SUSE-SU-2025:20278-1 Security update for helm

This update for helm fixes the following issues: - Update to version 3.17.2 bsc1238688, CVE-2025-22870: Updating to 0.37.0 for x/net builddeps: bump the k8s-io group with 7 updates - Update to version 3.17.1: merge null child chart objects builddeps: bump the k8s-io group with 7 updates fix: chec...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: spiffe-helper, http-echo, kapp, hivemind, capslock, temporal-ui-server, gostatsd, actions-runner-controller, bazelisk, vault-benchmark, karma, multus-cni, nri-prometheus, cert-manager-cmctl, slsa-verifier, ip-masq-agent, gobump, cadvisor, govulncheck, configmap-reloa...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: prometheus-nats-exporter, k8sgpt, step-ca, q, multus-cni, rabbitmq-default-user-credential-updater, ctop, gke-gcloud-auth-plugin, kpt, spicedb, opentelemetry-collector-fips, timoni, harbor-cli, volume-modifier-for-k8s, vault-k8s, aws-efs-csi-driver-fips, helm-operato...

CVE-2024-32473 vulnerabilities

Vulnerabilities for packages: wolfictl, harbor-scanner-trivy, policy-controller, kaniko, neuvector-scanner, syft, buf, k3d, cri-tools, docker-compose, grype, melange, helm-push, dagger...

CVE-2024-32473 vulnerabilities

Vulnerabilities for packages: buf, kaniko, grype, wolfictl, docker-compose, neuvector-scanner, policy-controller, harbor-scanner-trivy, helm-push, dagger, melange, syft, harbor-scanner-trivy-fips, policy-controller-fips, k3d, cri-tools...

GHSA-X84C-P2G9-RQV9 vulnerabilities

Vulnerabilities for packages: wolfictl, harbor-scanner-trivy, policy-controller, kaniko, neuvector-scanner, syft, buf, k3d, cri-tools, docker-compose, grype, melange, helm-push, dagger...

GHSA-X84C-P2G9-RQV9 vulnerabilities

Vulnerabilities for packages: buf, kaniko, grype, wolfictl, docker-compose, neuvector-scanner, policy-controller, harbor-scanner-trivy, helm-push, dagger, melange, syft, harbor-scanner-trivy-fips, policy-controller-fips, k3d, cri-tools...

GHSA-R53H-JV2G-VPX6 vulnerabilities

Vulnerabilities for packages: kubevela, flux-source-controller, kots, k8sgpt, flux-helm-controller, up, zarf, cilium-cli, chartmuseum, helm-push, trivy, kubescape, eksctl, zot, k9s, helm-operator...

GHSA-V53G-5GJP-272R vulnerabilities

Vulnerabilities for packages: helm-operator, up, kubevela, flux-source-controller, kubescape, chartmuseum, zot, kots, trivy, eksctl, k8sgpt, flux-helm-controller, zarf, cilium-cli, helm-push, k9s...

CVE-2024-25620 vulnerabilities

Vulnerabilities for packages: kubevela, flux-source-controller, kots, k8sgpt, flux-helm-controller, up, zarf, cilium-cli, chartmuseum, helm-push, trivy, kubescape, eksctl, zot, k9s, helm-operator...