Security bulletins

View notices regarding potential security threats that might affect IBM Cloud® platform and services. To set up alerts, see Managing Notifications.
    Component
    Open menu
    Location
    Open menu
    Item status
    Item timestamp
    Item title
    Affected components
    Affected locations
    2 Dec 2024Red Hat OpenShift on IBM Cloud is affected by a runc security vulnerability (CVE-2024-9676)Red Hat OpenShift on IBM CloudAsia Pacific, Europe, North America, South America
    20 Nov 2024Red Hat OpenShift on IBM Cloud is affected by a runc security vulnerability (CVE-2024-45310)Red Hat OpenShift on IBM CloudAsia Pacific, Europe, North America, South America
    15 Oct 2024Red Hat OpenShift on IBM Cloud is affected by an OpenSSH security vulnerability (CVE-2024-6387)Red Hat OpenShift on IBM CloudAsia Pacific, Europe, North America, South America
    10 Oct 2024IBM Cloud Kubernetes Service is affected by a containerd security vulnerability (CVE-2024-45310)Kubernetes ServiceNorth America, Europe, Asia Pacific, South America
    15 Aug 2024Red Hat OpenShift on IBM Cloud is affected by a cri-o security vulnerability (CVE-2024-5154)Red Hat OpenShift on IBM CloudAsia Pacific, Europe, North America, South America
    11 Jul 2024Red Hat OpenShift on IBM Cloud is affected by a cri-o security vulnerability (CVE-2024-3154)Red Hat OpenShift on IBM CloudAsia Pacific, Europe, North America, South America
    29 Apr 2024IBM Cloud Kubernetes Service is affected by a Kubernetes API server security vulnerability (CVE-2024-3177)Kubernetes ServiceNorth America, Europe, Asia Pacific, South America
    18 Mar 2024Red Hat OpenShift on IBM Cloud is affected by a runc security vulnerability (CVE-2024-21626)Red Hat OpenShift on IBM CloudNorth America, Europe, Asia Pacific, South America
    23 Feb 2024IBM Cloud Kubernetes Service is affected by a containerd security vulnerability (CVE-2024-21626)Kubernetes ServiceNorth America, Europe, Asia Pacific, South America
    5 Feb 2024Red Hat OpenShift on IBM Cloud is affected by a Kubernetes API server security vulnerability (CVE-2023-5408)Red Hat OpenShift on IBM CloudAsia Pacific, North America, Europe, South America
    8 Dec 2023IBM Cloud Kubernetes Service is affected by Kubernetes API server security vulnerabilities (CVE-2023-39325 and CVE-2023-44487)Kubernetes ServiceEurope, Asia Pacific, North America, South America
    28 Nov 2023Red Hat OpenShift on IBM Cloud is affected by Kubernetes API server security vulnerabilities (CVE-2023-39325 and CVE-2023-44487)Red Hat OpenShift on IBM CloudAsia Pacific, Europe, North America, South America
    10 Nov 2023IBM Cloud Kubernetes Service is affected by Kubernetes Ingress Controller security vulnerabilities (CVE-2023-5043, CVE-2023-5044, CVE-2022-4886)Kubernetes ServiceEurope, North America, Asia Pacific, South America
    25 Oct 2023IBM Cloud Kubernetes Service is affected by Kubernetes Ingress Controller security vulnerability(CVE-2023-44487)Kubernetes ServiceNorth America, Asia Pacific, Europe, South America
    19 Oct 2023Red Hat OpenShift on IBM Cloud is affected by a Kubernetes API server security vulnerability (CVE-2023-1260)Red Hat OpenShift on IBM CloudNorth America, Asia Pacific, South America, Europe
    13 Jul 2023IBM Cloud Kubernetes Service is affected by a kubelet security vulnerability (CVE-2023-2431)Kubernetes ServiceAsia Pacific, Europe, North America, South America
