OPENSUSE-SU-2024:11668-1 velero-plugin-for-microsoft-azure-1.3.1-1.1 on GA media

These are all security issues fixed in the velero-plugin-for-microsoft-azure-1.3.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11553-1 velero-1.7.0-1.1 on GA media

These are all security issues fixed in the velero-1.7.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11667-1 velero-1.7.1-1.1 on GA media

These are all security issues fixed in the velero-1.7.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11554-1 velero-plugin-for-aws-1.3.0-1.1 on GA media

These are all security issues fixed in the velero-plugin-for-aws-1.3.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11494-1 velero-1.6.3-1.2 on GA media

These are all security issues fixed in the velero-1.6.3-1.2 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13466-1 velero-1.12.2-1.1 on GA media

These are all security issues fixed in the velero-1.12.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13225-1 velero-1.11.1-1.1 on GA media

These are all security issues fixed in the velero-1.11.1-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: up, policy-controller, rclone, cortex, flux-image-reflector-controller, tekton-chains, spire-server, buildkitd, flux-source-controller, nuclei, opentelemetry-collector, guac, hugo, k8sgpt, kubescape, fluent-bit-plugin-loki, harbor-registry, druid,...

SUSE CVE-2020-3996

Velero prior to 1.4.3 and 1.5.2 in some instances doesn't properly manage volume identifiers which may result in information leakage to unauthorized users...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudfront, policy-controller, gcsfuse, cortex, terraform-provider-google, kaf, kargo, kube-state-metrics, logstash-exporter, nri-kubernetes, spire-server, docker-compose, spicedb, memcached-exporter, temporal, cloudflared, helm-push, terrafor...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: dive, gcsfuse, cortex, flannel-cni-plugin, kaf, logstash-exporter, kube-state-metrics, tailscale, aws-flb-firehose, memcached-exporter, temporal, helm-push, terraform, smarter-device-manager, kine, nri-mysql, newrelic-fluent-bit-output, flux-helm-controller, nri-mssq...

Moderate: Red Hat Security Advisory: Migration Toolkit for Containers (MTC) 1.7.3 security and bug fix update

The Migration Toolkit for Containers MTC 1.7.3 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

CVE-2020-3996

Velero prior to 1.4.3 and 1.5.2 in some instances doesn’t properly manage volume identifiers which may result in information leakage to unauthorized users...

CVE-2020-3996

Velero prior to 1.4.3 and 1.5.2 in some instances doesn’t properly manage volume identifiers which may result in information leakage to unauthorized users...

Design/Logic Flaw

Velero prior to 1.4.3 and 1.5.2 in some instances doesn’t properly manage volume identifiers which may result in information leakage to unauthorized users...

CVE-2020-3996

Velero prior to 1.4.3 and 1.5.2 in some instances doesn’t properly manage volume identifiers which may result in information leakage to unauthorized users...

CVE-2020-3996

CVE-2020-3996 concerns Velero where, in some deployments, volume identifiers are not managed securely, potentially leaking information to unauthorized users. Affected: Velero versions prior to 1.4.3 and prior to 1.5.2. Impact: partial confidentiality. Remediation/fix/details are not provided in t...

CVE-2020-3996

Velero prior to 1.4.3 and 1.5.2 in some instances doesn’t properly manage volume identifiers which may result in information leakage to unauthorized users...