GHSA-4C7Q-M7HC-PC92 vulnerabilities

Vulnerabilities for packages: sonarqube-10, elasticsearch-fips, elasticsearch...

CVE-2024-23445 vulnerabilities

Vulnerabilities for packages: sonarqube-10...

CLSA-2024-1718192341 Update of alt-php

Bump epoch Disable ESM notification after installation: - remove ESM hook for apt-system - remove ESM infra/apps repositories from apt sources list Automatically mark some pytest to skip if FIPS kernel is running in a disabled state they always fail in this mode...

PT-2024-10388 · Palo Alto Networks · Palo Alto Networks Globalprotect

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks GlobalProtect affected versions not specified Description: The issue is related to an insufficient certification validation in the GlobalProtect app, allowing attackers to connect the app to arbitrary servers. This can enab...

GHSA-2CWW-FGMG-4JQC vulnerabilities

Vulnerabilities for packages: keycloak-fips...

GHSA-7JMW-8259-Q9JX vulnerabilities

Vulnerabilities for packages: traefik-fips, traefik...

GHSA-69FP-7C8P-CRJR vulnerabilities

Vulnerabilities for packages: keycloak-fips...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: rabbitmq-default-user-credential-updater, neuvector-scanner-fips, prometheus-beat-exporter, tkn-fips, gitness, dex, kaf, kubeflow-katib, nri-couchbase, nri-discovery-kubernetes, nfs-subdir-external-provisioner-fips, kafka-proxy, gosu, lazygit,...

CVE-2024-24790 vulnerabilities

Vulnerabilities for packages: rabbitmq-default-user-credential-updater, neuvector-scanner-fips, prometheus-beat-exporter, tkn-fips, gitness, dex, kaf, kubeflow-katib, nri-couchbase, nri-discovery-kubernetes, nfs-subdir-external-provisioner-fips, kafka-proxy, gosu, lazygit,...

CVE-2024-4540 vulnerabilities

Vulnerabilities for packages: keycloak-fips...

Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Uncontrolled Resource Consumption (CVE-2024-2511)

Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impact summary: An attacker may exploit certain server configurations to trigger unbounded memory growth that would lead to a Denial of Service. This problem can occur in...

EulerOS 2.0 SP12 : shim (EulerOS-SA-2024-1776)

According to the versions of the shim package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service attack Impact summar...

CVE-2024-35311

Yubico YubiKey 5 Series before 5.7.0, Security Key Series before 5.7.0, YubiKey Bio Series before 5.6.4, and YubiKey 5 FIPS before 5.7.2 have Incorrect Access Control...

CVE-2024-35200 vulnerabilities

Vulnerabilities for packages: nginx-stable, nginx-mainline...

Oracle Linux 8 : openssh (ELSA-2024-3166)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-3166 advisory. - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 Tenable has extracted the preceding description block directly from the Oracl...

golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads

A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion vulnerability using attacker-controlled inputs​. The memory leak happens in github.com/golang-fips/openssl/openssl/rsa.goL113. The objects leaked are pkey​ and ctx​. That functi...

GHSA-F7CQ-5V43-8PWP vulnerabilities

Vulnerabilities for packages: traefik-fips, traefik...

libssh security update

0.9.6-14 - Fix CVE-2023-48795 Prefix truncation attack on Binary Packet Protocol BPP - Fix CVE-2023-6918 Missing checks for return values for digests - Fix CVE-2023-6004 ProxyCommand/ProxyJump features allow injection of malicious code through hostname - Note: version is bumped from 12 to 14...

openssh security update

8.0p1-24.0.1 - Update upstream references Orabug: 36587718 8.0p1-24 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 8.0p1-23 - Fix Terrapin attack Resolves: RHEL-19308 8.0p1-22 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in...

golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads

A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion vulnerability using attacker-controlled inputs​. The memory leak happens in github.com/golang-fips/openssl/openssl/rsa.goL113. The objects leaked are pkey​ and ctx​. That functi...