The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in all versions of kubeclient up to (but not including) v4.9.3, the Ruby client for Kubernetes REST API, in the way it parsed kubeconfig files. When the kubeconfig file does not configure custom CA to verify certs, kubeclient ends up accepting any certificate (it wrongly returns VERIFY_NONE). Ruby applications that leverage kubeclient to parse kubeconfig files are susceptible to Man-in-the-middle attacks (MITM).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade satellite-maintainUpgrade rubygem-jwtUpgrade rubygem-mime-types-dataUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-rest-clientUpgrade rubygem-unicodeUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-oauth-ttyUpgrade rubygem-unicode-debuginfoUpgrade rubygem-clampUpgrade rubygem-unicode-display_widthUpgrade rubygem-unicode-debugsourceUpgrade rubygem-little-pluggerUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-unfUpgrade rubygem-highlineUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-snaky_hashUpgrade rubygem-netrcUpgrade rubygem-foreman_maintainUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-hammer_cli_foreman_adminUpgrade satellite-cliUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade python39-pulp_manifestUpgrade rubygem-domain_nameUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-oauthUpgrade rubygem-http-cookieUpgrade rubygem-http-acceptUpgrade rubygem-hammer_cliUpgrade rubygem-gssapiUpgrade rubygem-ffiUpgrade rubygem-amazing_printUpgrade rubygem-localeUpgrade satellite-cloneUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-ffi-debugsourceUpgrade rubygem-apipie-bindingsUpgrade rubygem-hashieUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-powerbarUpgrade rubygem-mime-typesUpgrade rubygem-multi_jsonUpgrade rubygem-ffi-debuginfoUpgrade rubygem-fast_gettextUpgrade foreman-cliUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-version_gemUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-logging | Nov 13, 2023 | Mar 25, 2022 |
| Debian | — | Upgrade ruby-kubeclient | Jul 30, 2024 | Mar 25, 2022 |
| Redhat_linux | — | Upgrade rubygem-oauth-ttyUpgrade rubygem-unfUpgrade rubygem-jwtUpgrade rubygem-ffiUpgrade rubygem-foreman_maintainUpgrade rubygem-rest-clientUpgrade rubygem-mime-types-dataUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_katelloUpgrade satellite-cloneUpgrade rubygem-unicodeUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-apipie-bindingsUpgrade rubygem-domain_nameUpgrade rubygem-little-pluggerUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-unicode-display_widthUpgrade rubygem-snaky_hashUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-unicode-debuginfoUpgrade rubygem-unicode-debugsourceUpgrade rubygem-hammer_cliUpgrade rubygem-http-acceptUpgrade rubygem-hashieUpgrade rubygem-highlineUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-amazing_printUpgrade rubygem-version_gemUpgrade satellite-cliUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-unf_extUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-ffi-debuginfoUpgrade rubygem-netrcUpgrade python39-pulp_manifestUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-http-cookieUpgrade rubygem-mime-typesUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-clampUpgrade rubygem-localeUpgrade rubygem-loggingUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-gssapiUpgrade rubygem-powerbarUpgrade rubygem-fast_gettextUpgrade rubygem-ffi-debugsourceUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade foreman-cliUpgrade satellite-maintainUpgrade rubygem-hammer_cli_foreman_bootdisk | Nov 13, 2023 | Mar 25, 2022 |
| Rocky_linux | — | Upgrade libdb-sql-devel-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-debugsourceUpgrade libdb-utils-debuginfoUpgrade libdb-debuginfoUpgrade libdb-cxxUpgrade libdb-cxx-debuginfo | Mar 5, 2024 | Mar 25, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Mar 25, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub