RHEL 9 : Red Hat build of MicroShift 4.16.0 (RHSA-2024:0043)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0043 advisory. Red Hat build of MicroShift is Red Hat's light-weight Kubernetes orchestration solution designed for edge device deployments and is built fr...

Sensitive Information Disclosure

github.com/rancher/rancher is vulnerable to Sensitive Information Disclosure. The vulnerability is due to constantly reconciling clusters when secrets encryption configuration is enabled, causing Kube API secret values to be written in plaintext on the AppliedSpec. An attacker can gain access to...

PT-2024-19166 · Rancher · Rancher Rke1

Name of the Vulnerable Software and Affected Versions: Rancher RKE1 versions 2.7.0 through 2.7.13 Rancher RKE1 versions 2.8.0 through 2.8.4 Description: A vulnerability has been identified in which an RKE1 cluster keeps constantly reconciling when secrets encryption configuration is enabled. When...

OPENSUSE-SU-2024:12992-1 kubernetes1.27-apiserver-1.27.2-1.1 on GA media

These are all security issues fixed in the kubernetes1.27-apiserver-1.27.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10901-1 kubernetes-apiserver-1.22.2-21.2 on GA media

These are all security issues fixed in the kubernetes-apiserver-1.22.2-21.2 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13716-1 kubernetes1.24-apiserver-1.24.17-3.1 on GA media

These are all security issues fixed in the kubernetes1.24-apiserver-1.24.17-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13003-1 kubernetes1.23-apiserver-1.23.17-4.1 on GA media

These are all security issues fixed in the kubernetes1.23-apiserver-1.23.17-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12810-1 kubernetes1.25-apiserver-1.25.7-1.1 on GA media

These are all security issues fixed in the kubernetes1.25-apiserver-1.25.7-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13881-1 kubernetes1.28-apiserver-1.28.9-1.1 on GA media

These are all security issues fixed in the kubernetes1.28-apiserver-1.28.9-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13840-1 kubernetes1.28-apiserver-1.28.8-1.1 on GA media

These are all security issues fixed in the kubernetes1.28-apiserver-1.28.8-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13841-1 kubernetes1.29-apiserver-1.29.3-1.1 on GA media

These are all security issues fixed in the kubernetes1.29-apiserver-1.29.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13838-1 kubernetes1.26-apiserver-1.26.15-1.1 on GA media

These are all security issues fixed in the kubernetes1.26-apiserver-1.26.15-1.1 package on the GA media of openSUSE Tumbleweed...

ROS-20240522-03

A vulnerability in the KUBE-APISERVER component of the virtual machine cluster management software tool Kubernetes is related to the use of containers with a populated envFrom field.Exploitation of the vulnerability could allow an attacker acting remotely to launch containers bypassing the securi...

GO-2024-2748 Privilege Escalation in Kubernetes in k8s.io/apimachinery

The Kubernetes kube-apiserver is vulnerable to an unvalidated redirect on proxied upgrade requests that could allow an attacker to escalate privileges from a node compromise to a full cluster compromise...

SUSE CVE-2023-1260

An authentication bypass vulnerability was discovered in kube-apiserver. This issue could allow a remote, authenticated attacker who has been given permissions "update, patch" the "pods/ephemeralcontainers" subresource beyond what the default is. They would then need to create a new pod or patch...

kubernetes: kube-apiserver: bypassing mountable secrets policy imposed by the ServiceAccount admission plugin

A flaw was found in Kubernetes' kube-apiserver. This flaw allows authenticated users to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containers, init containers, and ephemeral containers with the envFrom field populated...

RHEL 8 : OpenShift Container Platform 4.11.46 (RHSA-2023:4312)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:4312 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud...

RHEL 8 / 9 : OpenShift Container Platform 4.13.0 (RHSA-2023:1325)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:1325 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or...

RHEL 7 / 8 : OpenShift Container Platform 4.10.56 (RHSA-2023:1655)

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:1655 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or...

RHEL 9 : Red Hat build of MicroShift 4.14.0 (RHSA-2023:5008)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:5008 advisory. Red Hat build of MicroShift is Red Hat's light-weight Kubernetes orchestration solution designed for edge device deployments and is built fr...