SUSE-SU-2025:20278-1 Security update for helm

This update for helm fixes the following issues: - Update to version 3.17.2 bsc1238688, CVE-2025-22870: Updating to 0.37.0 for x/net builddeps: bump the k8s-io group with 7 updates - Update to version 3.17.1: merge null child chart objects builddeps: bump the k8s-io group with 7 updates fix: chec...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: dockerize, kubecolor, k8sgpt, go-licenses, frp, cni-plugins, thanos, cloud-provider-aws, kapp, nri-f5, nri-rabbitmq, nsc, actions-runner-controller, k8ssandra-client, flux-kustomize-controller, grpc-health-probe, kube-bench, local-static-provisioner, ghaudit,...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: external-secrets-fips, prometheus-mongodb-exporter, mongo-tools, src-fingerprint, cortex, argo-workflows-fips, pulumi-kubernetes-operator, croc, wait-for-port, prometheus-adapter, hey, bank-vaults, delve, guac, paranoia, step-fips, php-fpmexporter,...

CVE-2024-32473 vulnerabilities

Vulnerabilities for packages: syft, kaniko, policy-controller, helm-push, docker-compose, wolfictl, k3d, melange, buf, harbor-scanner-trivy, neuvector-scanner, cri-tools, grype, dagger...

CVE-2024-32473 vulnerabilities

Vulnerabilities for packages: buf, harbor-scanner-trivy-fips, helm-push, neuvector-scanner, policy-controller, wolfictl, docker-compose, harbor-scanner-trivy, policy-controller-fips, kaniko, dagger, cri-tools, k3d, melange, grype, syft...

GHSA-X84C-P2G9-RQV9 vulnerabilities

Vulnerabilities for packages: syft, kaniko, policy-controller, helm-push, docker-compose, wolfictl, k3d, melange, buf, harbor-scanner-trivy, neuvector-scanner, cri-tools, grype, dagger...

GHSA-X84C-P2G9-RQV9 vulnerabilities

Vulnerabilities for packages: buf, harbor-scanner-trivy-fips, helm-push, neuvector-scanner, policy-controller, wolfictl, docker-compose, harbor-scanner-trivy, policy-controller-fips, kaniko, dagger, cri-tools, k3d, melange, grype, syft...

GHSA-R53H-JV2G-VPX6 vulnerabilities

Vulnerabilities for packages: helm-push, k8sgpt, kubescape, trivy, chartmuseum, flux-helm-controller, kots, flux-source-controller, helm-operator, kubevela, zot, cilium-cli, eksctl, zarf, up, k9s...

GHSA-V53G-5GJP-272R vulnerabilities

Vulnerabilities for packages: cilium-cli, kubevela, trivy, helm-operator, zarf, k8sgpt, helm-push, kots, zot, flux-helm-controller, k9s, eksctl, kubescape, chartmuseum, flux-source-controller, up...

CVE-2024-25620 vulnerabilities

Vulnerabilities for packages: helm-push, k8sgpt, kubescape, trivy, chartmuseum, flux-helm-controller, kots, flux-source-controller, helm-operator, kubevela, zot, cilium-cli, eksctl, zarf, up, k9s...