CLEANSTART-2026-PH90623 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the prometheus-operator-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-UU20906 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the prometheus-operator-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CVE-2024-45336 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, vgpu-util, calico-fips, flux-source-controller-fips, aws-privateca-issuer-fips, fluent-operator, dataplaneapi-fips, trillian, docker-credential-ecr-login-fips, promxy-fips, velero-fips, kubernetes-dashboard-api, temporal-server, wave-fips,...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: flux, spire-server, boring-registry, trino, thanos, tkn, secrets-store-csi-driver-provider-azure, falcoctl, zarf, opentelemetry-collector-contrib, ksops, fluent-bit-plugin-loki, goreleaser, grafana-mimir, rclone, rekor, step-ca, pulumi, flux-kustomize-controller,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, terraform-provider-azurerm, protoc-gen-go, fluent-operator, dataplaneapi-fips, trillian, velero-fips, wave-fips, fuse-overlayfs-snapshotter, ytt, prometheus-alertmanager, crane, litestream, cilium-fips, nri-mysql, azure-aad-pod-identity-mic...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: terraform-provider-azurerm, crossplane-provider-aws-sns, crossplane-provider-aws-cloudwatchlogs, trillian, temporal-server, fuse-overlayfs-snapshotter, prometheus-alertmanager, crossplane-provider-azure-sql, guac, azure-aad-pod-identity-mic, prometheus-operator-fips,...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: envoy-ratelimit, kyverno-policy-reporter-kyverno-plugin, nfs-subdir-external-provisioner, delve, actions-runner-controller, flannel-cni-plugin, gcsfuse, kubernetes-csi-livenessprobe, kubernetes-event-exporter, aws-load-balancer-controller, nri-mysql, pulumi, wazero,...

Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from systemd, libcap, openssl-libs, libxml2, go-toolset, and prometheus-operator

Summary Multiple issues were identified in Red Hat UBI packages systemd, libcap, openssl-libs, libxml2, go-toolset, and prometheus-operator that were shipped with IBM MQ Operator and IBM supplied MQ Advanced container images. IBM has addressed the vulnerabilities. Vulnerability Details...