The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in all versions of kubeclient up to (but not including) v4.9.3, the Ruby client for Kubernetes REST API, in the way it parsed kubeconfig files. When the kubeconfig file does not configure custom CA to verify certs, kubeclient ends up accepting any certificate (it wrongly returns VERIFY_NONE). Ruby applications that leverage kubeclient to parse kubeconfig files are susceptible to Man-in-the-middle attacks (MITM).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade rubygem-hammer_cliUpgrade rubygem-localeUpgrade satellite-cloneUpgrade rubygem-foreman_maintainUpgrade rubygem-amazing_printUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-ffiUpgrade rubygem-gssapiUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-ffi-debuginfoUpgrade foreman-cliUpgrade rubygem-loggingUpgrade rubygem-unf_extUpgrade satellite-cliUpgrade rubygem-ffi-debugsourceUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-http-acceptUpgrade rubygem-oauthUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-version_gemUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-fast_gettextUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-mime-typesUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-powerbarUpgrade rubygem-domain_nameUpgrade python39-pulp_manifestUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hashieUpgrade rubygem-apipie-bindingsUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-rest-clientUpgrade rubygem-unicode-display_widthUpgrade rubygem-oauth-ttyUpgrade rubygem-highlineUpgrade rubygem-clampUpgrade rubygem-jwtUpgrade rubygem-unfUpgrade rubygem-little-pluggerUpgrade satellite-maintainUpgrade rubygem-mime-types-dataUpgrade rubygem-netrcUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-unicode-debugsourceUpgrade rubygem-snaky_hashUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-unicode-debuginfoUpgrade rubygem-unicodeUpgrade rubygem-unf_ext-debugsource | Nov 13, 2023 | Mar 25, 2022 |
| Debian | — | Upgrade ruby-kubeclient | Jul 30, 2024 | Mar 25, 2022 |
| Redhat_linux | — | Upgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-powerbarUpgrade python39-pulp_manifestUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-clampUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-hammer_cli_foreman_templatesUpgrade foreman-cliUpgrade rubygem-ffi-debugsourceUpgrade rubygem-http-acceptUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-amazing_printUpgrade rubygem-fast_gettextUpgrade rubygem-netrcUpgrade rubygem-gssapiUpgrade rubygem-mime-typesUpgrade rubygem-hashieUpgrade rubygem-loggingUpgrade rubygem-http-cookieUpgrade rubygem-version_gemUpgrade satellite-maintainUpgrade satellite-cliUpgrade rubygem-multi_jsonUpgrade rubygem-ffi-debuginfoUpgrade rubygem-highlineUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-localeUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-little-pluggerUpgrade rubygem-ffiUpgrade rubygem-apipie-bindingsUpgrade satellite-cloneUpgrade rubygem-unicode-display_widthUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-rest-clientUpgrade rubygem-jwtUpgrade rubygem-unicode-debugsourceUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-unicodeUpgrade rubygem-oauth-ttyUpgrade rubygem-unfUpgrade rubygem-snaky_hashUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-mime-types-dataUpgrade rubygem-unicode-debuginfoUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-domain_nameUpgrade rubygem-foreman_maintainUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-hammer_cliUpgrade rubygem-hammer_cli_foreman_openscap | Nov 13, 2023 | Mar 25, 2022 |
| Rocky_linux | — | Upgrade libdb-cxxUpgrade libdb-cxx-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libdb-debuginfoUpgrade libdb-debugsourceUpgrade libdb-utils-debuginfoUpgrade libdb-sql-debuginfo | Mar 5, 2024 | Mar 25, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Mar 25, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub