796 matches found
cri-o security update
cri-o 1.26.4-2 - Address CVE-2024-24786 cri-tools 1.26.1-5 - Address CVE-2024-24786 etcd 3.5.10-3 - Address protobuf CVE-2024-24786 3.5.10-1 - Added Oracle specific build files istio 1.17.8-3 - Address protobuf CVE-2024-24786 - Backport from 1.19.7 to address CVE-2024-23322, CVE-2024-23323,...
cri-o security update
cri-o 1.26.4-2 - Address CVE-2024-24786 cri-tools 1.26.1-5 - Address CVE-2024-24786 etcd 3.5.10-3 - Address protobuf CVE-2024-24786 3.5.10-1 - Added Oracle specific build files istio 1.17.8-3 - Address protobuf CVE-2024-24786 - Backport from 1.19.7 to address CVE-2024-23322, CVE-2024-23323,...
Moderate: Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.5.1 security update
Red Hat OpenShift Service Mesh Containers for 2.5.1 This update has a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section. Red Hat OpenShift...
cri-o security update
cri-o 1.25.5-2 - Address CVE-2024-24786 cri-tools 1.25.0-4 - Address CVE-2024-24786 etcd 3.5.9-4 - Address protobuf CVE-2024-24786 3.5.9-3 - Address CVE-2023-39326 by upgrading golang to version 1.20.12 istio 1.16.7-4 - Address protobuf CVE-2024-24786 - Backport from 1.19.7 to address...
cri-o security update
cri-o 1.25.5-2 - Address CVE-2024-24786 cri-tools 1.25.0-4 - Address CVE-2024-24786 etcd 3.5.9-4 - Address protobuf CVE-2024-24786 3.5.9-3 - Address CVE-2023-39326 by upgrading golang to version 1.20.12 istio 1.16.7-4 - Address protobuf CVE-2024-24786 - Backport from 1.19.7 to address...
olcne security update
1.8.1-2 - Cleanup spec file 1.8.1-1 - Fix OLM upgrade failure - upgrade from 0.17.0 to 0.23.1 failed due to a couple of crds missing - Add hostpathRequiresPrivilged value to rook template cr to be passed to module operator - Fixed Istio-1.18 and Istio-1.19 installation on aarch64 architecture -...
conmon security update
conmon 2.1.3-8 - address CVE-2023-39326 cri-o 1.26.4-1 - Added Oracle Specific Files for cri-o - Cherry-picked upstream commits for OCPBUGS-17150: oci: simplify stopping code https://github.com/cri-o/cri-o/pull/7185 - Fixed CVE-2023-39325: bump golang.org/x/net to v0.17.0 cri-tools 1.26.1-4 -...
conmon security update
conmon 2.1.3-8 - address CVE-2023-39326 cri-o 1.26.4-1 - Added Oracle Specific Files for cri-o - Cherry-picked upstream commits for OCPBUGS-17150: oci: simplify stopping code https://github.com/cri-o/cri-o/pull/7185 - Fixed CVE-2023-39325: bump golang.org/x/net to v0.17.0 cri-tools 1.26.1-4 -...
CVE-2024-28180 vulnerabilities
Vulnerabilities for packages: step-ca, tekton-chains, zarf, guac, kubernetes-dashboard, skaffold, aactl, vexctl, cloudflared, argo-workflows, zot, temporal-ui-server, rabbitmq-messaging-topology-operator, slsa-verifier, rekor, goreleaser, dgraph, falcoctl, kots, policy-controller, k3s, weaviate,...
CVE-2024-28122 vulnerabilities
Vulnerabilities for packages: mc, mc-fips, minio-fips, spire-server, falcoctl-fips, minio, spire-server-fips, external-secrets-fips, falcoctl, boring-registry, boring-registry-fips...
GHSA-HJ3V-M684-V259 vulnerabilities
Vulnerabilities for packages: mc, mc-fips, minio-fips, spire-server, falcoctl-fips, minio, spire-server-fips, external-secrets-fips, falcoctl, boring-registry, boring-registry-fips...
GHSA-C5Q2-7R4C-MV6G vulnerabilities
Vulnerabilities for packages: kube-rbac-proxy-fips, rekor-fips, rancher-agent, falcoctl, aactl, dex, gomplate-fips, temporal-ui-server-fips, sigstore-scaffolding-fips, temporal, sigstore-scaffolding, kubernetes-dashboard-fips, ko, timestamp-authority-fips, cloudflared, kubernetes-dashboard, zot,...
GHSA-C5Q2-7R4C-MV6G vulnerabilities
Vulnerabilities for packages: step-ca, tekton-chains, zarf, guac, kubernetes-dashboard, skaffold, aactl, vexctl, cloudflared, argo-workflows, zot, temporal-ui-server, rabbitmq-messaging-topology-operator, slsa-verifier, rekor, goreleaser, dgraph, falcoctl, kots, policy-controller, k3s, weaviate,...
BIT-ENVOY-2020-11767
Istio through 1.5.1 and Envoy through 1.14.1 have a data-leak issue. If there is a TCP connection negotiated with SNI over HTTPS to .example.com, a request for a domain concurrently configured explicitly e.g., abc.example.com is sent to the servers listening behind .example.com. The outcome shoul...
GHSA-8R3F-844C-MC37 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-cloudformation, crossplane-provider-aws-memorydb, gotenberg, crossplane-provider-aws-kms, terraform-provider-aws, conftest-fips, nfs-subdir-external-provisioner, prometheus-alertmanager-fips, kubernetes-dashboard-fips, terraform-docs, k3d,...
CVE-2024-24786 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-cloudformation, crossplane-provider-aws-memorydb, gotenberg, crossplane-provider-aws-kms, terraform-provider-aws, conftest-fips, nfs-subdir-external-provisioner, prometheus-alertmanager-fips, kubernetes-dashboard-fips, terraform-docs, k3d,...
conmon security update
conmon 2.1.3-8 - address CVE-2023-39326 2.1.3-7 - Resolve CVE-2023-39325 2.1.3-6 - Add ol8baseoslatest, and ol9baseoslatest, to Jenkinsfile 2.1.3-5 - Add systemd-devel as build requirement 2.1.3-4 - Add support ARM build 2.1.3.3 - Add OL9 support 2.1.3.2 - Update inline with Linux team building...
conmon security update
conmon 2.1.3-8 - address CVE-2023-39326 cri-o 1.25.5-1 - Added Oracle Specifile Files for cri-o cri-tools 1.25.0-3 - Resolve CVE-2023-39326 flannel-cni-plugin 1.0.1-4 - Resolve CVE-2023-39326 helm 3.11.1-3 - address CVE-2023-39326 istio 1.16.7-3 - Updated Golang to 1.20.12 to address CVE...
GHSA-R53H-JV2G-VPX6 vulnerabilities
Vulnerabilities for packages: kots, up, eksctl, trivy, helm-push, flux-helm-controller, k8sgpt, k9s, zot, cilium-cli, kubevela, zarf, kubescape, helm-operator, flux-source-controller, chartmuseum...