CLEANSTART-2026-UU20906 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the prometheus-operator-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CVE-2024-45336 vulnerabilities

Vulnerabilities for packages: aws-load-balancer-controller, cloudnative-pg-fips, ytt, nri-f5, nuclei, emissary, neuvector-dbgen, kube-state-metrics, docker-compose-fips, prometheus-node-exporter-fips, fluent-operator, eck-operator, multus-cni-fips, certificate-transparency-fips, helm-push,...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: kubescape, goreleaser, sops, step-ca, tkn, rekor, opentelemetry-collector-contrib, grafana-mimir, flux-source-controller, velero, k8sgpt, zot, argo-events, flux-image-reflector-controller, tekton-chains, step, sqlpad, chezmoi, thanos, trivy, guac,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: aws-load-balancer-controller, ytt, nri-f5, fulcio, neuvector-dbgen, kube-state-metrics, prometheus-node-exporter-fips, fluent-operator, multus-cni-fips, certificate-transparency-fips, helm-push, nri-apache, vcluster, neuvector-scanner, configmap-reload,...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: rqlite, metrics-server, hey, timoni, nri-elasticsearch, go-md2man, paranoia, kubernetes-csi-livenessprobe, nri-f5, kpt, stakater-reloader, cadvisor, tailscale, kube-state-metrics, nri-cassandra, secrets-store-csi-driver-provider-aws, gitness, esbuild, kor, nri-apache...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: aws-load-balancer-controller, fulcio, nuclei, kube-state-metrics, pgpool2exporter, prometheus-node-exporter-fips, certificate-transparency-fips, helm-push, configmap-reload, spire-server, kubernetes-dashboard-fips, secrets-store-csi-driver-provider-aws, k3s, kots,...

Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from systemd, libcap, openssl-libs, libxml2, go-toolset, and prometheus-operator

Summary Multiple issues were identified in Red Hat UBI packages systemd, libcap, openssl-libs, libxml2, go-toolset, and prometheus-operator that were shipped with IBM MQ Operator and IBM supplied MQ Advanced container images. IBM has addressed the vulnerabilities. Vulnerability Details...