Affected: CleanStart: kubernetes-dns-node-cache-fips

Security vulnerability affects the kubernetes-dns-node-cache-fips package. This issue is resolved in later releases. See references for vulnerability details.

A flaw was found in coredns. This issue could lead to invalid cache entries returning due to incorrectly implemented caching.

Affected: Go: github.com/coredns/coredns

A flaw was found in coredns. This issue could lead to invalid cache entries returning due to incorrectly implemented caching.

Security update for coredns

helm: shows secrets with --dry-run option in clear text opentelemetry: DoS vulnerability in otelhttp golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect opentelemetry-go-contrib: DoS vulnerability in otelgrpc due to unbound cardinality metrics ssh: Prefix truncation attack on Binary Packet Protocol (BPP) go-git: Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients coredns: CD bit response is cached and served later quic-go: memory exhaustion attack against QUIC's connection ID mechanism golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm golang: net/mail: comments in display names are incorrectly handled golang: html/template: errors returned from MarshalJSON methods may break template escaping golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON cloudevents/sdk-go: usage of WithRoundTripper to create a Client leaks credentials jose: resource exhaustion jose-go: improper handling of highly compressed data follow-redirects: Possible credential leak webpack-dev-middleware: lack of URL validation may lead to file leak

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in CoreDNS ausnutzen, um Daten zu manipulieren.