6115 matches found
java-21-openjdk security update
1:21.0.3.0.9-1.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:21.0.3.0.9-1 - Update to jdk-21.0.3+9 GA - Update release notes to 21.0.3+9 - Switch to GA mode. - Sync the copy of the portable specfile with the latest update - This tarball is embargoed until 2024-04-16 @ 1pm PT. - Resolves:...
Siemens SIMATIC and SCALANCE Devices Improper Check for Unusual or Exceptional Conditions (CVE-2023-5678)
Issue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow. Impact summary: Applications that use the functions DHgeneratekey to generate an X9.42 DH key may experience long delays. Likewise, applications that use...
Siemens SIMATIC and SCALANCE Devices Improper Input Validation (CVE-2024-0727)
Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service attack Impact summary: Applications loading files in the PKCS12 format from untrusted sources might terminate abruptly. A file in PKCS12 format can contain certificates...
java-17-openjdk security update
17.0.11.0.9-2.0.1 - Add Oracle vendor bug URL 1:17.0.11.0.9-2 - Update to jdk-17.0.11+9 GA - Add openjdk-17.0.11+9.tar.xz to .gitignore - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Update buildver from 7 to 9 - Update portablerelease from 1 to 3 - Change isga from 0 to ...
gnutls security update
3.7.6-23.4fips - Add FIPS package change: add fips suffix to Release and set Epoch to 10 Orabug: 35925409 - Update FIPS module name for Oracle Linux Orabug: 35925409 - Verify salt length and iteration count for PBKDF Orabug: 35925409 3.7.6-23.4 - Fix timing side-channel in deterministic ECDSA...
nss security update
3.90.0-6fips - Add FIPS package change: add fips suffix to Release and set Epoch to 10 Orabug: 35862190 - Update FIPS module name for Oracle Linux Orabug: 35862190 3.90.0-6 - Fix ecc DER wrapping. 3.90.0-5 - Pick up validated constant time implementations of p256, p384, and p521 from upsream - Mo...
golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads
A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion vulnerability using attacker-controlled inputs. The memory leak happens in github.com/golang-fips/openssl/openssl/rsa.goL113. The objects leaked are pkey and ctx. That functi...
GHSA-Q64H-39HV-4CF7 vulnerabilities
Vulnerabilities for packages: k9s, zarf, conftest-fips, tfsec, tflint, zot, kubescape, conftest, terraform...
CVE-2024-3817 vulnerabilities
Vulnerabilities for packages: k9s, zarf, conftest-fips, tfsec, tflint, zot, kubescape, conftest, terraform...
GHSA-7FPJ-9HR8-28VH vulnerabilities
Vulnerabilities for packages: keycloak...
GHSA-C9H6-V78W-52WJ vulnerabilities
Vulnerabilities for packages: keycloak...
GHSA-72VP-XFRC-42XM vulnerabilities
Vulnerabilities for packages: keycloak...
GHSA-M6Q9-P373-G5Q8 vulnerabilities
Vulnerabilities for packages: keycloak...
GHSA-46C8-635V-68R2 vulnerabilities
Vulnerabilities for packages: keycloak...
GHSA-8RMM-GM28-PJ8Q vulnerabilities
Vulnerabilities for packages: keycloak...
GHSA-4F53-XH3V-G8X4 vulnerabilities
Vulnerabilities for packages: keycloak...
GHSA-MRV8-PQFJ-7GP5 vulnerabilities
Vulnerabilities for packages: keycloak...
CVE-2024-2419 vulnerabilities
Vulnerabilities for packages: keycloak...