Gatekeeper v3.15.3Starting in v3.15.3, users can specify a containerArguments list of namesand values for both the audit and webhook configurations to be passed tothe respective deployment. These will be ignored if the argument hasalready been set by the operator or specifies an argument listed in thedeny list.Starting in v3.15.3, the following namespaces are exempt from admissioncontrol: kube- multicluster-engine hypershift hive rhacs-operator open-cluster- openshift- To disable the default exempt namespaces, set the namespaces you want onthe object.Security fix(es): golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback might cause authorization bypass in golang.org/x/crypto (CVE-2024-45337) golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html (CVE-2024-45338)Additional Release Notes: v3.15.0 https://github.com/open-policy-agent/gatekeeper/releases/tag/v3.15.0 v3.15.1 https://github.com/open-policy-agent/gatekeeper/releases/tag/v3.15.1

Gatekeeper v3.17.1<br>Starting in v3.17.1, users can specify a containerArguments list of names<br>and values for both the audit and webhook configurations to be passed to<br>the respective deployment. These will be ignored if the argument has<br>already been set by the operator or specifies an argument listed in the<br>deny list.<br>Starting in v3.17.1, the following namespaces are exempt from admission<br>control:<br><li> kube-</li> <li> multicluster-engine</li> <li> hypershift</li> <li> hive</li> <li> rhacs-operator</li> <li> open-cluster-</li> <li> openshift-</li> To disable the default exempt namespaces, set the namespaces you want on<br>the object.<br>Security fix(es):<br><li> golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback might cause authorization bypass in golang.org/x/crypto (CVE-2024-45337)</li> <li> golang.org/x/net/html: Non-linear parsing of case-insensitive content in</li> golang.org/x/net/html (CVE-2024-45338)<br>Additional Release Notes:<br><li> v3.17.0: </li> <a href="https://github.com/open-policy-agent/gatekeeper/releases/tag/v3.17.0" target="blank">https://github.com/open-policy-agent/gatekeeper/releases/tag/v3.17.0</a> <li> v3.17.1: </li> <a href="https://github.com/open-policy-agent/gatekeeper/releases/tag/v3.17.1" target="blank">https://github.com/open-policy-agent/gatekeeper/releases/tag/v3.17.1</a>

Gatekeeper v3.14.3<br>Starting in v3.14.3, users can specify a containerArguments list of names<br>and values for both the audit and webhook configurations to be passed to<br>the respective deployment. These will be ignored if the argument has<br>already been set by the operator or specifies an argument listed in the<br>deny list.<br>Starting in v3.14.3, the following namespaces are exempt from admission<br>control:<br><li> kube-</li> <li> multicluster-engine</li> <li> hypershift</li> <li> hive</li> <li> rhacs-operator</li> <li> open-cluster-</li> <li> openshift-</li> To disable the default exempt namespaces, set the namespaces you want on<br>the object.<br>Security fix(es):<br><li> golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback might cause authorization bypass in golang.org/x/crypto (CVE-2024-45337)</li> <li> golang.org/x/net/html: Non-linear parsing of case-insensitive content in</li> golang.org/x/net/html (CVE-2024-45338)<br>Additional Release Notes:<br><li> v3.14.0 <a href="https://github.com/open-policy-agent/gatekeeper/releases/tag/v3.14.0" target="blank">https://github.com/open-policy-agent/gatekeeper/releases/tag/v3.14.0</a></li> <li> v3.14.1 <a href="https://github.com/open-policy-agent/gatekeeper/releases/tag/v3.14.1" target="blank">https://github.com/open-policy-agent/gatekeeper/releases/tag/v3.14.1</a></li> <li> v3.14.2 <a href="https://github.com/open-policy-agent/gatekeeper/releases/tag/v3.14.2" target="blank">https://github.com/open-policy-agent/gatekeeper/releases/tag/v3.14.2</a></li>

Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Advanced Networking Option. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Advanced Networking Option, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Advanced Networking Option. Note: The July 2021 Critical Patch Update introduces a number of Native Network Encryption changes to deal with vulnerability CVE-2021-2351 and prevent the use of weaker ciphers. Customers should review: "Changes in Native Network Encryption with the July 2021 Critical Patch Update" (Doc ID 2791571.1). CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle ADF Faces. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Remote Regions component. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the web server.

Eclipse Jetty could allow a remote attacker to obtain sensitive information, caused by a flaw when configured for showing a listing of directory contents. By sending a specially-crafted request, a remote attacker could exploit this vulnerability to obtain sensitive information.

GNU Gatekeeper before 3.1 does not limit the number of connections to the status port, which allows remote attackers to cause a denial of service (connection and thread consumption) via a large number of connections.