io.quarkus:quarkus-minikube-deployment (1.7.0.cr2), io.quarkus:quarkus-openshift-deployment (1.7.0.cr2) potentially affected by CVE-2024-1979 via io.quarkus:quarkus-kubernetes-deployment (1.7.0.cr2)

io.quarkus:quarkus-kubernetes-deployment MAVEN version 1.7.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-kubernetes-deployment and may be impacted: - io.quarkus:quarkus-minikube-deployment 1.7.0.cr2 -...

io.automatiko.quarkus:automatiko-operator-deployment (0.4.0), io.quarkus:quarkus-minikube-deployment (1.13.2.final) +1 more potentially affected by CVE-2024-1979 via io.quarkus:quarkus-kubernetes-deployment (1.13.2.final)

io.quarkus:quarkus-kubernetes-deployment MAVEN version 1.13.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-kubernetes-deployment and may be impacted: - io.automatiko.quarkus:automatiko-operator-deployment 0.4.0 -...

io.quarkus:quarkus-kind-deployment (2.13.4.final), io.quarkus:quarkus-minikube-deployment (2.13.4.final) +1 more potentially affected by CVE-2024-1979 via io.quarkus:quarkus-kubernetes-deployment (2.13.4.final)

io.quarkus:quarkus-kubernetes-deployment MAVEN version 2.13.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-kubernetes-deployment and may be impacted: - io.quarkus:quarkus-kind-deployment 2.13.4.final -...

io.quarkus:quarkus-kind-deployment (2.16.10.final), io.quarkus:quarkus-minikube-deployment (2.16.10.final) +1 more potentially affected by CVE-2024-1979 via io.quarkus:quarkus-kubernetes-deployment (2.16.10.final)

io.quarkus:quarkus-kubernetes-deployment MAVEN version 2.16.10.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-kubernetes-deployment and may be impacted: - io.quarkus:quarkus-kind-deployment 2.16.10.final -...

io.quarkus:quarkus-minikube-deployment (2.0.2.final), io.quarkus:quarkus-openshift-deployment (2.0.2.final) potentially affected by CVE-2024-1979 via io.quarkus:quarkus-kubernetes-deployment (2.0.2.final)

io.quarkus:quarkus-kubernetes-deployment MAVEN version 2.0.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-kubernetes-deployment and may be impacted: - io.quarkus:quarkus-minikube-deployment 2.0.2.final -...

io.quarkus:quarkus-kind-deployment (2.16.9.final), io.quarkus:quarkus-minikube-deployment (2.16.9.final) +1 more potentially affected by CVE-2024-1979 via io.quarkus:quarkus-kubernetes-deployment (2.16.9.final)

io.quarkus:quarkus-kubernetes-deployment MAVEN version 2.16.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-kubernetes-deployment and may be impacted: - io.quarkus:quarkus-kind-deployment 2.16.9.final -...

io.quarkus:quarkus-kind-deployment (2.11.0.final), io.quarkus:quarkus-minikube-deployment (2.11.0.final) +1 more potentially affected by CVE-2024-1979 via io.quarkus:quarkus-kubernetes-deployment (2.11.0.final)

io.quarkus:quarkus-kubernetes-deployment MAVEN version 2.11.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-kubernetes-deployment and may be impacted: - io.quarkus:quarkus-kind-deployment 2.11.0.final -...

io.quarkus:quarkus-minikube-deployment (1.7.4.final), io.quarkus:quarkus-openshift-deployment (1.7.4.final) potentially affected by CVE-2024-1979 via io.quarkus:quarkus-kubernetes-deployment (1.7.4.final)

io.quarkus:quarkus-kubernetes-deployment MAVEN version 1.7.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-kubernetes-deployment and may be impacted: - io.quarkus:quarkus-minikube-deployment 1.7.4.final -...

io.quarkus:quarkus-minikube-deployment (1.7.5.final), io.quarkus:quarkus-openshift-deployment (1.7.5.final) potentially affected by CVE-2024-1979 via io.quarkus:quarkus-kubernetes-deployment (1.7.5.final)

io.quarkus:quarkus-kubernetes-deployment MAVEN version 1.7.5.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-kubernetes-deployment and may be impacted: - io.quarkus:quarkus-minikube-deployment 1.7.5.final -...

GHSA-FG9Q-5CW2-P6R9 kubevirt-csi: PersistentVolume allows access to HCP's root node

A flaw was found in the kubevirt-csi component of OpenShift Virtualization's Hosted Control Plane HCP. This issue could allow an authenticated attacker to gain access to the root HCP worker node's volume by creating a custom Persistent Volume that matches the name of a worker node...

kubevirt-csi: PersistentVolume allows access to HCP's root node

A flaw was found in the kubevirt-csi component of OpenShift Virtualization's Hosted Control Plane HCP. This issue could allow an authenticated attacker to gain access to the root HCP worker node's volume by creating a custom Persistent Volume that matches the name of a worker node...

CVE-2024-1725

A flaw was found in the kubevirt-csi component of OpenShift Virtualization's Hosted Control Plane HCP. This issue could allow an authenticated attacker to gain access to the root HCP worker node's volume by creating a custom Persistent Volume that matches the name of a worker node...

CVE-2024-1725

A flaw was found in the kubevirt-csi component of OpenShift Virtualization's Hosted Control Plane HCP. This issue could allow an authenticated attacker to gain access to the root HCP worker node's volume by creating a custom Persistent Volume that matches the name of a worker node...

Design/Logic Flaw

A flaw was found in the kubevirt-csi component of OpenShift Virtualization's Hosted Control Plane HCP. This issue could allow an authenticated attacker to gain access to the root HCP worker node's volume by creating a custom Persistent Volume that matches the name of a worker node...

CVE-2024-1725 Kubevirt-csi: persistentvolume allows access to hcp's root node

A flaw was found in the kubevirt-csi component of OpenShift Virtualization's Hosted Control Plane HCP. This issue could allow an authenticated attacker to gain access to the root HCP worker node's volume by creating a custom Persistent Volume that matches the name of a worker node...

CVE-2024-1725

A flaw was found in the kubevirt-csi component of OpenShift Virtualization's Hosted Control Plane HCP. This issue could allow an authenticated attacker to gain access to the root HCP worker node's volume by creating a custom Persistent Volume that matches the name of a worker node...

CVE-2024-1725 Kubevirt-csi: persistentvolume allows access to hcp's root node

A flaw was found in the kubevirt-csi component of OpenShift Virtualization's Hosted Control Plane HCP. This issue could allow an authenticated attacker to gain access to the root HCP worker node's volume by creating a custom Persistent Volume that matches the name of a worker node...

CVE-2024-1725

The CVE-2024-1725 issue affects kubevirt-csi in OpenShift Virtualization’s Hosted Control Plane (HCP): an authenticated attacker can create a PersistentVolume that matches a worker node name to access the root HCP worker node’s volume. Exploitation is described in multiple advisories, with OpenSh...

CVE-2024-1725

A flaw was found in the kubevirt-csi component of OpenShift Virtualization's Hosted Control Plane HCP. This issue could allow an authenticated attacker to gain access to the root HCP worker node's volume by creating a custom Persistent Volume that matches the name of a worker node...

Important: Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 9.0.1 security update

The components for Red Hat OpenShift for Windows Containers 9.0.1 are now available. This product release includes bug fixes and security updates for the following packages: windows-machine-config-operator and windows-machine-config-operator-bundle. Red Hat Product Security has rated this update ...