CVE-2025-5187 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, local-static-provisioner, argo-rollouts, yunikorn-k8shim, ip-masq-agent, rancher-webhook, emissary, kapp, docker-machine-driver-harvester, nodetaint, kubernetes, kubernetes-csi-driver-nfs, kubernetes-csi-driver-hostpath, k8ssandra-client,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-13.2, secrets-store-csi-driver-provider-gcp, nemo, knative-serving-fips, opentelemetry-collector, k8ssandra-client-fips, step, ipfs-cluster-fips, opa, rancher-helm, buf, certificate-transparency-fips, cloud-provider-azure-fips, metallb, gops,...

GHSA-27WF-5967-98GX vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, local-static-provisioner, k8s-device-plugin, ip-masq-agent, nodetaint, argocd-image-updater, kubeflow-pipelines, aws-efs-csi-driver...

CVE-2024-10220 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, local-static-provisioner, k8s-device-plugin, ip-masq-agent, nodetaint, argocd-image-updater, kubeflow-pipelines, aws-efs-csi-driver...

CVE-2024-9522 WP Users Masquerade <= 2.0.0 - Authenticated (Subscriber+) Authentication Bypass

The WP Users Masquerade plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.0.0. This is due to incorrect authentication and capability checking in the 'ajaxmasqlogin' function. This makes it possible for authenticated attackers, with subscriber-level...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-gcp, frp, step, opa, buf, certificate-transparency-fips, metallb, gops, dex-k8s-authenticator, cosign, k3s, step-issuer, flux-kustomize-controller, paranoia, trust-manager, smarter-device-manager-fips, bom, chezmoi, cni-plugins-fips,...

GHSA-HQ6Q-C2X6-HMCH vulnerabilities

Vulnerabilities for packages: nodetaint, aws-efs-csi-driver, spark-operator, kubernetes-dns-node-cache, aws-efs-csi-driver-fips, aws-ebs-csi-driver, ip-masq-agent, prometheus-adapter...

GHSA-HQ6Q-C2X6-HMCH vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, spark-operator, ip-masq-agent, prometheus-adapter, nodetaint, aws-efs-csi-driver...

CVE-2023-5528 vulnerabilities

Vulnerabilities for packages: nodetaint, aws-efs-csi-driver, spark-operator, kubernetes-dns-node-cache, aws-efs-csi-driver-fips, aws-ebs-csi-driver, ip-masq-agent, prometheus-adapter...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: oauth2-proxy, terraform-provider-azurerm, terraform-provider-sendgrid, secrets-store-csi-driver, envoy-ratelimit, ip-masq-agent, kubeflow-katib, flux-helm-controller, wireguard-go, pulumi, hugo, dynamic-localpv-provisioner, bom, nri-prometheus, grype,...

docker security and bug fix update

1.3.2-1.0.1 - Rename requirement of docker-io-pkg-devel in %package devel as docker-pkg-devel - Restore SysV init scripts for Oracle Linux 6 - Require Oracle Unbreakable Enterprise Kernel Release 3 or higher - Rename as docker. - Re-enable btrfs graphdriver support 1.3.2-1 - Update source to 1.3....