Security Updates¶
This page lists the vulnerability bugs of this release.
F5 Vulnerability Bug Fixes¶
Bug ID: 2216877¶
Title: TMM core may occur under certain conditions.
Symptoms: Under certain SSL conditions, TMM could encounter a core.
Conditions: N/A
Impact: Traffic is disrupted while the TMM process restarts.
Known Issue Category: Defect, Has Workaround
Mitigation / Workaround: Set the ‘Alert Timeout’ value to a specific value, say 5 seconds, instead of the default ‘indefinite’ value, in ALL client-ssl AND server-ssl profiles.
Fix Text: TMM able to work properly.
Bug ID: 2215453¶
Title: TMM may crash under certain conditions.
Symptoms: TMM crashes when handling HTTP/2 traffic.
Conditions: When HTTP/2 profile is configured on TMM.
Impact: Traffic is disrupted.
Known Issue Category: Defect, Has Workaround
Mitigation / Workaround: Add http router to the virtual, converting to HTTP/2 Full Proxy mode from HTTP/2 Gateway mode.
Fix Text: TMM handling HTTP/2 traffic properly.
Bug ID: 2171969¶
Title: TMM may crash when sending QUIC traffic.
Symptoms: TMM cores under certain conditions when handling QUIC traffic.
Conditions: When classification profile is enabled in VS.
Impact: Temporary service disruption due to TMM restart.
Known Issue Category: Defect, Has Workaround
Mitigation / Workaround: Remove/disable the Classification profile on any UDP virtual server that can receive QUIC‑formatted traffic.
Fix Text: TMM handling traffic properly.
Other CVEs¶
| CVE Number | Bug IDs | Image Names |
|---|---|---|
| CVE-2016-20013 | 1875285, 1875645, 1875913, 1876001, 1876041, 1876601, 1879161, 1879253, 1963125, 1963237, 1963297, 1963361, 1963589, 1963621, 1964113, 1964165, 1964201, 1964229, 1964301, 1964329, 1964409, 1964445, 1964477, 1964605, 1964685, 1964773, 1964789 | crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-dwbld, f5-fluentbit, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5ing-tmm-pod-manager, f5ingress, rabbit, spk-csrc, spk-cwc, tmm-img, tmrouted-img |
| CVE-2016-2781 | 1875225, 1875289, 1875341, 1875509, 1875561, 1875597, 1875649, 1875689, 1875833, 1875885, 1875917, 1875969, 1876005, 1876165, 1876237, 1876273, 1876381, 1876557, 1876605, 1876645, 1876753, 1878049, 1878101, 1878477, 1878837, 1879049, 1879165, 1879269, 2101577 | crd-conversion, crdupdater, dnsx-img, f5-bdosd, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-dwbld, f5-fluentbit, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5ing-tmm-pod-manager, f5ingress, rabbit, spk-csrc, spk-cwc, tmm-img, tmrouted-img |
| CVE-2022-3219 | 1875229, 1875293, 1875345, 1875517, 1875565, 1875601, 1875653, 1875693, 1875837, 1875889, 1875921, 1875973, 1876009, 1876169, 1876277, 1876385, 1876561, 1876609, 1876649, 1876761, 1878053, 1878109, 1878497, 1878857, 1879073, 1879169, 1963557, 2100825 | crd-conversion, crdupdater, dnsx-img, f5-bdosd, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-dwbld, f5-fluentbit, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5ing-tmm-pod-manager, f5ingress, spk-csrc, spk-cwc, tmm-img, tmrouted-img |
| CVE-2023-29409 | 1875353 | f5-toda-observer |
| CVE-2023-38697 | 1878113, 2065965 | f5-fluentd |
| CVE-2023-39318 | 1875357, 1962953 | f5-toda-observer, f5dr-img-init |
| CVE-2023-39319 | 1875361, 1962957 | f5-toda-observer, f5dr-img-init |
| CVE-2023-39321 | 1962961 | f5dr-img-init |
| CVE-2023-39322 | 1962965 | f5dr-img-init |
| CVE-2023-39325 | 1962969 | f5dr-img-init |
