CVE-2024-47534 vulnerabilities

Vulnerabilities for packages: spire-server, gitsign, gh, chainctl, aactl, slsa-verifier, rekor, zarf, vexctl, flux-source-controller, policy-controller, neuvector-sigstore-interface-fips, sigstore-scaffolding, sigstore-scaffolding-fips, cosign, falcoctl-fips, trivy-fips, apko, tkn-fips,...

Moderate: Red Hat Enhancement Advisory: Red Hat OpenShift Pipelines Operator Bundle 1.15.0 release

Red Hat OpenShift Pipelines 1.15.0 has been released. Red Hat OpenShift Pipelines is a cloud-native continuous integration and delivery CI/CD solution for building pipelines using Tekton. Tekton is a flexible, Kubernetes-native, open-source CI/CD framework which enables automating deployments...

GHSA-95PR-FXF5-86GV vulnerabilities

Vulnerabilities for packages: spire-server, gitsign, goreleaser, chainctl, aactl, slsa-verifier, zarf, vexctl, flux-source-controller, policy-controller, ko-fips, skaffold, falcoctl-fips, apko, tkn-fips, policy-controller-fips, zot, tekton-chains, falcoctl, wolfictl, neuvector-sigstore-interface,...

GHSA-95PR-FXF5-86GV vulnerabilities

Vulnerabilities for packages: goreleaser, zarf, policy-controller, kubescape, apko, aactl, slsa-verifier, skaffold, gitsign, ko, wolfictl, vexctl, zot, melange, tkn, spire-server, flux-source-controller, falcoctl, neuvector-sigstore-interface, tekton-chains...

GHSA-88JX-383Q-W4QC vulnerabilities

Vulnerabilities for packages: goreleaser, zarf, policy-controller, kubescape, apko, aactl, slsa-verifier, skaffold, gitsign, ko, wolfictl, vexctl, zot, melange, tkn, spire-server, flux-source-controller, falcoctl, neuvector-sigstore-interface, tekton-chains...

CVE-2024-29903 vulnerabilities

Vulnerabilities for packages: spire-server, gitsign, goreleaser, chainctl, aactl, slsa-verifier, zarf, vexctl, flux-source-controller, policy-controller, ko-fips, skaffold, falcoctl-fips, apko, tkn-fips, policy-controller-fips, zot, tekton-chains, falcoctl, wolfictl, neuvector-sigstore-interface,...

CVE-2024-29902 vulnerabilities

Vulnerabilities for packages: spire-server, gitsign, goreleaser, chainctl, aactl, slsa-verifier, zarf, vexctl, flux-source-controller, policy-controller, ko-fips, skaffold, falcoctl-fips, apko, tkn-fips, policy-controller-fips, zot, tekton-chains, falcoctl, wolfictl, neuvector-sigstore-interface,...

CVE-2024-29902 vulnerabilities

Vulnerabilities for packages: goreleaser, zarf, policy-controller, kubescape, apko, aactl, slsa-verifier, skaffold, gitsign, ko, wolfictl, vexctl, zot, melange, tkn, spire-server, flux-source-controller, falcoctl, neuvector-sigstore-interface, tekton-chains...

CVE-2024-28180 vulnerabilities

Vulnerabilities for packages: rabbitmq-messaging-topology-operator, temporal, rekor, bank-vaults, kots, goreleaser, guac, sigstore-scaffolding, zarf, argo-workflows, minio, policy-controller, step, k3s, weaviate, kubescape, apko, aactl, slsa-verifier, step-ca, skaffold, flux-kustomize-controller,...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: k3s, dagger, scorecard, cadvisor-fips, gitsign, helm-fips, docker-machine-driver-harvester, goreleaser, flux-helm-controller, aactl, kargo, slsa-verifier, rancher-machine, k9s, kots, loki, zarf, vexctl, kubevela, kpt, flux, nerdctl, argo-workflows, helm-operator,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: k3s, dagger, scorecard, cadvisor-fips, gitsign, helm-fips, docker-machine-driver-harvester, goreleaser, flux-helm-controller, aactl, kargo, slsa-verifier, rancher-machine, k9s, kots, loki, zarf, vexctl, kubevela, kpt, flux, nerdctl, argo-workflows, helm-operator,...

CVE-2024-21664 vulnerabilities

Vulnerabilities for packages: minio, kubescape, spire-server, vexctl, mc, falcoctl, gitsign, boring-registry, tekton-chains...

GHSA-9763-4F94-GFCH vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-rds, crossplane-provider-aws-sns, crossplane-provider-aws-cloudwatchlogs, scorecard, crossplane-provider-aws-lambda, spire-server, crossplane, flux-image-automation-controller, gitsign, pulumi-language-dotnet, terraform-provider-google,...

CVE-2023-49290 vulnerabilities

Vulnerabilities for packages: falcoctl-fips, gitsign, vexctl, tekton-chains, falcoctl, kubescape, cosign-fips...

CVE-2023-49290 vulnerabilities

Vulnerabilities for packages: kubescape, vexctl, falcoctl, gitsign, tekton-chains...

GHSA-VFP6-JRW2-99G9 vulnerabilities

Vulnerabilities for packages: spire-server, spire-server-fips, skaffold, falcoctl-fips, apko, flux-source-controller, ko, tekton-chains, policy-controller, kubescape, tkn, aactl, cosign, slsa-verifier, melange...

GHSA-VFP6-JRW2-99G9 vulnerabilities

Vulnerabilities for packages: spire-server, kubescape, apko, flux-source-controller, aactl, slsa-verifier, melange, tkn, skaffold, cosign, ko, policy-controller, tekton-chains...

Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines Operator security update

An update is now available for OpenShift-Pipelines-1.11-RHEL-8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

CVE-2023-46737 vulnerabilities

Vulnerabilities for packages: spire-server, kubescape, apko, flux-source-controller, aactl, slsa-verifier, melange, tkn, skaffold, cosign, ko, policy-controller, tekton-chains...

CVE-2023-46737 vulnerabilities

Vulnerabilities for packages: spire-server, spire-server-fips, skaffold, falcoctl-fips, apko, flux-source-controller, ko, tekton-chains, policy-controller, kubescape, tkn, aactl, cosign, slsa-verifier, melange...