Important: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 2.6.15

Red Hat OpenShift Service Mesh 2.6.15 This update has a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section. Red Hat OpenShift Service Mesh...

GHSA-7774-7VR3-CC8J vulnerabilities

Vulnerabilities for packages: istio-pilot-agent, istio-operator, istio-pilot-discovery, istio-cni...

GHSA-QCVW-82HH-GQ38 vulnerabilities

Vulnerabilities for packages: istio-pilot-agent, istio-operator, istio-pilot-discovery, istio-cni...

GHSA-HQXW-MM44-GC4R vulnerabilities

Vulnerabilities for packages: istio-pilot-agent, istio-operator, istio-pilot-discovery, istio-cni...

CVE-2021-39156 vulnerabilities

Vulnerabilities for packages: istio-pilot-agent, istio-operator, istio-pilot-discovery, istio-cni...

CVE-2022-23635 vulnerabilities

Vulnerabilities for packages: istio-pilot-agent, istio-operator, istio-pilot-discovery, istio-cni...

CVE-2022-31045 vulnerabilities

Vulnerabilities for packages: istio-pilot-agent, istio-operator, istio-pilot-discovery, istio-cni...

GHSA-XWX5-5C9G-X68X vulnerabilities

Vulnerabilities for packages: istio-pilot-agent, istio-operator, istio-pilot-discovery, istio-cni...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: kube-bench, coredns, neuvector-scanner, atlantis, secrets-store-csi-driver-provider-azure, helm-fips, http-echo, osv-scanner, kwok, bom, stern, kubernetes-fips, cri-tools, docker-compose, kubernetes-dashboard-fips, dex-fips, external-dns-fips, crossplane-provider-aws...

CVE-2024-28122 vulnerabilities

Vulnerabilities for packages: boring-registry, minio, mc-fips, falcoctl, minio-fips, spire-server, boring-registry-fips, falcoctl-fips, mc, external-secrets-fips, spire-server-fips, falco...

GHSA-HJ3V-M684-V259 vulnerabilities

Vulnerabilities for packages: boring-registry, minio, mc-fips, falcoctl, minio-fips, spire-server, boring-registry-fips, falcoctl-fips, mc, external-secrets-fips, spire-server-fips, falco...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-sqs, terragrunt, kube-bench, coredns, atlantis, secrets-store-csi-driver-provider-azure, osv-scanner, kwok, buf, contour, doppler-kubernetes-operator, cri-tools, docker-compose, kubernetes-dashboard-fips, dex-fips, external-dns-fips,...

GHSA-R53H-JV2G-VPX6 vulnerabilities

Vulnerabilities for packages: chartmuseum, cert-manager-fips, flux-helm-controller, helm-push, zot, kubevela, up, eksctl, flux-source-controller, trivy, kots, cert-manager, zarf, k8sgpt, kubescape, k9s, helm-operator, cilium-cli...

GHSA-V53G-5GJP-272R vulnerabilities

Vulnerabilities for packages: helm-push, kots, kubescape, trivy, k8sgpt, flux-helm-controller, zot, kubevela, cilium-cli, zarf, up, k9s, flux-source-controller, eksctl, helm-operator, chartmuseum...

CVE-2024-25620 vulnerabilities

Vulnerabilities for packages: chartmuseum, cert-manager-fips, flux-helm-controller, helm-push, zot, kubevela, up, eksctl, flux-source-controller, trivy, kots, cert-manager, zarf, k8sgpt, kubescape, k9s, helm-operator, cilium-cli...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: chartmuseum, cert-manager-fips, argo-workflows, crane, zot, cadvisor-fips, falcoctl, pulumi, flux, k8sgpt, slsa-verifier, kargo, helm-operator, datadog-agent, helm-fips, ko-fips, falco, bom, kpt, loki, skaffold, buildkitd, skopeo, trivy, rancher-machine, cosign,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: chartmuseum, cert-manager-fips, argo-workflows, crane, zot, cadvisor-fips, falcoctl, pulumi, flux, k8sgpt, slsa-verifier, kargo, helm-operator, datadog-agent, helm-fips, ko-fips, falco, bom, kpt, loki, skaffold, buildkitd, skopeo, trivy, rancher-machine, cosign,...

CVE-2024-21664 vulnerabilities

Vulnerabilities for packages: kubescape, tekton-chains, falco, gitsign, mc, minio, vexctl, boring-registry, spire-server, falcoctl...

CVE-2023-49290 vulnerabilities

Vulnerabilities for packages: falcoctl, vexctl, falcoctl-fips, tekton-chains, gitsign, kubescape, cosign-fips, falco...

CVE-2023-49290 vulnerabilities

Vulnerabilities for packages: kubescape, tekton-chains, falco, gitsign, vexctl, falcoctl...