| CVE-2023-39326 | 1875109, 1875369, 1876425, 1962973 | cert-manager-controller, cert-manager-webhook, f5-toda-observer, f5dr-img-init |
| CVE-2023-3978 | 1875113, 1876429 | cert-manager-controller, cert-manager-webhook |
| CVE-2023-44487 | 1962969 | f5dr-img-init |
| CVE-2023-45283 | 1962977 | f5dr-img-init |
| CVE-2023-45284 | 1875129, 1875385, 1876445, 1962981 | cert-manager-controller, cert-manager-webhook, f5-toda-observer, f5dr-img-init |
| CVE-2023-45288 | 1962985 | f5dr-img-init |
| CVE-2023-45289 | 1962989 | f5dr-img-init |
| CVE-2023-45290 | 1962993 | f5dr-img-init |
| CVE-2024-10041 | 1875925, 1876245, 1876389, 1876565, 1878873, 1879105, 1962917, 1963137, 1963249, 1963309, 1963373, 1963441, 1963473, 1963509, 1963561, 1964001, 1964049, 1964177, 1964217, 1964313, 1964365, 1964421, 1964461, 1964505, 1964637, 1964705, 1964793 | crd-conversion, crdupdater, dnsx-img, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-dssm-store, f5-dssm-upgrader, f5-dwbld, f5-fluentbit, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5ing-tmm-pod-manager, f5ingress, rabbit, spk-csrc, spk-cwc, tmm-img, tmrouted-img |
| CVE-2024-10963 | 1879117, 1963093, 1963141, 1963253, 1963313, 1963377, 1963445, 1963477, 1963513, 1963565, 1963605, 1964005, 1964053, 1964181, 1964221, 1964261, 1964317, 1964369, 1964425, 1964465, 1964509, 1964609, 1964641, 1964709, 1964797, 1964845 | crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-dssm-store, f5-dssm-upgrader, f5-dwbld, f5-fluentbit, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5ing-tmm-pod-manager, f5ingress, rabbit, spk-csrc, spk-cwc, tmm-img, tmrouted-img |
| CVE-2024-12797 | 1962997 | f5dr-img-init |
| CVE-2024-13176 | 1963001 | f5dr-img-init |
| CVE-2024-2236 | 1875241, 1875305, 1875413, 1875529, 1875577, 1875613, 1875665, 1875705, 1875849, 1875901, 1875933, 1875985, 1876181, 1876253, 1876305, 1876397, 1876573, 1876621, 1876661, 1876781, 1878065, 1878125, 1878545, 1878905, 1879121, 1879181, 1963097, 1963569 | crd-conversion, crdupdater, dnsx-img, f5-bdosd, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-dwbld, f5-fluentbit, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5ing-tmm-pod-manager, f5ingress, rabbit, spk-csrc, spk-cwc, tmm-img, tmrouted-img |
| CVE-2024-24557 | 1877865 | cert-manager-ctl |
| CVE-2024-24783 | 1963005 | f5dr-img-init |
| CVE-2024-24784 | 1963009 | f5dr-img-init |
| CVE-2024-24785 | 1963013 | f5dr-img-init |
| CVE-2024-24786 | 1875153, 1875157, 1875161, 1875421, 1875425, 1875429, 1876477, 1876481, 1877897, 1963017 | cert-manager-controller, cert-manager-ctl, cert-manager-webhook, f5-toda-observer, f5dr-img-init |
| CVE-2024-24787 | 1971109 | Not specified |
| CVE-2024-24788 | 1971081 | crd-conversion |
| CVE-2024-24789 | 1875165, 1875433, 1876485, 1963021 | cert-manager-controller, cert-manager-webhook, f5-toda-observer, f5dr-img-init |
| CVE-2024-24790 | 1963025 | f5dr-img-init |
| CVE-2024-24791 | 1875173, 1875441, 1877965, 1963029 | cert-manager-ctl, cert-manager-webhook, f5-toda-observer, f5dr-img-init |
| CVE-2024-28180 | 1875245, 1875533, 1964061, 2065717 | crd-conversion, f5-debug-sidecar, f5-downloader |
| CVE-2024-34155 | 1875177, 1875793, 1876085, 1876501, 1963033 | cert-manager-cainjector, cert-manager-controller, cert-manager-webhook, f5-debug-sidecar, f5dr-img-init |
| CVE-2024-34156 | 1875181, 1875797, 1876089, 1876505, 1963037 | cert-manager-cainjector, cert-manager-controller, cert-manager-webhook, f5-debug-sidecar, f5dr-img-init |
