Security Bulletin: Due to use of Apache Struts, Netcool Operation Insight is vulnerable to arbitrary code execution.

Summary Apache Struts is used by Netcool Operations Insight as part of internal services CVE-2023-50164 This bulletin identifies the steps to take to address the vulnerability. Vulnerability Details CVEID:CVE-2023-50164 DESCRIPTION: Apache Struts could allow a remote attacker to execute arbitrary...

PT-2024-4478 · Westermo · Westermo Edw-100

Name of the Vulnerable Software and Affected Versions: Westermo EDW-100 devices through 2024-05-03 Description: The issue is related to a hidden root user account with a hardcoded password that cannot be changed in Westermo EDW-100 devices. This could allow a remote attacker to disclose informati...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.14.23 security update

Red Hat OpenShift Container Platform release 4.14.23 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...

Apollo Router vulnerable to Critical Regression In Query Plan Cache

Impact Any instance of Apollo Router 1.44.0 or 1.45.0 that is using Distributed Query Plan Caching is impacted. These versions were released on 2024-04-12 and 2024-04-22 respectively. The affected versions of Apollo Router contain a bug that could lead to unexpected operations being executed, whi...

USN-6697-1: Bash vulnerability | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 22.04 Description It was discovered that Bash incorrectly handled certain memory operations when processing commands. If a user or automated system were tricked into running a specially crafted bash file, a remote attacker...

USN-6698-1: Vim vulnerability | Cloud Foundry

Severity Low Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Canonical Ubuntu 22.04 Description Zhen Zhou discovered that Vim did not properly manage memory. An attacker could possibly use this issue to cause a denial of service Update Instructions: Run sud...

USN-6719-1: util-linux vulnerability | Cloud Foundry

Severity Unknown Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 22.04 Description Skyler Ferrante discovered that the util-linux wall command did not filter escape sequences from command line arguments. A local attacker could possibly use this issue to obtain sensitive information...

USN-6718-1: curl vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 22.04 Description Dan Fandrich discovered that curl would incorrectly use the default set of protocols when a parameter option disabled all protocols without adding any, contrary to expectations. This issue only affected...

Security Bulletin: NVIDIA Triton Inference Server - April 2024

NVIDIA has released a software update for NVIDIA Triton Inference Server to address the issue disclosed in this bulletin. To protect your system, install the latest release from the Triton Inference Server Releases page on GitHub, and view the Secure Deployment Considerations Guide. Go to NVIDIA...

Moderate: ansible-core bug fix, enhancement, and security update

Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred t...

RHEL 5 : java-1.4.2-ibm-sap (RHSA-2011:0870)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0870 advisory. - JDK unspecified vulnerability in Deployment component CVE-2010-4447, CVE-2010-4466, CVE-2010-4475 - OpenJDK DNS cache poisoning by untrust...

cri-o security update

cri-o 1.26.4-2 - Address CVE-2024-24786 cri-tools 1.26.1-5 - Address CVE-2024-24786 etcd 3.5.10-3 - Address protobuf CVE-2024-24786 3.5.10-1 - Added Oracle specific build files istio 1.17.8-3 - Address protobuf CVE-2024-24786 - Backport from 1.19.7 to address CVE-2024-23322, CVE-2024-23323,...

io.quarkus:quarkus-jaxrs-client-reactive-deployment (2.0.0.final), io.quarkus:quarkus-oidc-client-reactive-filter-deployment (2.0.0.final) +9 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common-deployment (2.0.0.final)

io.quarkus:quarkus-resteasy-reactive-common-deployment MAVEN version 2.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common-deployment and may be impacted: -...

io.quarkus:quarkus-jaxrs-client-reactive-deployment (2.0.0.alpha1), io.quarkus:quarkus-rest-client-reactive-deployment (2.0.0.alpha1) +8 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common-deployment (2.0.0.alpha1)

io.quarkus:quarkus-resteasy-reactive-common-deployment MAVEN version 2.0.0.alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common-deployment and may be impacted: -...

io.quarkus:quarkus-jaxrs-client-reactive-deployment (2.2.5.final), io.quarkus:quarkus-oidc-client-reactive-filter-deployment (2.2.5.final) +10 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common-deployment (2.2.5.final)

io.quarkus:quarkus-resteasy-reactive-common-deployment MAVEN version 2.2.5.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common-deployment and may be impacted: -...

io.quarkus:quarkus-jaxrs-client-reactive-deployment (2.0.0.alpha2), io.quarkus:quarkus-oidc-client-reactive-filter-deployment (2.0.0.alpha2) +9 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common-deployment (2.0.0.alpha2)

io.quarkus:quarkus-resteasy-reactive-common-deployment MAVEN version 2.0.0.alpha2 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common-deployment and may be impacted: -...

com.github.mcollovati:quarkus-hilla-deployment (>=1.0.0-alpha1, <=1.0.0-beta2), io.quarkiverse.renarde:quarkus-renarde-backoffice-deployment (1.0.5) +27 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common-deployment (2.16.0.final)

io.quarkus:quarkus-resteasy-reactive-common-deployment MAVEN version 2.16.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common-deployment and may be impacted: - com.github.mcollovati:quarkus-hilla-deployme...

io.quarkiverse.helm:quarkus-helm-integration-tests-kubernetes-full (0.0.3), io.quarkiverse.helm:quarkus-helm-integration-tests-kubernetes-minimal (0.0.3) +55 more potentially affected by CVE-2024-1726 via io.quarkus.resteasy.reactive:resteasy-reactive (2.11.0.cr1)

io.quarkus.resteasy.reactive:resteasy-reactive MAVEN version 2.11.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive and may be impacted: -...

io.quarkus:quarkus-jaxrs-client-reactive-deployment (2.3.1.final), io.quarkus:quarkus-oidc-client-reactive-filter-deployment (2.3.1.final) +10 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common-deployment (2.3.1.final)

io.quarkus:quarkus-resteasy-reactive-common-deployment MAVEN version 2.3.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common-deployment and may be impacted: -...

io.quarkus:quarkus-jaxrs-client-deployment (1.11.3.final), io.quarkus:quarkus-resteasy-reactive-deployment (1.11.3.final) +4 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common-deployment (1.11.3.final)

io.quarkus:quarkus-resteasy-reactive-common-deployment MAVEN version 1.11.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common-deployment and may be impacted: - io.quarkus:quarkus-jaxrs-client-deployment...