SUSE-SU-2025:20278-1 Security update for helm

This update for helm fixes the following issues: - Update to version 3.17.2 bsc1238688, CVE-2025-22870: Updating to 0.37.0 for x/net builddeps: bump the k8s-io group with 7 updates - Update to version 3.17.1: merge null child chart objects builddeps: bump the k8s-io group with 7 updates fix: chec...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: postgres-operator, age, promxy, vt-cli, gostatsd, paranoia, restic, tflint, falcosidekick, kuberay-operator, aws-network-policy-agent, protoc-gen-go-grpc, openfga, q, kubernetes-csi-livenessprobe, wuzz, flux-source-controller, aws-load-balancer-controller,...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: external-secrets-fips, prometheus-mongodb-exporter, mongo-tools, src-fingerprint, cortex, argo-workflows-fips, pulumi-kubernetes-operator, croc, wait-for-port, prometheus-adapter, hey, bank-vaults, delve, guac, paranoia, step-fips, php-fpmexporter,...

CVE-2024-32473 vulnerabilities

Vulnerabilities for packages: grype, policy-controller, buf, dagger, docker-compose, kaniko, neuvector-scanner, wolfictl, helm-push, melange, syft, k3d, harbor-scanner-trivy, cri-tools...

CVE-2024-32473 vulnerabilities

Vulnerabilities for packages: buf, harbor-scanner-trivy-fips, helm-push, neuvector-scanner, policy-controller, wolfictl, docker-compose, harbor-scanner-trivy, policy-controller-fips, kaniko, dagger, cri-tools, k3d, melange, grype, syft...

GHSA-X84C-P2G9-RQV9 vulnerabilities

Vulnerabilities for packages: grype, policy-controller, buf, dagger, docker-compose, kaniko, neuvector-scanner, wolfictl, helm-push, melange, syft, k3d, harbor-scanner-trivy, cri-tools...

GHSA-X84C-P2G9-RQV9 vulnerabilities

Vulnerabilities for packages: buf, harbor-scanner-trivy-fips, helm-push, neuvector-scanner, policy-controller, wolfictl, docker-compose, harbor-scanner-trivy, policy-controller-fips, kaniko, dagger, cri-tools, k3d, melange, grype, syft...

GHSA-R53H-JV2G-VPX6 vulnerabilities

Vulnerabilities for packages: helm-push, k8sgpt, kubescape, trivy, chartmuseum, flux-helm-controller, kots, flux-source-controller, helm-operator, kubevela, zot, cilium-cli, eksctl, zarf, up, k9s...

GHSA-V53G-5GJP-272R vulnerabilities

Vulnerabilities for packages: trivy, eksctl, cilium-cli, k9s, zot, chartmuseum, flux-source-controller, kubescape, kots, flux-helm-controller, kubevela, helm-push, zarf, k8sgpt, helm-operator, up...

CVE-2024-25620 vulnerabilities

Vulnerabilities for packages: helm-push, k8sgpt, kubescape, trivy, chartmuseum, flux-helm-controller, kots, flux-source-controller, helm-operator, kubevela, zot, cilium-cli, eksctl, zarf, up, k9s...