| CVE-2024-34158 | 1875185, 1875801, 1876093, 1876137, 1876149, 1876509 | cert-manager-cainjector, cert-manager-controller, cert-manager-webhook, f5-debug-sidecar |
| CVE-2024-41110 | 1878001 | cert-manager-ctl |
| CVE-2024-41996 | 1875249, 1875309, 1875461, 1875537, 1875581, 1875617, 1875669, 1875709, 1875853, 1875905, 1875937, 1875989, 1876097, 1876189, 1876257, 1876349, 1876401, 1876577, 1876625, 1876665, 1876789, 1878069, 1878165, 1878561, 1878925, 1879125, 1879185, 1963105, 1963573, 2066229 | baseos, crd-conversion, crdupdater, dnsx-img, f5-bdosd, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-dwbld, f5-fluentbit, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5ing-tmm-pod-manager, f5ingress, rabbit, spk-csrc, spk-cwc, tmm-img, tmrouted-img |
| CVE-2024-45336 | 1875189, 1875941, 1876101, 1876581, 1878005, 1879129, 1963041, 1988225 | cert-manager-ctl, cert-manager-webhook, f5-blobd, f5-debug-sidecar, f5-dwbld, f5-toda-observer, f5dr-img-init, spk-csrc |
| CVE-2024-45341 | 1875197, 1875473, 1875945, 1876113, 1876585, 1878013, 1879133, 1963045 | cert-manager-ctl, cert-manager-webhook, f5-blobd, f5-debug-sidecar, f5-dwbld, f5-toda-observer, f5dr-img-init, spk-csrc |
| CVE-2024-56433 | 1875269, 1875313, 1875477, 1875541, 1875585, 1875629, 1875673, 1875713, 1875865, 1875909, 1875949, 1875993, 1876193, 1876261, 1876361, 1876405, 1876589, 1876629, 1876669, 1876801, 1878081, 1878177, 1878581, 1878937, 1879137, 1879189, 1963109, 1963577 | crd-conversion, crdupdater, dnsx-img, f5-bdosd, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-dwbld, f5-fluentbit, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5ing-tmm-pod-manager, f5ingress, rabbit, spk-csrc, spk-cwc, tmm-img, tmrouted-img |
| CVE-2024-58251 | 2211537 | f5dr-img-init |
| CVE-2024-6104 | 1876529 | cert-manager-controller |
| CVE-2024-7254 | 1964381 | f5-l4p-engine |
| CVE-2024-8176 | 1875953, 1876633, 1878949, 1879141 | dnsx-img, f5-blobd, f5-cert-client, spk-csrc |
| CVE-2025-0913 | 1987909, 1988053, 1988101, 1988229, 1988601, 1988721, 2065721, 2068005, 2068085, 2068165 | cert-manager-startupapicheck, cert-manager-webhook, f5-bdosd, f5-cert-client, f5-debug-sidecar, f5-toda-observer, opentelemetry-collector-contrib, rabbit, spk-csrc |
| CVE-2025-10543 | 2211665, 2211993, 2212017, 2212705, 2212729 | crd-conversion, f5-debug-sidecar, f5-downloader, f5-license-helper, spk-cwc |
| CVE-2025-1147 | 2065977 | f5-fluentd |
| CVE-2025-1148 | 2065981 | f5-fluentd |
| CVE-2025-13151 | 2213581 | baseos |
| CVE-2025-13281 | 2212661 | f5-dssm-upgrader |
| CVE-2025-1372 | 1876141 | f5-debug-sidecar |
| CVE-2025-13836 | 2213033, 2213041, 2213053, 2213081, 2213089, 2213181, 2213189, 2213197, 2213209, 2213217, 2213389, 2213397, 2213421, 2213441, 2213473, 2213561, 2213569 | crdupdater, f5-bdosd, f5-blobd, f5-cert-client, f5-csm-qkview, f5-downloader, f5-fluentbit, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5dr-img, f5ing-tmm-pod-manager, spk-csrc, spk-cwc, tmrouted-img |
| CVE-2025-1795 | 2068065, 2068149, 2068229 | f5-cert-client, rabbit, spk-csrc |
| CVE-2025-22866 | 1876593, 1963049, 1963157, 1964537 | f5-dwbld, f5-toda-observer, f5dr-img-init, tmrouted-img |
| CVE-2025-22868 | 2065537, 2065621, 2065757, 2065805, 2065841, 2065869, 2067457, 2101005 | cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-debug-sidecar, f5-downloader, f5ing-tmm-pod-manager, spk-cwc |
| CVE-2025-22869 | 1963165, 1963181, 1963205, 1963221, 1964541, 1964857 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, f5-toda-observer, spk-cwc |
| CVE-2025-22870 | 1875205, 1875489, 1875961, 1963053, 1963169, 1963185, 1963209, 1963349, 1964237, 1964861 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, f5-blobd, f5-dssm-upgrader, f5-toda-observer, f5dr-img-init, init-certmgr, spk-cwc |
| CVE-2025-22871 | 1962893, 1962933, 1963057, 1963113, 1963161, 1963173, 1963189, 1963213, 1963229, 1963273, 1963329, 1963353, 1963393, 1963489, 1963529, 1963581, 1963617, 1963653, 1964021, 1964085, 1964141, 1964197, 1964241, 1964293, 1964333, 1964385, 1964437, 1964485, 1964549, 1964625, 1964653, 1964733, 1964753, 1964825, 1964865 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-bdosd, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-dwbld, f5-fluentbit, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, init-certmgr, opentelemetry-collector-contrib, rabbit, spk-csrc, spk-cwc, tmm-img, tmrouted-img |
| CVE-2025-22872 | 1963177, 1963193, 1963217, 1963233, 1963277, 1963333, 1963357, 1963493, 1963533, 1963585, 1963657, 1964089, 1964145, 1964245, 1964389, 1964441, 1964869, 1970501, 1970509, 1970521, 1970525, 1970557, 1970601, 2066089, 2066153, 2211937, 2212249, 2212717, 2213021 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-bdosd, f5-blobd, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-upgrader, f5-dwbld, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-version-validator, f5ing-tmm-pod-manager, f5ingress, init-certmgr, opentelemetry-collector-contrib, spk-csrc, spk-cwc |
| CVE-2025-22874 | 1988105, 1988605, 2101009 | f5-debug-sidecar, opentelemetry-collector-contrib |
| CVE-2025-26519 | 1963065 | f5dr-img-init |
| CVE-2025-27144 | 1875493, 1963197 | cert-manager-controller, f5-toda-observer |
| CVE-2025-29087 | 1962941, 1963281, 1963337, 1963401, 1963537, 1964025, 1964149, 1964341, 1964393, 1964657, 1964833, 1965013, 2068009, 2068093 | crd-conversion, crdupdater, dnsx-img, f5-bdosd, f5-cert-client, f5-csm-qkview, f5-downloader, f5-fluentbit, f5-l4p-engine, f5-license-helper, f5-toda-tmstatsd, f5ing-tmm-pod-manager, rabbit, spk-csrc |
| CVE-2025-29088 | 1962945, 1963285, 1963341, 1963405, 1963541, 1964029, 1964153, 1964345, 1964397, 1964661, 1964837, 2068013, 2068097, 2068177 | crd-conversion, crdupdater, f5-bdosd, f5-cert-client, f5-csm-qkview, f5-downloader, f5-fluentbit, f5-l4p-engine, f5-license-helper, f5-toda-tmstatsd, f5ing-tmm-pod-manager, rabbit, spk-csrc |
| CVE-2025-30204 | 1963201, 1963289, 1964097, 1964157, 1964873, 2065705 | cert-manager-controller, crd-conversion, f5-debug-sidecar, f5-downloader, spk-cwc |
| CVE-2025-3198 | 2065989 | f5-fluentd |
| CVE-2025-3277 | 1962949, 1963293, 1963345, 1963413, 1963545, 1964033, 1964161, 1964349, 1964401, 1964665, 1964841, 1965021 | crd-conversion, crdupdater, dnsx-img, f5-bdosd, f5-cert-client, f5-csm-qkview, f5-downloader, f5-fluentbit, f5-l4p-engine, f5-license-helper, f5-toda-tmstatsd, f5ing-tmm-pod-manager |
| CVE-2025-32988 | 1987549, 1987733, 1988025, 1988061, 1988501 | f5-bdosd, f5-cert-client, rabbit, spk-csrc, spk-cwc |
| CVE-2025-32989 | 1987553, 1988029, 1988065, 1988505 | f5-bdosd, f5-cert-client, rabbit, spk-csrc |
| CVE-2025-32990 | 1987557, 1987741, 1988033, 1988069, 1988509 | f5-bdosd, f5-cert-client, rabbit, spk-csrc, spk-cwc |
