GHSA-V6Q2-4QR3-5CW6 vulnerabilities

Vulnerabilities for packages: hubble-ui-backend-fips, hubble-ui...

GHSA-J89H-QRVR-XC36 vulnerabilities

Vulnerabilities for packages: hubble-ui-backend-fips, hubble-ui...

GHSA-68MJ-9PJQ-MC85 vulnerabilities

Vulnerabilities for packages: hubble-ui-backend-fips, hubble-ui...

GHSA-2VGG-9H6W-M454 vulnerabilities

Vulnerabilities for packages: argo-cd, argo-cd-fips...

CVE-2024-21662 vulnerabilities

Vulnerabilities for packages: argo-cd, argo-cd-fips...

openssh security update

7.4p1-23.0.3fips - Change Epoch from 1 to 10 - Enable fips KDF POST Orabug: 32461750 - Disable diffie-hellman-group-exchange-sha256 KEX FIPS method Orabug: 32461739 7.4p1-23.0.3 - add KEXINITIAL flag Orabug: 36160445 - implement 'strict key exchange' CVE-2023-48795Orabug: 36160445...

GHSA-JWV5-8MQV-G387 vulnerabilities

Vulnerabilities for packages: argo-cd, argo-cd-fips...

EulerOS Virtualization 2.10.0 : openssl (EulerOS-SA-2024-1387)

According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Issue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very...

EulerOS Virtualization 2.10.0 : shim (EulerOS-SA-2024-1392)

According to the versions of the shim package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Issue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow...

EulerOS Virtualization 2.10.1 : shim (EulerOS-SA-2024-1371)

According to the versions of the shim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Issue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow...

SUSE SLES15: libopenssl-1_1-devel / libopenssl-1_1-devel-32bit / libopenssl1_1 / etc (SUSE-SU-2024:0832-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0832-1 advisory. - CVE-2024-0727: Denial of service when processing a maliciously formatted PKCS12 file bsc1219243. Tenable has extracted the preceding...

EulerOS 2.0 SP11 : openssl (EulerOS-SA-2024-1242)

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service attack Impact...

EulerOS 2.0 SP8 : compat-openssl10 (EulerOS-SA-2024-1258)

According to the versions of the compat-openssl10 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Issue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow...

SUSE SLES12: libopenssl-1_0_0-devel / libopenssl-1_0_0-devel-32bit / etc (SUSE-SU-2024:0814-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0814-1 advisory. - CVE-2024-0727: Denial of service when processing a maliciously formatted PKCS12 file bsc1219243. Tenable has extracted the preceding...

GHSA-HJ3V-M684-V259 vulnerabilities

Vulnerabilities for packages: minio, spire-server, minio-fips, falcoctl, boring-registry, mc, boring-registry-fips, spire-server-fips, mc-fips, external-secrets-fips, falcoctl-fips...

CVE-2024-27304 vulnerabilities

Vulnerabilities for packages: trillian-fips, step-ca, argo-workflows, falcosidekick-fips, k3s, spicedb, kube-bench-fips, trillian, argo-workflows-fips, temporal-server-fips, wavefront-collector-for-kubernetes, kots, kube-bench, src, ferretdb, caddy-fips, amass, step, caddy, temporal-server, kine...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: prometheus-beat-exporter, crossplane-provider-aws-dynamodb, gitness, dex, kaf, kubeflow-katib, nri-discovery-kubernetes, hugo, nfs-subdir-external-provisioner-fips, sigstore-scaffolding-fips, spark-operator, prometheus-redis-exporter, rqlite, k8sgpt-operator,...

Amazon Linux 2 : openssl11 (ALAS-2024-2478)

The version of openssl11 installed on the remote host is prior to 1.1.1g-12. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2478 advisory. Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service attack The...

GHSA-R3W7-MFPM-C2VW vulnerabilities

Vulnerabilities for packages: k3d...

GHSA-7JWH-3VRQ-Q3M8 vulnerabilities

Vulnerabilities for packages: trillian-fips, step-ca, argo-workflows, falcosidekick-fips, k3s, spicedb, kube-bench-fips, trillian, argo-workflows-fips, temporal-server-fips, wavefront-collector-for-kubernetes, kots, kube-bench, src, ferretdb, caddy-fips, amass, step, caddy, temporal-server, kine...