GHSA-XMGF-HQ76-4VX2 vulnerabilities

Vulnerabilities for packages: sentry-cli, rustup, rpm-sequoia, sccache, rustls-openssl-client, sqlx, ztunnel-fips, guestproxyagent, sdp-k8s-injector, valkey-ldap, bootc, deno, komodo, typst, vector...

CVE-2026-41677 vulnerabilities

Vulnerabilities for packages: sentry-cli, rustup, rpm-sequoia, sccache, rustls-openssl-client, sqlx, ztunnel-fips, guestproxyagent, sdp-k8s-injector, valkey-ldap, bootc, deno, komodo, typst, vector...

CVE-2026-41678 vulnerabilities

Vulnerabilities for packages: sentry-cli, rustup, rpm-sequoia, sccache, rustls-openssl-client, sqlx, ztunnel-fips, guestproxyagent, sdp-k8s-injector, valkey-ldap, bootc, deno, komodo, typst, vector...

CVE-2026-41676 vulnerabilities

Vulnerabilities for packages: sentry-cli, rustup, rpm-sequoia, sccache, rustls-openssl-client, sqlx, ztunnel-fips, guestproxyagent, sdp-k8s-injector, valkey-ldap, bootc, deno, komodo, typst, vector...

SQL Injection

Overview katello is a package that adds Content and Subscription Management to Foreman Affected versions of this package are vulnerable to SQL Injection via improper sanitization of user input in the sortby parameter of the /api/hosts/bootcimages endpoint. An attacker can cause database errors or...

GHSA-FWJ4-6WGP-MPXM Katello: Denial of Service and potential information disclosure via SQL injection

A flaw was found in the Katello plugin for Red Hat Satellite. This vulnerability, caused by improper sanitization of user-provided input, allows a remote attacker to inject arbitrary SQL commands into the sortby parameter of the /api/hosts/bootcimages API endpoint. This can lead to a Denial of...

CVE-2026-4324

A flaw was found in the Katello plugin for Red Hat Satellite. This vulnerability, caused by improper sanitization of user-provided input, allows a remote attacker to inject arbitrary SQL commands into the sortby parameter of the /api/hosts/bootcimages API endpoint. This can lead to a Denial of...

CVE-2026-4324 Rubygem-katello: katello: denial of service and potential information disclosure via sql injection

A flaw was found in the Katello plugin for Red Hat Satellite. This vulnerability, caused by improper sanitization of user-provided input, allows a remote attacker to inject arbitrary SQL commands into the sortby parameter of the /api/hosts/bootcimages API endpoint. This can lead to a Denial of...

Katello - Denial of Service and potential information disclosure via SQL injection'

A flaw was found in the Katello plugin for Red Hat Satellite. This vulnerability, caused by improper sanitization of user-provided input, allows a remote attacker to inject arbitrary SQL commands into the sortby parameter of the /api/hosts/bootcimages API endpoint. This can lead to a Denial of...

Red Hat Satellite SQL注入漏洞

Red Hat Satellite is a system management platform developed by Red Hat Inc. This platform can be used to expand Linux infrastructure and provides system management functions such as administration, configuration, and monitoring. Red Hat Satellite 6 has a SQL injection vulnerability, which stems...

MiracleLinux 9 : bootc-1.1.6-3.el9_6 (AXSA:2025-10277:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10277:01 advisory. rust-openssl: rust openssl ssl::selectnextproto use after free CVE-2025-24898 Tenable has extracted the preceding description block directly from the...

AlmaLinux 9 : bootc (ALSA-2025:7160)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:7160 advisory. rust-openssl: rust openssl ssl::selectnextproto use after free CVE-2025-24898 Tenable has extracted the preceding description block directly from the AlmaLinux...

Fedora: Security Advisory (FEDORA-2025-bdb0ce9d97)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 9 : bootc (ELSA-2025-7160)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7160 advisory. 1.1.6-3 - Backport https://github.com/containers/bootc/pull/1167 - Resolves: RHEL-82293 1.1.5-2 - Sync specfile from upstream - Resolves: RHEL-80264 - Resolves:...

bootc security update

1.1.6-3 - Backport https://github.com/containers/bootc/pull/1167 - Resolves: RHEL-82293 1.1.5-2 - Sync specfile from upstream - Resolves: RHEL-80264 - Resolves: RHEL-81981 1.1.5-1 - Update to 1.1.5 - Resolves: RHEL-77733 1.1.4-2 - Cherry pick patches for bootc-status-updated - Resolves: RHEL-7286...

RHSA-2025:7160 Red Hat Security Advisory: bootc security update

Bulletin has no description...

bootc bug fix update

An update is available for bootc. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Bootable container system Bug Fixes: Rebase to 1.1.2 rhel-9.5.z JIRA:Rocky...

Fedora 41 : bootc (2025-bdb0ce9d97)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-bdb0ce9d97 advisory. Automatic update for bootc-1.1.5-1.fc41. Changelog for bootc Mon Feb 10 2025 Packit - 1.1.5-1 - Update to 1.1.5 upstream release Tenable has extracted the...

bootc bug fix update

An update is available for bootc. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Bootable container system Bug Fixes: Update bootc to 0.1.9 JIRA:Rocky Linux-308...