Important: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 2.6.15

Red Hat OpenShift Service Mesh 2.6.15 This update has a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section. Red Hat OpenShift Service Mesh...

GHSA-HQXW-MM44-GC4R vulnerabilities

Vulnerabilities for packages: istio-pilot-agent, istio-operator, istio-pilot-discovery, istio-cni...

GHSA-QCVW-82HH-GQ38 vulnerabilities

Vulnerabilities for packages: istio-pilot-agent, istio-operator, istio-pilot-discovery, istio-cni...

CVE-2021-39156 vulnerabilities

Vulnerabilities for packages: istio-pilot-agent, istio-operator, istio-pilot-discovery, istio-cni...

CVE-2022-31045 vulnerabilities

Vulnerabilities for packages: istio-pilot-agent, istio-operator, istio-pilot-discovery, istio-cni...

GHSA-XWX5-5C9G-X68X vulnerabilities

Vulnerabilities for packages: istio-pilot-agent, istio-operator, istio-pilot-discovery, istio-cni...

GHSA-7774-7VR3-CC8J vulnerabilities

Vulnerabilities for packages: istio-pilot-agent, istio-operator, istio-pilot-discovery, istio-cni...

CVE-2022-23635 vulnerabilities

Vulnerabilities for packages: istio-pilot-agent, istio-operator, istio-pilot-discovery, istio-cni...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: aactl, secrets-store-csi-driver, flux-source-controller, nri-prometheus, jsonnet-bundler, aws-efs-csi-driver, ghaudit, boring-registry-fips, wireguard-go, timestamp-authority-fips, hcloud, aws-flb-firehose-fips, gosu, ksops, gke-gcloud-auth-plugin,...

CVE-2024-28122 vulnerabilities

Vulnerabilities for packages: boring-registry-fips, falco, mc, spire-server-fips, mc-fips, falcoctl, spire-server, minio, external-secrets-fips, falcoctl-fips, minio-fips, boring-registry...

GHSA-HJ3V-M684-V259 vulnerabilities

Vulnerabilities for packages: boring-registry-fips, falco, mc, spire-server-fips, mc-fips, falcoctl, spire-server, minio, external-secrets-fips, falcoctl-fips, minio-fips, boring-registry...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: sigstore-scaffolding-fips, terraform-provider-sendgrid, aactl, kubeadm-controlplane-controller, secrets-store-csi-driver, flux-source-controller, crossplane-provider-azure-sql, nerdctl, nri-prometheus, aws-efs-csi-driver, kube-fluentd-operator, protoc-gen-go-grpc,...

GHSA-R53H-JV2G-VPX6 vulnerabilities

Vulnerabilities for packages: kubevela, zot, helm-push, kubescape, trivy, eksctl, up, helm-operator, chartmuseum, k8sgpt, zarf, cilium-cli, kots, cert-manager, flux-helm-controller, cert-manager-fips, k9s, flux-source-controller...

GHSA-V53G-5GJP-272R vulnerabilities

Vulnerabilities for packages: helm-operator, eksctl, flux-source-controller, up, k9s, chartmuseum, flux-helm-controller, zarf, kubevela, kubescape, cilium-cli, k8sgpt, zot, kots, trivy, helm-push...

CVE-2024-25620 vulnerabilities

Vulnerabilities for packages: kubevela, zot, helm-push, kubescape, trivy, eksctl, up, helm-operator, chartmuseum, k8sgpt, zarf, cilium-cli, kots, cert-manager, flux-helm-controller, cert-manager-fips, k9s, flux-source-controller...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: kubeflow-katib, kubescape, falco, falcoctl, aactl, helm-operator, rancher-machine, policy-controller, kpt, slsa-verifier, flux-image-reflector-controller, kubevela, datadog-agent-fips, nerdctl, trivy, dagger, newrelic-infrastructure-agent, eksctl, scorecard,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, kubescape, falco, falcoctl, aactl, helm-operator, rancher-machine, policy-controller, kpt, slsa-verifier, flux-image-reflector-controller, kubevela, datadog-agent-fips, nerdctl, trivy, dagger, newrelic-infrastructure-agent, eksctl, scorecard,...

CVE-2024-21664 vulnerabilities

Vulnerabilities for packages: minio, gitsign, spire-server, boring-registry, falcoctl, mc, falco, kubescape, vexctl, tekton-chains...

CVE-2023-49290 vulnerabilities

Vulnerabilities for packages: tekton-chains, falco, falcoctl, vexctl, falcoctl-fips, cosign-fips, kubescape, gitsign...

CVE-2023-49290 vulnerabilities

Vulnerabilities for packages: gitsign, falcoctl, falco, kubescape, vexctl, tekton-chains...