GHSA-7HFW-R8QC-89V4 vulnerabilities

Vulnerabilities for packages: flux-notification-controller, cert-manager-fips, victoriametrics-cluster-fips, aws-ebs-csi-driver-fips, localstack, flux-image-automation-controller, flux-source-watcher, aws-load-balancer-controller-fips, victoriametrics-fips, go, flux-fips, metacontroller,...

GHSA-JV3W-X3R3-G6RM vulnerabilities

Vulnerabilities for packages: azure-ipam, buildah, buildkitd, nerdctl-fips, datadog-agent, docker, calico-fips, flannel, podman, flannel-fips, rootlesskit-fips, containerd, istio-fips, istio, nerdctl, datadog-agent-fips, docker-fips, calico, multus-cni, containerd-fips, amazon-k8s-cni-fips,...

GHSA-J7VJ-RW65-4V26 vulnerabilities

Vulnerabilities for packages: mockgen, kaf, regclient, kubernetes, consul, slsa-verifier, kaniko, velero-plugin-for-aws-fips, cluster-proportional-autoscaler, kserve-rest-proxy, step-fips, wait-for-port, helm-operator-fips, kafkaexporter, confluent-common-docker, istio-pilot-agent,...

GHSA-8XFX-RJ4P-23JM vulnerabilities

Vulnerabilities for packages: mockgen, kaf, regclient, kubernetes, consul, slsa-verifier, kaniko, velero-plugin-for-aws-fips, cluster-proportional-autoscaler, kserve-rest-proxy, step-fips, wait-for-port, helm-operator-fips, kafkaexporter, confluent-common-docker, istio-pilot-agent,...

conmon security update

conmon 2.1.3-8 - address CVE-2023-39326 cri-o 1.25.5-1 - Added Oracle Specifile Files for cri-o cri-tools 1.25.0-3 - Resolve CVE-2023-39326 flannel-cni-plugin 1.0.1-4 - Resolve CVE-2023-39326 helm 3.11.1-3 - address CVE-2023-39326 istio 1.16.7-3 - Updated Golang to 1.20.12 to address CVE...

conmon security update

conmon 2.1.3-7 - Resolve CVE-2023-39325 2.1.3-6 - Add ol8baseoslatest, and ol9baseoslatest, to Jenkinsfile 2.1.3-5 - Add systemd-devel as build requirement 2.1.3-4 - Add support ARM build cri-o 1.26.3-3 - Resolve CVE-2023-39325 1.26.3-2 - Add support for ARM build cri-tools 1.26.1-3 - Resolve...

Oracle Linux 7 : grafana / kubernetes-cni / kubernetes-cni-plugins / kubernetes / kubernetes / olcne (ELSA-2020-5726)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5726 advisory. - CVE-2020-10749: IPv4 only clusters susceptible to MitM attacks via IPv6 rogue router advertisements - CVE-2020-8555: Half-Blind SSRF in...

olcne security update

coredns 1.7.0-1 - Added Oracle specific build files cri-o 1.18.4-2 - Fix for CVE-2021-27918 1.18.4-1 - Added Oracle Specifile Files for cri-o cri-tools 1.18.0-2 - Address CVE-2021-27918 etcd 3.4.3-1.0.5 - Address CVE-2021-27918 flannel 0.12.0-2 - Address CVE-2021-27918 yq 3.4.0-2 - Address...

coredns cri-o cri-tools etcd flannel kata kata-agent kata-image kata-ksm-throttler kata-proxy kata-runtime kata-shim kubernetes kubernetes-cni kubernetes-cni-plugins kubernetes-dashboard olcne yq security update

coredns 1.3.1-1.0.6 - Address CVE-2020-16845 1.3.1-1.0.5 - Fix image location cri-o 1.14.7-1.0.8 - Address CVE-2020-16845 cri-tools 1.14.0-1.0.6 - Address CVE-2020-16845 etcd 3.3.10-1.0.5 - Address CVE-2020-16845 3.3.10-1.0.4 - Fix image location flannel 0.10.0-2.1.12 - Address CVE-2020-16845...

kubernetes kubeadm-ha-setup kubernetes-cni kubernetes-cni-plugins security update

kubernetes 1.12.10-1.0.15 - Address CVE-2020-16845 kubeadm-ha-setup 0.0.2-1.0.73 - Fix update to coredns image tag 0.0.2-1.0.72 - Address CVE-2020-16845 kubernetes-cni 0.7.1-1.0.3 - Pin min version of cni-plugins kubernetes-cni-plugins 0.8.6-1.0.3 - Address CVE-2020-16845...

Oracle Linux 7 : kubernetes / kubeadm-ha-setup / kubernetes-cni / kubernetes-cni-plugins (ELSA-2020-5825)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-5825 advisory. - Address CVE-2020-16845 kubeadm-ha-setup - Address CVE-2020-16845 kubernetes-cni Tenable has extracted the preceding description block directly from the Oracle...

grafana kubernetes-cni kubernetes-cni-plugins kubernetes kubernetes olcne security update

grafana %-1.0.1 - Added Oracle Specific Build Files for grafana kubernetes-cni 0.7.1-1.0.1 - Added Oracle specific build files for Kubernetes CNI kubernetes-cni-plugins 0.8.6-1.0.1 - Added Oracle specific build files for Kubernetes CNI Plugins kubernetes 1.14.9-1.0.4 - CVE-2020-10749: IPv4 only...