| CVE-2025-3576 | 1964101, 1964669, 1964741 | f5-debug-sidecar, f5-fluentbit, tmm-img |
| CVE-2025-4330 | 2100949 | f5-bdosd |
| CVE-2025-4516 | 2068033, 2068117, 2068197 | f5-cert-client, rabbit, spk-csrc |
| CVE-2025-45582 | 1987561, 1987613, 1987677, 1987745, 1987793, 1987825, 1987861, 1987897, 1987945, 1988005, 1988037, 1988073, 1988173, 1988209, 1988245, 1988433, 1988473, 1988513, 1988581, 1988653, 1988693, 1988745, 1988785, 1988829 | crd-conversion, crdupdater, dnsx-img, f5-bdosd, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-dwbld, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-version-validator, f5ing-tmm-pod-manager, rabbit, spk-csrc, spk-cwc, tmm-img, tmrouted-img |
| CVE-2025-4565 | 1987865 | f5-l4p-engine |
| CVE-2025-46327 | 1962901 | opentelemetry-collector-contrib |
| CVE-2025-46394 | 2211589 | f5dr-img-init |
| CVE-2025-4673 | 1987913, 1988077, 1988125, 1988249, 1988609, 1988725, 2065725, 2068041, 2068125, 2068205 | cert-manager-startupapicheck, cert-manager-webhook, f5-bdosd, f5-cert-client, f5-debug-sidecar, f5-toda-observer, opentelemetry-collector-contrib, rabbit, spk-csrc |
| CVE-2025-47273 | 1963421, 1963425, 1964353, 1964405, 1964489, 1964561, 1964569, 1964673, 1964761, 1964769, 1964877, 1964909, 1964921, 1964929, 1964941, 1964945, 1964949, 1964953, 1964957, 1964977, 1964981, 1964989, 1965025, 2100969 | crd-conversion, crdupdater, dnsx-img, f5-bdosd, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-downloader, f5-fluentbit, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5dr-img, f5ing-tmm-pod-manager, f5ingress, rabbit, spk-csrc, spk-cwc, tmrouted-img |
| CVE-2025-47906 | 2065709, 2065761, 2065845, 2065885, 2066037, 2066113, 2067989, 2068069, 2068153, 2101465, 2212021 | cert-manager-startupapicheck, cert-manager-webhook, f5-cert-client, f5-debug-sidecar, f5-dwbld, f5-license-helper, f5-toda-observer, opentelemetry-collector-contrib, rabbit, spk-csrc |
| CVE-2025-47907 | 2065445, 2101017, 2212005, 2212237 | f5-coremond, f5-debug-sidecar, f5-license-helper, f5-toda-observer |
| CVE-2025-47912 | 2211281, 2211329, 2211377, 2211433, 2211489, 2211541, 2211613, 2211669, 2211733, 2211941, 2212025, 2212189, 2212253, 2212309, 2212357, 2212405, 2212453, 2212501, 2212549, 2212597, 2212665, 2212733, 2212789, 2212981 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-debug-sidecar, f5-dssm-store, f5-dssm-upgrader, f5-dwbld, f5-l4p-engine, f5-license-helper, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, opentelemetry-collector-contrib, rabbit, spk-csrc |
| CVE-2025-47914 | 2211381, 2211437, 2211545, 2211673, 2211737, 2211997, 2212029, 2212193, 2212257, 2212601, 2212645, 2212709, 2212737, 2213025 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-license-helper, f5-toda-observer, f5dr-img-init, f5ingress, opentelemetry-collector-contrib, spk-cwc |
| CVE-2025-5244 | 2065993 | f5-fluentd |
| CVE-2025-5245 | 2065997 | f5-fluentd |
| CVE-2025-58058 | 2065449 | f5-coremond |
| CVE-2025-58181 | 2211385, 2211441, 2211549, 2211677, 2211741, 2212001, 2212033, 2212197, 2212261, 2212605, 2212649, 2212713, 2212741, 2213029 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-license-helper, f5-toda-observer, f5dr-img-init, f5ingress, opentelemetry-collector-contrib, spk-cwc |
