Important: Red Hat Security Advisory: OpenShift Container Platform 4.16.1 bug fix and security update

Red Hat OpenShift Container Platform release 4.16.1 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.16. Red Hat Product Security has rated this update as having a...

CBL Mariner 2.0 Security Update: cert-manager / helm (CVE-2024-26147)

The version of cert-manager / helm installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-26147 advisory. - Helm is a package manager for Charts for Kubernetes. Versions prior to 3.14.2 contain an...

CBL Mariner 2.0 Security Update: cert-manager / helm / moby-cli / moby-compose / moby-engine (CVE-2023-2253)

The version of cert-manager / helm / moby-cli / moby-compose / moby-engine installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-2253 advisory. - A flaw was found in the /v2/catalog endpoint in...

CVE-2024-24791 vulnerabilities

Vulnerabilities for packages: etcd, metallb, go-bindata, k3d, pulumi-language-java, hugo-extended, secrets-store-csi-driver, conftest-fips, confluent-common-docker, logstash-exporter, dex-k8s-authenticator, kots, gops, overmind, chainctl, azure-aad-pod-identity-mic, pombump, cue-fips, mkcert,...

Dependency management path traversal in helm

...

CVE-2024-25620 affecting package helm for versions less than 3.13.2-3

CVE-2024-25620 affecting package helm for versions less than 3.13.2-3. An upgraded version of the package is available that resolves this issue...

CVE-2024-26147 affecting package helm for versions less than 3.13.2-3

CVE-2024-26147 affecting package helm for versions less than 3.13.2-3. An upgraded version of the package is available that resolves this issue...

OPENSUSE-SU-2024:13295-1 helm-3.13.0-2.1 on GA media

These are all security issues fixed in the helm-3.13.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12345-1 helm-3.9.4-3.1 on GA media

These are all security issues fixed in the helm-3.9.4-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10842-1 helm-mirror-0.3.1-1.9 on GA media

These are all security issues fixed in the helm-mirror-0.3.1-1.9 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13708-1 helm-3.14.2-1.1 on GA media

These are all security issues fixed in the helm-3.14.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12252-1 helm-3.9.3-1.1 on GA media

These are all security issues fixed in the helm-3.9.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11430-1 terraform-provider-helm-2.0.0-1.4 on GA media

These are all security issues fixed in the terraform-provider-helm-2.0.0-1.4 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12667-1 helm-3.11.1-1.1 on GA media

These are all security issues fixed in the helm-3.11.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10841-1 helm-3.6.3-1.1 on GA media

These are all security issues fixed in the helm-3.6.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12323-1 helm-3.9.4-2.1 on GA media

These are all security issues fixed in the helm-3.9.4-2.1 package on the GA media of openSUSE Tumbleweed...

The vulnerability of the package manager for Kubernetes Helm, related to incorrect path name restrictions for restricted access directories, allows a malicious actor to save Helm Charts outside of the expected directory.

The vulnerability of the package manager for Kubernetes Helm is related to an incorrect restriction on the path name to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to store a Helm Chart outside of the expected directory...

CVE-2023-45288 affecting package helm for versions less than 3.14.2-2

CVE-2023-45288 affecting package helm for versions less than 3.14.2-2. A patched version of the package is available...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: aws-flb-cloudwatch-fips, etcd, metallb, go-bindata, k3d, pulumi-language-java, secrets-store-csi-driver, conftest-fips, confluent-common-docker, logstash-exporter, dex-k8s-authenticator, kots, gops, overmind, chainctl, azure-aad-pod-identity-mic, pombump, cue-fips,...

GO-2024-2866 Submariner Operator sets unnecessary RBAC permissions in helm charts in github.com/submariner-io/submariner-operator

Submariner Operator sets unnecessary RBAC permissions in helm charts in github.com/submariner-io/submariner-operator...