48795 affecting package kubernetes for versions less than 1.28.4-4. A patched version of the package is available...

Virtuozzo Hybrid Infrastructure 6.0 Update 1 Hotfix 3 (6.0.1-89)

This update provides stability improvements. Vulnerability id: VSTOR-82695 Deploying a Kubernetes cluster may take longer than expected. Vulnerability id: VSTOR-82730 Restarting libvirtd causes EFI VMs to reboot...

GHSA-MRWW-27VC-GGHV vulnerabilities

Vulnerabilities for packages: falcosidekick-fips, temporal-server-fips, argo-workflows, step-ca, wavefront-collector-for-kubernetes, trillian-fips, kube-bench-fips, k3s, spicedb, trillian, ferretdb, argo-workflows-fips, temporal-server, step, caddy-fips, caddy, kine, kots, amass, kube-bench, src...

GHSA-M7WR-2XF7-CM9P vulnerabilities

Vulnerabilities for packages: caddy, step, wavefront-collector-for-kubernetes, trillian, trillian-fips, kots, argo-workflows, step-ca, argo-workflows-fips, caddy-fips...

openSUSE: Security Advisory for podman (SUSE-SU-2023:0187-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Helm Security Vulnerabilities

Helm is a Kubernetes package manager. A security vulnerability exists in Helm 3.13.3 and earlier versions, which stems from displaying confidential information with the --dry-run option in plaintext...

Security Bulletin: Red Hat OpenShift on IBM Cloud is affected by a runc security vulnerability (CVE-2024-21626)

Summary Red Hat OpenShift on IBM Cloud is affected by a security vulnerability found in the runc component where an attacker could gain unauthorized access to the host filesystem CVE-2024-21626. Vulnerability Details CVEID: CVE-2024-21626 Description: Open Container Initiative runc could allow a...

conmon security update

conmon 2.1.3-8 - address CVE-2023-39326 cri-o 1.25.5-1 - Added Oracle Specifile Files for cri-o cri-tools 1.25.0-3 - Resolve CVE-2023-39326 flannel-cni-plugin 1.0.1-4 - Resolve CVE-2023-39326 helm 3.11.1-3 - address CVE-2023-39326 istio 1.16.7-3 - Updated Golang to 1.20.12 to address CVE...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.13.35 security update

Red Hat OpenShift Container Platform release 4.13.35 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, whic...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.13.35 security update

Red Hat OpenShift Container Platform release 4.13.35 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, whi...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.14.14 packages and security update

Red Hat OpenShift Container Platform release 4.14.14 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.14 bug fix and security update

Red Hat OpenShift Container Platform release 4.14.14 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...

CBL Mariner 2.0 Security Update: cri-tools / kubernetes / kubevirt / moby-runc (CVE-2024-21626M)

The version of cri-tools / kubernetes / kubevirt / moby-runc installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-21626M advisory. - NIST NVD Details CVE-2024-21626 Note that Nessus has not tested for...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.15.z security update

Red Hat build of MicroShift release 4.15.0 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat build of MicroShift 4.15.0. Red Hat Product Security has rated this update as having a security impact of Important. A Common...