| CVE-2025-58183 | 2211273, 2211321, 2211369, 2211425, 2211481, 2211529, 2211597, 2211653, 2211717, 2211929, 2212009, 2212181, 2212241, 2212301, 2212349, 2212397, 2212445, 2212493, 2212541, 2212589, 2212653, 2212721, 2212781, 2212973 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-debug-sidecar, f5-dssm-store, f5-dssm-upgrader, f5-dwbld, f5-l4p-engine, f5-license-helper, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, opentelemetry-collector-contrib, rabbit, spk-csrc |
| CVE-2025-58185 | 2211285, 2211333, 2211389, 2211445, 2211493, 2211553, 2211617, 2211681, 2211745, 2211945, 2212037, 2212201, 2212265, 2212313, 2212361, 2212409, 2212457, 2212505, 2212553, 2212609, 2212669, 2212745, 2212793, 2212985 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-debug-sidecar, f5-dssm-store, f5-dssm-upgrader, f5-dwbld, f5-l4p-engine, f5-license-helper, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, opentelemetry-collector-contrib, rabbit, spk-csrc |
| CVE-2025-58186 | 2211289, 2211337, 2211393, 2211449, 2211497, 2211557, 2211621, 2211685, 2211749, 2211949, 2212041, 2212205, 2212269, 2212317, 2212365, 2212413, 2212461, 2212509, 2212557, 2212613, 2212673, 2212749, 2212797, 2212989 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-debug-sidecar, f5-dssm-store, f5-dssm-upgrader, f5-dwbld, f5-l4p-engine, f5-license-helper, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, opentelemetry-collector-contrib, rabbit, spk-csrc |
| CVE-2025-58187 | 2211293, 2211341, 2211397, 2211453, 2211501, 2211561, 2211625, 2211689, 2211753, 2211953, 2212045, 2212209, 2212273, 2212321, 2212369, 2212417, 2212465, 2212513, 2212561, 2212617, 2212677, 2212753, 2212801, 2212993 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-debug-sidecar, f5-dssm-store, f5-dssm-upgrader, f5-dwbld, f5-l4p-engine, f5-license-helper, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, opentelemetry-collector-contrib, rabbit, spk-csrc |
| CVE-2025-58188 | 2211297, 2211345, 2211401, 2211457, 2211505, 2211565, 2211629, 2211693, 2211757, 2211957, 2212049, 2212213, 2212277, 2212325, 2212373, 2212421, 2212469, 2212517, 2212565, 2212621, 2212681, 2212757, 2212805, 2212997 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-debug-sidecar, f5-dssm-store, f5-dssm-upgrader, f5-dwbld, f5-l4p-engine, f5-license-helper, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, opentelemetry-collector-contrib, rabbit, spk-csrc |
| CVE-2025-58189 | 2211301, 2211349, 2211405, 2211461, 2211509, 2211569, 2211633, 2211697, 2211761, 2211961, 2212053, 2212217, 2212281, 2212329, 2212377, 2212425, 2212473, 2212521, 2212569, 2212625, 2212685, 2212761, 2212809, 2213001 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-debug-sidecar, f5-dssm-store, f5-dssm-upgrader, f5-dwbld, f5-l4p-engine, f5-license-helper, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, opentelemetry-collector-contrib, rabbit, spk-csrc |
| CVE-2025-6069 | 1987569, 1987753, 1988045, 1988085, 1988521, 2065605, 2065853 | f5-bdosd, f5-cert-client, rabbit, spk-csrc, spk-cwc |
| CVE-2025-61723 | 2211305, 2211353, 2211409, 2211465, 2211513, 2211573, 2211637, 2211701, 2211765, 2211965, 2212057, 2212221, 2212285, 2212333, 2212381, 2212429, 2212477, 2212525, 2212573, 2212629, 2212689, 2212765, 2212813, 2213005 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-debug-sidecar, f5-dssm-store, f5-dssm-upgrader, f5-dwbld, f5-l4p-engine, f5-license-helper, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, opentelemetry-collector-contrib, rabbit, spk-csrc |
