SUSE SLES15 Security Update : container-suseconnect (SUSE-SU-2024:3360-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3360-1 advisory. This update for container-suseconnect rebuilds it against current go1.21.13.1. Security issues fixed: CVE-2024-24789, CVE-2024-2479...

lobe-chat implemented an insufficient fix for GHSA-mxhq-xw3g-rphc (CVE-2024-32964)

Summary SSRF protection implemented in https://github.com/lobehub/lobe-chat/blob/main/src/app/api/proxy/route.ts does not consider redirect and could be bypassed when attacker provides external malicious url which redirects to internal resources like private network or loopback address. PoC 1. Ru...

RHSA-2024:3496 Red Hat Security Advisory: OpenShift Container Platform 4.13.43 security update

Bulletin has no description...

PT-2024-29313 · Alibaba · Aliyuncontainerservice Pouch

Name of the Vulnerable Software and Affected Versions: AliyunContainerService pouch version 1.3.1 Description: A symlink following vulnerability in the pouch cp function of AliyunContainerService pouch allows attackers to escalate privileges and write arbitrary files. Recommendations: For...

SUSE-SU-2024:3360-1 Security update for container-suseconnect

This update for container-suseconnect rebuilds it against current go1.21.13.1. Security issues fixed: CVE-2024-24789, CVE-2024-24790, CVE-2024-24791...

[SECURITY] Fedora 41 Update: aardvark-dns-1.12.2-2.fc41

Authoritative DNS server for A/AAAA container records Forwards other request to configured resolvers. Read more about configuration in src/backend/mod.rs...

RHSA-2023:3362 Red Hat Security Advisory: OpenShift Container Platform 4.10.61 packages and security update

Bulletin has no description...

RHSA-2019:2817 Red Hat Security Advisory: OpenShift Container Platform 3.11 security update

Bulletin has no description...

RHSA-2019:3906 Red Hat Security Advisory: OpenShift Container Platform 3.11 HTTP/2 security update

Bulletin has no description...

RHSA-2019:3265 Red Hat Security Advisory: OpenShift Container Platform 4.1 security update

Bulletin has no description...

RHSA-2019:3245 Red Hat Security Advisory: OpenShift Container Platform 4.2 security update

Bulletin has no description...

RHSA-2019:2661 Red Hat Security Advisory: Red Hat OpenShift Container Platform 4.1 openshift RPM security update

Bulletin has no description...

RHSA-2019:2690 Red Hat Security Advisory: OpenShift Container Platform 3.10 security update

Bulletin has no description...

RHBA-2019:2819 Red Hat Bug Fix Advisory: OpenShift Container Platform 4.1.17 packages update

Bulletin has no description...

RHBA-2019:3139 Red Hat Bug Fix Advisory: OpenShift Container Platform 3.11 bug fix and enhancement update

Bulletin has no description...

Unbreakable Enterprise kernel-container security update

5.4.17-2136.335.4.1.el8 - vhost/scsi: null-ptr-dereference in vhostscsigetreq Haoran Zhang Orabug: 37035558...

Unbreakable Enterprise kernel-container security update

5.4.17-2136.335.4.1.el7 - vhost/scsi: null-ptr-dereference in vhostscsigetreq Haoran Zhang Orabug: 37035558...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.16.13 bug fix and security update

Red Hat OpenShift Container Platform release 4.16.13 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.16. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.37 bug fix and security update

Red Hat OpenShift Container Platform release 4.14.37 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...

Improper Privilege Management

github.com/openshift/openshift-controller-manager is vulnerable to Improper Privilege Management. The vulnerability is due to misuse of elevated privileges during the build process, where the git-clone container is run with a privileged security context, allowing an attacker to provide a crafted...