GHSA-88JX-383Q-W4QC vulnerabilities

Vulnerabilities for packages: skaffold, spire-server, slsa-verifier, tkn, gitsign, ko, flux-source-controller, tekton-chains, neuvector-sigstore-interface, melange, zot, zarf, kubescape, policy-controller, apko, falcoctl, aactl, goreleaser, vexctl, wolfictl...

CVE-2024-29903 vulnerabilities

Vulnerabilities for packages: goreleaser, ko-fips, flux-source-controller, slsa-verifier, kubescape, chainctl, wolfictl, zarf, tekton-chains, falcoctl-fips, policy-controller-fips, zot, policy-controller, aactl, neuvector-sigstore-interface, melange, vexctl, ko, tekton-chains-fips, gitsign, tkn,...

CVE-2024-29902 vulnerabilities

Vulnerabilities for packages: skaffold, spire-server, slsa-verifier, tkn, gitsign, ko, flux-source-controller, tekton-chains, neuvector-sigstore-interface, melange, zot, zarf, kubescape, policy-controller, apko, falcoctl, aactl, goreleaser, vexctl, wolfictl...

CVE-2024-29902 vulnerabilities

Vulnerabilities for packages: goreleaser, ko-fips, flux-source-controller, slsa-verifier, kubescape, chainctl, wolfictl, zarf, tekton-chains, falcoctl-fips, policy-controller-fips, zot, policy-controller, aactl, neuvector-sigstore-interface, melange, vexctl, ko, tekton-chains-fips, gitsign, tkn,...

CVE-2024-28180 vulnerabilities

Vulnerabilities for packages: skaffold, rabbitmq-messaging-topology-operator, spire-server, slsa-verifier, fulcio, temporal, tkn, kubernetes-dashboard, grpc-health-probe, gitsign, ko, sigstore-scaffolding, flux-source-controller, tekton-chains, step, timestamp-authority, skopeo, kots,...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: k3s, helm-operator-fips, kubeflow-katib, goreleaser, scorecard, dagger, ctop, ko-fips, slsa-verifier, up, kubescape, timoni, buildkitd, guac, kargo, flux-image-reflector-controller, docker-credential-gcr, flux-helm-controller, docker-machine-driver-harvester,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: k3s, helm-operator-fips, kubeflow-katib, goreleaser, scorecard, dagger, ctop, ko-fips, slsa-verifier, up, kubescape, timoni, buildkitd, guac, kargo, flux-image-reflector-controller, docker-credential-gcr, flux-helm-controller, docker-machine-driver-harvester,...

CVE-2024-21664 vulnerabilities

Vulnerabilities for packages: tekton-chains, kubescape, spire-server, vexctl, gitsign, falcoctl, mc, minio, boring-registry...

GHSA-9763-4F94-GFCH vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudformation, flux, crossplane-provider-aws-iam, crossplane-provider-aws-route53, goreleaser, pulumi-language-java, scorecard, crossplane-provider-aws-cloudfront, flux-source-controller, slsa-verifier, kubescape, crossplane-provider-aws-kms,...

CVE-2023-49290 vulnerabilities

Vulnerabilities for packages: tekton-chains, vexctl, falcoctl-fips, kubescape, cosign-fips, falcoctl, gitsign...

CVE-2023-49290 vulnerabilities

Vulnerabilities for packages: tekton-chains, kubescape, vexctl, falcoctl, gitsign...

GHSA-VFP6-JRW2-99G9 vulnerabilities

Vulnerabilities for packages: tekton-chains, apko, melange, falcoctl-fips, flux-source-controller, spire-server-fips, ko, skaffold, kubescape, slsa-verifier, cosign, policy-controller, tkn, spire-server, aactl...

GHSA-VFP6-JRW2-99G9 vulnerabilities

Vulnerabilities for packages: flux-source-controller, skaffold, tekton-chains, kubescape, spire-server, slsa-verifier, policy-controller, apko, cosign, aactl, melange, tkn, ko...

Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines Operator security update

An update is now available for OpenShift-Pipelines-1.11-RHEL-8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

CVE-2023-46737 vulnerabilities

Vulnerabilities for packages: flux-source-controller, skaffold, tekton-chains, kubescape, spire-server, slsa-verifier, policy-controller, apko, cosign, aactl, melange, tkn, ko...

CVE-2023-46737 vulnerabilities

Vulnerabilities for packages: tekton-chains, apko, melange, falcoctl-fips, flux-source-controller, spire-server-fips, ko, skaffold, kubescape, slsa-verifier, cosign, policy-controller, tkn, spire-server, aactl...

GHSA-JQ35-85CJ-FJ4P vulnerabilities

Vulnerabilities for packages: k3d, k3s, scorecard, tekton-chains, falcoctl-fips, up, ctop, spire-server-fips, slsa-verifier, skaffold, kubescape, kpt, paranoia, bom, chartmuseum, aactl...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: aws-load-balancer-controller, dive, gke-gcloud-auth-plugin, src, kubescape, buildkitd, flux-image-reflector-controller, prometheus-elasticsearch-exporter, k3d, tekton-chains, yq, gitness, newrelic-infrastructure-agent, frp, kubevela, atlantis, kube-state-metrics-fips...

Important: Red Hat Bug Fix Advisory: Red Hat OpenShift Pipelines 1.10.5 release

Red Hat OpenShift Pipelines 1.10.5 General Availability release - A cloud-native Continuous Integration and Delivery solution on OpenShift. Red Hat OpenShift Pipelines is a cloud-native continuous integration and delivery CI/CD solution for building pipelines using Tekton. Tekton is a flexible,...