Users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using ephemeral containers. The policy ensures pods running with a service account may only reference secrets specified in the service account’s secrets field. Kubernetes clusters are only affected if the ServiceAccount admission plugin and the `kubernetes.io/enforce-mountable-secrets` annotation are used together with ephemeral containers.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade k3s | Aug 22, 2024 | Jul 3, 2023 |
| Debian | — | Upgrade kubernetes | Jul 30, 2024 | Jul 3, 2023 |
| Kubernetes | — | Upgrade Kubernetes to version 1.27.3Upgrade Kubernetes to version 1.26.6Upgrade Kubernetes to version 1.25.11Upgrade Kubernetes to version 1.24.15 | Jul 14, 2023 | Jul 3, 2023 |
| Oracle_linux | — | Upgrade olcne-calico-chartUpgrade olcnectlUpgrade yqUpgrade olcne-prometheus-chartUpgrade olcne-kubevirt-chartUpgrade olcne-rook-chartUpgrade olcne-nginxUpgrade olcne-gluster-chartUpgrade olcne-agentUpgrade olcne-api-serverUpgrade kubeadmUpgrade olcne-grafana-chartUpgrade olcne-multus-chartUpgrade olcne-extra-modulesUpgrade kubectlUpgrade olcne-utilsUpgrade olcne-olm-chartUpgrade olcne-istio-chartUpgrade kubeletUpgrade olcne-oci-ccm-chartUpgrade olcne-metallb-chart | May 21, 2024 | Jul 3, 2023 |
| Redhat Openshift | — | Upgrade openstack-ironic-inspectorUpgrade python-wraptUpgrade python-ironic-libUpgrade python-osprofilerUpgrade crun-wasmUpgrade openshiftUpgrade skopeoUpgrade openshift-clientsUpgrade openshift4-aws-isoUpgrade python-keystonemiddlewareUpgrade containernetworking-pluginsUpgrade python-toozUpgrade coreos-installerUpgrade python-oslo-concurrencyUpgrade python-dracclientUpgrade python-fixturesUpgrade python-debtcollectorUpgrade openshift-kuryrUpgrade runcUpgrade python-ironic-prometheus-exporterUpgrade buildahUpgrade python-oslo-logUpgrade python-sushy-oem-idracUpgrade python-pycadfUpgrade gtestUpgrade python-os-traitsUpgrade python-oslo-configUpgrade python-oslo-serializationUpgrade python-scciclientUpgrade microshiftUpgrade podmanUpgrade python-automatonUpgrade python-cinderclientUpgrade python-osc-libUpgrade ovn23.09Upgrade openstack-ironic-python-agentUpgrade wasmedgeUpgrade rust-afterburnUpgrade python-oslo-contextUpgrade python-oslo-versionedobjectsUpgrade python-futuristUpgrade crunUpgrade python-stevedoreUpgrade python-sushyUpgrade python-cliffUpgrade haproxyUpgrade cri-toolsUpgrade kata-containersUpgrade python-oslo-utilsUpgrade containers-commonUpgrade kernel-rtUpgrade nmstateUpgrade fmtUpgrade openstack-ironicUpgrade python-oslo-messagingUpgrade kernelUpgrade python-openstacksdkUpgrade python-swiftclientUpgrade python-tenacityUpgrade python-oslo-policyUpgrade python-oslo-rootwrapUpgrade spdlogUpgrade toolboxUpgrade python-oslo-middlewareUpgrade google-benchmarkUpgrade openshift-ansibleUpgrade python-keystoneauth1Upgrade python-oslo-cacheUpgrade python-oslo-i18nUpgrade cri-oUpgrade python-glanceclientUpgrade catchUpgrade python-oslo-upgradecheckUpgrade python-proliantutilsUpgrade python-hardwareUpgrade python-oslo-dbUpgrade python-requestsexceptionsUpgrade container-selinuxUpgrade ignitionUpgrade python-keystoneclientUpgrade conmonUpgrade python-pbrUpgrade python-decoratorUpgrade golang-github-prometheus-promuUpgrade python-oslo-serviceUpgrade python-os-service-typesUpgrade butane | Nov 1, 2023 | Jun 15, 2023 |
| Suse | — | Upgrade kubernetes1.24-kubelet-commonUpgrade kubernetes1.18-clientUpgrade kubernetes1.23-clientUpgrade kubernetes1.23-client-bash-completionUpgrade kubernetes1.24-clientUpgrade kubernetes1.24-proxyUpgrade kubernetes1.23-apiserverUpgrade kubernetes1.23-client-commonUpgrade kubernetes1.23-kubeletUpgrade kubernetes1.23-proxyUpgrade kubernetes1.23-kubeadmUpgrade kubernetes1.18-client-commonUpgrade kubernetes1.24-client-bash-completionUpgrade kubernetes1.23-kubelet-commonUpgrade kubernetes1.23-client-fish-completionUpgrade kubernetes1.23-schedulerUpgrade kubernetes1.24-apiserverUpgrade kubernetes1.24-kubeletUpgrade kubernetes1.24-client-commonUpgrade kubernetes1.24-controller-managerUpgrade kubernetes1.24-client-fish-completionUpgrade kubernetes1.24-schedulerUpgrade kubernetes1.24-kubeadmUpgrade kubernetes1.23-controller-manager | Jun 20, 2023 | Jun 19, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 3, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub