GO-2024-2527 Insecure ciphers are allowed by default in go.etcd.io/etcd

The TLS ciphers list supported by etcd contains insecure cipher suites. Users may specify that an insecure cipher is used via “--cipher-suites” flag. A list of secure suites is used by default...

GO-2024-2529 Etcd embed auto compaction retention negative value causing a compaction loop or a crash in go.etcd.io/etcd

Etcd embed auto compaction retention negative value causing a compaction loop or a crash in go.etcd.io/etcd...

OPENSUSE-SU-2024:13835-1 etcd-for-k8s1.28-3.5.12-1.1 on GA media

These are all security issues fixed in the etcd-for-k8s1.28-3.5.12-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13834-1 etcd-for-k8s1.27-3.5.12-1.1 on GA media

These are all security issues fixed in the etcd-for-k8s1.27-3.5.12-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12896-1 etcd-3.5.8-1.1 on GA media

These are all security issues fixed in the etcd-3.5.8-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13615-1 etcd-3.5.11-1.1 on GA media

These are all security issues fixed in the etcd-3.5.11-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11911-1 etcd-3.5.2-1.1 on GA media

These are all security issues fixed in the etcd-3.5.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13370-1 etcd-for-k8s1.26-3.5.9-1.1 on GA media

These are all security issues fixed in the etcd-for-k8s1.26-3.5.9-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13836-1 etcd-for-k8s1.29-3.5.12-1.1 on GA media

These are all security issues fixed in the etcd-for-k8s1.29-3.5.12-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13812-1 etcd-3.5.12-1.1 on GA media

These are all security issues fixed in the etcd-3.5.12-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13371-1 etcd-for-k8s1.27-3.5.9-1.1 on GA media

These are all security issues fixed in the etcd-for-k8s1.27-3.5.9-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13369-1 etcd-for-k8s1.25-3.5.9-1.1 on GA media

These are all security issues fixed in the etcd-for-k8s1.25-3.5.9-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10741-1 etcd-3.4.16-3.1 on GA media

These are all security issues fixed in the etcd-3.4.16-3.1 package on the GA media of openSUSE Tumbleweed...

CVE-2023-45288 affecting package etcd for versions less than 3.5.12-2

CVE-2023-45288 affecting package etcd for versions less than 3.5.12-2. A patched version of the package is available...

RHEL 8 : etcd (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - golang: net: lookup functions may return invalid host names CVE-2021-33195 - net/http in Go before 1.15.1...

RHEL 7 : etcd (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - etcd: Cross-site request forgery via crafted local POST forms CVE-2018-1098 - etcd: Information discosure...

etcd: Incomplete fix for CVE-2022-41723 in OpenStack Platform

The etcd package distributed with the Red Hat OpenStack platform has an incomplete fix for CVE-2022-41723. This issue occurs because the etcd package in the Red Hat OpenStack platform is using http://golang.org/x/net/http2 instead of the one provided by Red Hat Enterprise Linux versions, meaning ...

etcd: Incomplete fix for CVE-2021-44716 in OpenStack Platform

The etcd package distributed with the Red Hat OpenStack platform has an incomplete fix for CVE-2021-44716. This issue occurs because the etcd package in the Red Hat OpenStack platform is using http://golang.org/x/net/http2 instead of the one provided by Red Hat Enterprise Linux versions, meaning ...

Important: Red Hat Security Advisory: Red Hat OpenStack Platform 16.1 (etcd) security update

An update for etcd is now available for Red Hat OpenStack Platform 16.1 Train on Red Hat Enterprise Linux RHEL 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

etcd: Incomplete fix for CVE-2023-39325/CVE-2023-44487 in OpenStack Platform

The etcd package distributed with the Red Hat OpenStack platform has an incomplete fix for CVE-2023-39325/CVE-2023-44487, known as Rapid Reset. This issue occurs because the etcd package in the Red Hat OpenStack platform is using http://golang.org/x/net/http2 instead of the one provided by Red Ha...