CLEANSTART-2026-XO66167 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the prometheus-operator-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-UU20906 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the prometheus-operator-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CVE-2024-45336 vulnerabilities

Vulnerabilities for packages: wait-for-port, dex-fips, aws-efs-csi-driver-fips, regclient, kafka-proxy, cert-manager-webhook-pdns, gosu, kubernetes-csi-external-resizer-fips, cfssl-fips, velero-plugin-for-aws-fips, eck-operator, metacontroller, restic-fips, request-1279-14, boring-registry-fips,...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: cortex, sops, sqlpad, velero, kubescape, sigstore-scaffolding, timestamp-authority, cosign, druid, tekton-chains, prometheus-operator, fulcio, hugo-extended, tempo, goreleaser, grafana-mimir, opentelemetry-collector, rclone, flux-image-reflector-controller,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: wait-for-port, dex-fips, aws-efs-csi-driver-fips, nri-apache, regclient, kafka-proxy, nri-haproxy, trivy, cert-manager-webhook-pdns, gosu, velero-plugin-for-aws-fips, metacontroller, restic-fips, boring-registry-fips, src-fingerprint-fips, tigera-operator, karpenter,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: dex-fips, aws-efs-csi-driver-fips, trivy, crossplane-provider-aws-kinesis, metacontroller, boring-registry-fips, tigera-operator, minio-fips, prometheus-redis-exporter-fips, buildkitd, supercronic, pgpool2exporter-fips, prometheus-statsd-exporter-fips,...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: cortex, src-fingerprint, helm-operator, ytt, cni-plugins, newrelic-fluent-bit-output, chartmuseum, influx, terraform-docs, slsa-verifier, govulncheck, wazero, yam, goreleaser, bazelisk, hello-world-golang, nri-haproxy, kube-rbac-proxy, petname, eksctl, docker-cli,...

Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from systemd, libcap, openssl-libs, libxml2, go-toolset, and prometheus-operator

Summary Multiple issues were identified in Red Hat UBI packages systemd, libcap, openssl-libs, libxml2, go-toolset, and prometheus-operator that were shipped with IBM MQ Operator and IBM supplied MQ Advanced container images. IBM has addressed the vulnerabilities. Vulnerability Details...