CLEANSTART-2026-UU20906 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the prometheus-operator-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CVE-2024-45336 vulnerabilities

Vulnerabilities for packages: temporal-server, cosign-fips, runc, helm-operator, kubernetes-csi-external-attacher, protoc-gen-go-grpc, kwok, grafana-rollout-operator-fips, harbor-registry, cert-manager-cmctl, etcd-fips, trillian-fips, controller-gen, rancher-loglevel, kbld, tekton-chains-fips,...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: tekton-chains, hugo, grafana-agent-operator, harbor-registry, rekor, sigstore-scaffolding, sqlpad, fluent-bit-plugin-loki, pulumi, falcoctl, prometheus-operator, tkn, k8sgpt, chezmoi, up, velero, trino, fulcio, kubescape, argo-workflows, guac, druid, cortex,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: logstash-exporter, cosign-fips, runc, helm-operator, protoc-gen-go-grpc, kwok, secrets-store-csi-driver, addon-resizer-fips, nri-haproxy, harbor-registry, opa-fips, etcd-fips, trillian-fips, controller-gen, dynamic-localpv-provisioner, tekton-chains-fips, nerdctl,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: logstash-exporter, temporal-server, cosign-fips, crossplane-provider-aws-kms, runc, helm-operator, protoc-gen-go-grpc, kwok, secrets-store-csi-driver, terraform-provider-sendgrid-fips, trillian-fips, zot, dynamic-localpv-provisioner, eksctl, nerdctl,...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: kpt, pulumi-language-java, task, supercronic, cni-plugins, cadvisor, aws-flb-firehose, pulumi, timoni, kor, grype, metrics-server, newrelic-infrastructure-agent, nri-haproxy, go-md2man, dynamic-localpv-provisioner, regclient, vt-cli, oras, k8sgpt, shfmt, up, nri-ngin...

Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from systemd, libcap, openssl-libs, libxml2, go-toolset, and prometheus-operator

Summary Multiple issues were identified in Red Hat UBI packages systemd, libcap, openssl-libs, libxml2, go-toolset, and prometheus-operator that were shipped with IBM MQ Operator and IBM supplied MQ Advanced container images. IBM has addressed the vulnerabilities. Vulnerability Details...