    13 Jul 2023IBM Cloud Kubernetes Service is affected by a Kubernetes API server security vulnerability (CVE-2023-2728)Kubernetes ServiceNorth America, Europe, Asia Pacific, South America
    12 Jun 2023IBM Cloud Kubernetes Service is affected by two containerd security vulnerabilities (CVE-2023-28642) (CVE-2023-27561)Kubernetes ServiceAsia Pacific, North America, South America, Europe
    24 May 2023Red Hat OpenShift on IBM Cloud is affected by a Kubernetes API server security vulnerability (CVE-2022-3172)Red Hat OpenShift on IBM CloudEurope, North America, South America, Asia Pacific
    9 Mar 2023IBM Cloud Kubernetes Service is affected by two containerd security vulnerabilities (CVE-2023-25153 and CVE-2023-25173)Kubernetes ServiceAsia Pacific, North America, Europe, South America
    28 Feb 2023Red Hat OpenShift on IBM Cloud is affected by a cri-o security vulnerability (CVE-2022-0532)Red Hat OpenShift on IBM CloudAsia Pacific, Europe, North America, South America
    10 Jan 2023IBM Cloud Kubernetes Service is affected by a containerd security vulnerability (CVE-2022-23471)Kubernetes ServiceAsia Pacific, Europe, North America, South America
    8 Dec 2022IBM Cloud Kubernetes Service is affected by Kubernetes API server security vulnerabilities (CVE-2022-3294 and CVE-2022-3162)Kubernetes ServiceNorth America, Europe, Asia Pacific, South America
    1 Dec 2022IBM Cloud Database for PostgreSQL was affected by a security vulnerabilityDatabases for PostgreSQLNorth America, Asia Pacific, Europe
    5 Oct 2022IBM Cloud Kubernetes Service is affected by a Kubernetes API server security vulnerability (CVE-2022-3172)Kubernetes ServiceAsia Pacific, North America, Europe, South America
    16 Sep 2022Red Hat OpenShift on IBM Cloud is affected by a cri-o security vulnerability (CVE-2022-1708)Red Hat OpenShift on IBM CloudAsia Pacific, Europe, North America, South America
    24 Jun 2022IBM Cloud Kubernetes Service is affected by a containerd security vulnerability (CVE-2022-31030)Kubernetes ServiceNorth America, Asia Pacific, Europe, South America
    24 Jun 2022IBM Cloud Kubernetes Service is affected by a containerd security vulnerability (CVE-2022-29162)Kubernetes ServiceAsia Pacific, North America, Europe, South America
    21 Jun 2022IBM Cloud Kubernetes Service is affected by a Kubernetes Ingress Controller security vulnerability (CVE-2021-25748)Kubernetes ServiceEurope, North America, Asia Pacific, South America
    8 Jun 2022IBM Cloud Kubernetes Service is affected by an endpoint resource security design flaw in Kubernetes (CVE-2021-25740) - UPDATED MITIGATIONKubernetes ServiceEurope, South America, North America, Asia Pacific
    23 May 2022VMware vRealize Automation 7.x critical vulnerability CVE-2022-22972, CVE-2022-22973VMware SolutionsEurope, Asia Pacific, North America
    18 May 2022IBM Cloud Kubernetes Service is affected by a containerd security vulnerability (CVE-2022-24769)Kubernetes ServiceNorth America, Asia Pacific, Europe, South America
    7 May 2022F5: BIG-IP iControl REST vulnerability CVE-2022-1388IBM CloudEurope, Asia Pacific, North America, South America
    27 Apr 2022IBM Cloud Kubernetes Service is affected by Kubernetes Ingress Controller security vulnerabilities (CVE-2021-25745, CVE-2021-25746)Kubernetes ServiceAsia Pacific, Europe, South America, North America
    18 Mar 2022IBM Cloud Kubernetes Service is affected by a containerd security vulnerability (CVE-2022-23648)Kubernetes ServiceNorth America, Europe, Asia Pacific, South America