CVE-2019-18449 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

CVE-2019-18447 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

CVE-2019-5486 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

CVE-2018-19856 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

GHSA-P46F-R59P-V4JF vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

GHSA-533C-PPXJ-MJQJ vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

GHSA-H4MQ-8RQ4-7M7X vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

GHSA-XRV8-2PF5-F3Q7 nitro-tpm-pcr-compute may allow kernel command line modification by an account operator

Summary Adding default PCR12 validation to ensure that account operators can not modify kernel command line parameters, potentially bypassing root filesystem integrity validation. Attestable AMIs are based on the systemd Unified Kernel Image UKI concept which uses systemd-boot to create a single...

EUVD-2025-201467

nitro-tpm-pcr-compute may allow kernel command line modification by an account operator...

GHSA-7C64-F9JR-V9H2 vulnerabilities

Vulnerabilities for packages: node-feature-discovery, spicedb-fips, nats, terraform-provider-random-fips, rancher-fleet-fips, supercronic, prometheus-node-exporter-fips, secrets-store-csi-driver-provider-gcp, kapp, metrics-agent-fips, kubernetes-csi-external-health-monitor, crane-fips, s5cmd,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: node-feature-discovery, spicedb-fips, nats, terraform-provider-random-fips, rancher-fleet-fips, supercronic, prometheus-node-exporter-fips, secrets-store-csi-driver-provider-gcp, kapp, metrics-agent-fips, kubernetes-csi-external-health-monitor, crane-fips, s5cmd,...

Moderate: Red Hat Security Advisory: Submariner v0.22 security fixes and container updates

Submariner v0.22 General Availability release images, which provide enhancements, security fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: nri-f5, kubernetes-dashboard-metrics-scraper, gobump, cis-operator, argocd-image-updater, polaris, pulumi-language-dotnet, hydra, ingress-nginx-controller, hcloud, gitlab-kas, kserve, podman, pluto, nri-consul, q, fuse-overlayfs-snapshotter, sftpgo-plugin-eventstore,...

GHSA-7C64-F9JR-V9H2 vulnerabilities

Vulnerabilities for packages: nri-f5, kubernetes-dashboard-metrics-scraper, gobump, cis-operator, argocd-image-updater, polaris, pulumi-language-dotnet, hydra, ingress-nginx-controller, hcloud, gitlab-kas, kserve, podman, pluto, nri-consul, q, fuse-overlayfs-snapshotter, sftpgo-plugin-eventstore,...

Moderate: Red Hat Security Advisory: Cost Management Metrics Operator Update

Cost Management Metrics Operator version 4.3.0 release. The Cost Management Metrics Operator is a component of the Red Hat Cost Managment service for Openshift. The operator runs on the latest supported versions of Openshift. This operator obtains OpenShift usage data by querying Prometheus every...

GHSA-66JQ-2C23-2XH5 vulnerabilities

Vulnerabilities for packages: victoriametrics-operator-fips, victorialogs-fips, victorialogs...

CVE-2025-65942 vulnerabilities

Vulnerabilities for packages: victoriametrics-operator-fips, victorialogs-fips, victorialogs...

Security Bulletin: IBM App Connect Enterprise Certified Container operands are vulnerable to denial of service [CVE-2025-64118]

Summary Node.js module tar is used by IBM App Connect Enterprise Certified Container for handling archives files and data. IBM App Connect Enterprise Certified Container operands are vulnerable to denial of service. This bulletin provides patch information to address the reported vulnerability in...

Moderate: Red Hat Security Advisory: Red Hat build of Keycloak 26.4.6 Images Security Update

New images are available for Red Hat build of Keycloak 26.4.6 and Red Hat build of Keycloak 26.4.6 Operator, running on OpenShift Container Platform Red Hat build of Keycloak is an integrated sign-on solution, available as a Red Hat JBoss Middleware for OpenShift containerized image. The Red Hat...

Moderate: Red Hat Security Advisory: Red Hat build of Keycloak 26.2.11 Images Security Update

New images are available for Red Hat build of Keycloak 26.2.11 and Red Hat build of Keycloak 26.2.11 Operator, running on OpenShift Container Platform Red Hat build of Keycloak is an integrated sign-on solution, available as a Red Hat JBoss Middleware for OpenShift containerized image. The Red Ha...