Ubuntu 16.04 LTS / 18.04 LTS : Git vulnerabilities (USN-7964-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7964-1 advisory. It was discovered that Git did not properly sanitize URLs when asking for credentials via a terminal prompt. An attacker could possibly use...

USN-7964-1 git vulnerabilities

It was discovered that Git did not properly sanitize URLs when asking for credentials via a terminal prompt. An attacker could possibly use this issue to trick a user into disclosing their password. CVE-2024-50349 It was discovered that Git did not properly handle carriage return characters in it...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: cri-tools, vitess, fixuid, cluster-proportional-autoscaler, kubernetes-csi-driver-hostpath, prometheus-alertmanager, sealed-secrets, wait-for-port, cloud-provider-vsphere, rancher-telemetry, mc, kubernetes-csi-node-driver-registrar, kubernetes-csi-external-attacher,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: cri-tools, vitess, fixuid, cluster-proportional-autoscaler, kubernetes-csi-driver-hostpath, prometheus-alertmanager, sealed-secrets, wait-for-port, cloud-provider-vsphere, rancher-telemetry, mc, kubernetes-csi-node-driver-registrar, kubernetes-csi-external-attacher,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: cri-tools, vitess, fixuid, cluster-proportional-autoscaler, kubernetes-csi-driver-hostpath, prometheus-alertmanager, sealed-secrets, wait-for-port, cloud-provider-vsphere, rancher-telemetry, mc, kubernetes-csi-node-driver-registrar, kubernetes-csi-external-attacher,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: cri-tools, vitess, fixuid, cluster-proportional-autoscaler, kubernetes-csi-driver-hostpath, prometheus-alertmanager, sealed-secrets, wait-for-port, cloud-provider-vsphere, rancher-telemetry, mc, kubernetes-csi-node-driver-registrar, kubernetes-csi-external-attacher,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: cri-tools, vitess, fixuid, cluster-proportional-autoscaler, kubernetes-csi-driver-hostpath, prometheus-alertmanager, sealed-secrets, wait-for-port, cloud-provider-vsphere, rancher-telemetry, mc, kubernetes-csi-node-driver-registrar, kubernetes-csi-external-attacher,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: cri-tools, vitess, fixuid, cluster-proportional-autoscaler, kubernetes-csi-driver-hostpath, prometheus-alertmanager, sealed-secrets, wait-for-port, cloud-provider-vsphere, rancher-telemetry, mc, kubernetes-csi-node-driver-registrar, kubernetes-csi-external-attacher,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: cri-tools, vitess, fixuid, cluster-proportional-autoscaler, kubernetes-csi-driver-hostpath, prometheus-alertmanager, sealed-secrets, wait-for-port, cloud-provider-vsphere, rancher-telemetry, mc, kubernetes-csi-node-driver-registrar, kubernetes-csi-external-attacher,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: cri-tools, vitess, fixuid, cluster-proportional-autoscaler, kubernetes-csi-driver-hostpath, prometheus-alertmanager, sealed-secrets, wait-for-port, cloud-provider-vsphere, rancher-telemetry, mc, kubernetes-csi-node-driver-registrar, kubernetes-csi-external-attacher,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: cri-tools, vitess, fixuid, cluster-proportional-autoscaler, kubernetes-csi-driver-hostpath, prometheus-alertmanager, sealed-secrets, wait-for-port, cloud-provider-vsphere, rancher-telemetry, mc, kubernetes-csi-node-driver-registrar, kubernetes-csi-external-attacher,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: cri-tools, vitess, fixuid, cluster-proportional-autoscaler, kubernetes-csi-driver-hostpath, prometheus-alertmanager, sealed-secrets, wait-for-port, cloud-provider-vsphere, rancher-telemetry, mc, kubernetes-csi-node-driver-registrar, kubernetes-csi-external-attacher,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-hostpath, kubernetes-csi-node-driver-registrar, kapp, temporal, bom, fulcio, spiffe-helper, terraform-provider-kubernetes, harbor-registry, rancher-helm, docker-cli, terraform-provider-time, cadvisor, gptscript, terraform-docs, yunikorn-k8shim,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: cri-tools, vitess, fixuid, cluster-proportional-autoscaler, kubernetes-csi-driver-hostpath, prometheus-alertmanager, sealed-secrets, wait-for-port, cloud-provider-vsphere, rancher-telemetry, mc, kubernetes-csi-node-driver-registrar, kubernetes-csi-external-attacher,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: cri-tools, vitess, fixuid, cluster-proportional-autoscaler, kubernetes-csi-driver-hostpath, prometheus-alertmanager, sealed-secrets, wait-for-port, cloud-provider-vsphere, rancher-telemetry, mc, kubernetes-csi-node-driver-registrar, kubernetes-csi-external-attacher,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: cri-tools, vitess, fixuid, cluster-proportional-autoscaler, kubernetes-csi-driver-hostpath, prometheus-alertmanager, sealed-secrets, wait-for-port, cloud-provider-vsphere, rancher-telemetry, mc, kubernetes-csi-node-driver-registrar, kubernetes-csi-external-attacher,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: dfc, prometheus-mongodb-exporter-fips, cilium-fips, crane-fips, gcsfuse, promxy, ko, terraform-provider-kubernetes, rancher-webhook-fips, tekton-pipelines, kpt, kubernetes-dashboard-metrics-scraper-fips, kubernetes-event-exporter,...

CVE-2025-58183 vulnerabilities

Vulnerabilities for packages: dfc, prometheus-mongodb-exporter-fips, cilium-fips, crane-fips, gcsfuse, promxy, ko, terraform-provider-kubernetes, rancher-webhook-fips, tekton-pipelines, kpt, kubernetes-dashboard-metrics-scraper-fips, kubernetes-event-exporter,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: dfc, prometheus-mongodb-exporter-fips, cilium-fips, crane-fips, gcsfuse, promxy, ko, terraform-provider-kubernetes, rancher-webhook-fips, tekton-pipelines, kpt, kubernetes-dashboard-metrics-scraper-fips, kubernetes-event-exporter,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: dfc, prometheus-mongodb-exporter-fips, cilium-fips, crane-fips, gcsfuse, promxy, ko, terraform-provider-kubernetes, rancher-webhook-fips, tekton-pipelines, kpt, kubernetes-dashboard-metrics-scraper-fips, kubernetes-event-exporter,...