Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.35 security update

Red Hat OpenShift Container Platform release 4.14.35 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...

RHEL 8 / 9 : OpenShift Container Platform 4.14.35 (RHSA-2024:5436)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:5436 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or...

RHEL 8 / 9 : OpenShift Container Platform 4.15.28 (RHSA-2024:5442)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:5442 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.14.35 security update

Red Hat OpenShift Container Platform release 4.14.35 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a security impact of...

GO-2022-0983 ANSI escape characters not filtered in kubectl in k8s.io/kubernetes

ANSI escape characters not filtered in kubectl in k8s.io/kubernetes...

Defeating Kubernetes Privilege Escalation: A Cloud Detection & Response Case Study

This case study serves to highlight the importance of rapid, heuristic, accurate, and contextualized detection and response in the cloud...

GO-2022-0910 Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes...

GO-2022-0908 Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes...

GO-2022-0893 Access Restriction Bypass in kubernetes in github.com/kubernetes/kubernetes

Access Restriction Bypass in kubernetes in github.com/kubernetes/kubernetes...

GO-2022-0890 Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes

Server Side Request Forgery SSRF in Kubernetes in k8s.io/kubernetes...

GO-2022-0907 Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes

Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes...

GO-2022-0867 Allocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes in k8s.io/kubernetes

Allocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes in k8s.io/kubernetes...

GO-2022-0886 Kubernetes Arbitrary Command Injection in k8s.io/kubernetes

Kubernetes Arbitrary Command Injection in k8s.io/kubernetes...

GO-2022-0885 Improper Authentication in Kubernetes in k8s.io/kubernetes

Improper Authentication in Kubernetes in k8s.io/kubernetes...

GO-2022-0857 Information Exposure in Kubernetes in github.com/kubernetes/kubernetes

Information Exposure in Kubernetes in github.com/kubernetes/kubernetes...

GO-2022-0802 Kubernetes kubectl cp Vulnerable to Symlink Attack in k8s.io/kubernetes

Kubernetes kubectl cp Vulnerable to Symlink Attack in k8s.io/kubernetes...

GO-2022-0782 Symlink Attack in kubectl cp in k8s.io/kubernetes

Symlink Attack in kubectl cp in k8s.io/kubernetes...

GO-2022-0792 Privilege Escalation in Kubernetes in github.com/kubernetes/kubernetes

Privilege Escalation in Kubernetes in github.com/kubernetes/kubernetes...

GO-2022-0703 XML Entity Expansion and Improper Input Validation in Kubernetes API server in k8s.io/kubernetes

XML Entity Expansion and Improper Input Validation in Kubernetes API server in k8s.io/kubernetes...

GO-2022-0617 WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

This report has been withdrawn from the Go vulnerability database with reason: "Low severity issue with no fix available or planned. Likely to cause false positives."...