Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Operator package issues

Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Operator package issues. We have performed updates to the Operators used by our Speech Services. The following vulnerabilities have been addressed in this update. Please read the details for...

Moderate: Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.14.6

The 1.14.6 GA release of Red Hat OpenShift Pipelines Operator.. For more details see product documentation. The 1.14.6 release of Red Hat OpenShift Pipelines Operator...

ALPINE-CVE-2024-56406

A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including development versions from 5.33.1 through 5.41.10. When there are non-ASCII bytes in the left-hand-side of the tr operator, Sdotransinvmap can overflow the destination...

AZL-60384 CVE-2024-56406 affecting package perl for versions less than 5.34.1-490

A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including development versions from 5.33.1 through 5.41.10. When there are non-ASCII bytes in the left-hand-side of the tr operator, Sdotransinvmap can overflow the destination...

DEBIAN-CVE-2024-56406

A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including development versions from 5.33.1 through 5.41.10. When there are non-ASCII bytes in the left-hand-side of the tr operator, Sdotransinvmap can overflow the destination...

AZL-60409 CVE-2024-56406 affecting package perl for versions less than 5.38.2-507

A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including development versions from 5.33.1 through 5.41.10. When there are non-ASCII bytes in the left-hand-side of the tr operator, Sdotransinvmap can overflow the destination...

UBUNTU-CVE-2024-56406

A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including development versions from 5.33.1 through 5.41.10. When there are non-ASCII bytes in the left-hand-side of the tr operator, Sdotransinvmap can overflow the destination...

CVE-2025-32387 vulnerabilities

Vulnerabilities for packages: helm-docs, cluster-api-helm-controller, k9s, cert-manager-cmctl, flux-helm-controller, rancher-helm, k8ssandra-client, pluto, flux, chartmuseum, eksctl, helm-push, zarf, trivy, flux-source-controller, chart-testing, helm-operator, tw, cilium-cli, kots, kubescape, zot...

GHSA-4HFP-H4CW-HJ8P vulnerabilities

Vulnerabilities for packages: helm-docs, cluster-api-helm-controller, k9s, cert-manager-cmctl, flux-helm-controller, rancher-helm, k8ssandra-client, pluto, flux, chartmuseum, eksctl, helm-push, zarf, trivy, flux-source-controller, chart-testing, helm-operator, tw, cilium-cli, kots, kubescape, zot...

CVE-2025-32386 vulnerabilities

Vulnerabilities for packages: helm-docs, cluster-api-helm-controller, k9s, cert-manager-cmctl, flux-helm-controller, rancher-helm, k8ssandra-client, pluto, flux, chartmuseum, eksctl, helm-push, zarf, trivy, flux-source-controller, chart-testing, helm-operator, tw, cilium-cli, kots, kubescape, zot...

GHSA-5XQW-8HWV-WG92 vulnerabilities

Vulnerabilities for packages: helm-docs, cluster-api-helm-controller, k9s, cert-manager-cmctl, flux-helm-controller, rancher-helm, k8ssandra-client, pluto, flux, chartmuseum, eksctl, helm-push, zarf, trivy, flux-source-controller, chart-testing, helm-operator, tw, cilium-cli, kots, kubescape, zot...

GHSA-4HFP-H4CW-HJ8P vulnerabilities

Vulnerabilities for packages: pluto, cluster-api-helm-controller, flux-helm-controller-fips, helm-push, rancher-helm, cluster-api-helm-controller-fips, harbor, k8ssandra-client-fips, zarf, kubescape, zot, helm-operator-fips, trivy, chartmuseum, cert-manager-cmctl-fips, flux-source-controller,...

GHSA-5XQW-8HWV-WG92 vulnerabilities

Vulnerabilities for packages: pluto, cluster-api-helm-controller, flux-helm-controller-fips, helm-push, rancher-helm, cluster-api-helm-controller-fips, harbor, k8ssandra-client-fips, zarf, kubescape, zot, helm-operator-fips, trivy, chartmuseum, cert-manager-cmctl-fips, flux-source-controller,...

CVE-2025-24375

Charmed MySQL K8s operator is a Charmed Operator for running MySQL on Kubernetes. Before revision 221, the method for calling a SQL DDL or python based mysql-shell scripts can leak database users credentials. The method mysql-operator calls mysql-shell application rely on writing to a temporary...

SUSE-SU-2025:20184-1 Security update for elemental-operator

This update for elemental-operator fixes the following issues: - Updated to version 1.6.8: Deactivated e2e workflow Updated header year CVE-2025-22870: golang.org/x/net/proxy: Fixed proxy bypass using IPv6 zone IDs bsc1238700 CVE-2025-22869: golang.org/x/crypto/ssh: Fixed Denial of Service in the...

Security update for elemental-operator

This update for elemental-operator fixes the following issues: Updated to version 1.6.8: Deactivated e2e workflow Updated header year CVE-2025-22870: golang.org/x/net/proxy: Fixed proxy bypass using IPv6 zone IDs bsc1238700 CVE-2025-22869: golang.org/x/crypto/ssh: Fixed Denial of Service in the K...

messmittel-exakt.de Cross Site Scripting vulnerability OBB-4043504

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

casemephi.com Cross Site Scripting vulnerability OBB-4043288

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ibw.at Cross Site Scripting vulnerability OBB-4043184

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

toolkits.horiba-abx.com Cross Site Scripting vulnerability OBB-4043142

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...