| CVE-2025-61724 | 2211309, 2211357, 2211413, 2211469, 2211517, 2211577, 2211641, 2211705, 2211769, 2211969, 2212061, 2212225, 2212289, 2212337, 2212385, 2212433, 2212481, 2212529, 2212577, 2212633, 2212693, 2212769, 2212817, 2213009 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-debug-sidecar, f5-dssm-store, f5-dssm-upgrader, f5-dwbld, f5-l4p-engine, f5-license-helper, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, opentelemetry-collector-contrib, rabbit, spk-csrc |
| CVE-2025-61725 | 2211313, 2211361, 2211417, 2211473, 2211521, 2211581, 2211645, 2211709, 2211773, 2211973, 2212065, 2212229, 2212293, 2212341, 2212389, 2212437, 2212485, 2212533, 2212581, 2212637, 2212697, 2212773, 2212821, 2213013 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-debug-sidecar, f5-dssm-store, f5-dssm-upgrader, f5-dwbld, f5-l4p-engine, f5-license-helper, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, opentelemetry-collector-contrib, rabbit, spk-csrc |
| CVE-2025-61727 | 2211317, 2211365, 2211421, 2211477, 2211525, 2211585, 2211649, 2211713, 2211777, 2211977, 2211985, 2212069, 2212233, 2212297, 2212345, 2212393, 2212441, 2212489, 2212537, 2212585, 2212641, 2212701, 2212777, 2212825, 2213017 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-debug-sidecar, f5-dssm-store, f5-dssm-upgrader, f5-dwbld, f5-l4p-engine, f5-license-helper, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, opentelemetry-collector-contrib, rabbit, spk-csrc, tmrouted-img |
| CVE-2025-61729 | 2211277, 2211325, 2211373, 2211429, 2211485, 2211533, 2211601, 2211657, 2211721, 2211933, 2211981, 2212013, 2212185, 2212245, 2212305, 2212353, 2212401, 2212449, 2212497, 2212545, 2212593, 2212657, 2212725, 2212785, 2212977 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-debug-sidecar, f5-dssm-store, f5-dssm-upgrader, f5-dwbld, f5-l4p-engine, f5-license-helper, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, opentelemetry-collector-contrib, rabbit, spk-csrc, tmrouted-img |
| CVE-2025-6297 | 2100733, 2100829, 2100889, 2101001, 2101249, 2101313, 2101393, 2101401 | baseos, f5-bdosd, f5-fluentbit, f5-toda-observer, f5-toda-tmstatsd, f5-version-validator, tmm-img, tmrouted-img |
| CVE-2025-63811 | 2211725 | opentelemetry-collector-contrib |
| CVE-2025-6395 | 1987573, 1987757, 1988049, 1988089, 1988525 | f5-bdosd, f5-cert-client, rabbit, spk-csrc, spk-cwc |
| CVE-2025-65637 | 2211661, 2211989 | crd-conversion, f5-downloader |
| CVE-2025-68156 | 2211729 | opentelemetry-collector-contrib |
| CVE-2025-68973 | 2213577 | baseos |
| CVE-2025-6965 | 2065913 | rabbit |
| CVE-2025-7545 | 2066009 | f5-fluentd |
| CVE-2025-7546 | 2066013 | f5-fluentd |
| CVE-2025-7709 | 2065613, 2065861, 2065917 | f5-cert-client, rabbit, spk-csrc |
| CVE-2025-8058 | 2065921 | rabbit |
| CVE-2025-8225 | 2066029 | f5-fluentd |
| CVE-2025-8941 | 2100725, 2100817, 2100881, 2100997, 2101241, 2101305, 2101385 | f5-bdosd, f5-fluentbit, f5-toda-observer, f5-toda-tmstatsd, f5-version-validator, tmm-img, tmrouted-img |
| CVE-2025-9230 | 2100737, 2101397 | baseos, f5dr-img-init |
| CVE-2025-9231 | 2100741 | f5dr-img-init |
| CVE-2025-9232 | 2100745 | f5dr-img-init |
| GHSA-2c7c-3mj9-8fqh | 1875497 | f5-toda-observer |
| GHSA-7ww5-4wqc-m92c | 1878033 | cert-manager-ctl |
| GHSA-fv92-fjc5-jj9h | 1987761, 1988613 | opentelemetry-collector-contrib, spk-cwc |
| GHSA-jq35-85cj-fj4p | 1878037 | cert-manager-ctl |
| GHSA-r4pg-vg54-wxx4 | 1875325 | f5-version-validator |