9289 matches found
Moderate: Red Hat Security Advisory: Migration Toolkit for Applications security update
An update is now available for MTA-6.2-RHEL-8 and MTA-6.2-RHEL-9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...
golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests
A flaw was found in the Golang net/http/internal package. This issue may allow a malicious user to send an HTTP request and cause the receiver to read more bytes from network than are in the body up to 1GiB, causing the receiver to fail reading the response, possibly leading to a Denial of Servic...
golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests
A flaw was found in the Golang net/http/internal package. This issue may allow a malicious user to send an HTTP request and cause the receiver to read more bytes from network than are in the body up to 1GiB, causing the receiver to fail reading the response, possibly leading to a Denial of Servic...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.15.0 packages and security update
Red Hat OpenShift Container Platform release 4.15.0 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.15. Red Hat Product Security has rated this update as having a...
Important: Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 10.15.0 security update
The components for Red Hat OpenShift for Windows Containers 10.15.0 are now available. This product release includes bug fixes and security updates for the following packages: windows-machine-config-operator and windows-machine-config-operator-bundle. Red Hat Product Security has rated this updat...
Migo Targets Redis Servers for Cryptojacking Attacks
Summary: A new campaign has been uncovered that mines cryptocurrencies on Redis servers running Linux hosts by means of a malicious programme known as "Migo." Migo is distributed as a Golang ELF binary that can persist on Linux hosts and is obfuscated at compile time. The malware uses a variety o...
CVE-2023-39326 affecting package golang for versions less than 1.21.5-1
CVE-2023-39326 affecting package golang for versions less than 1.21.5-1. A patched version of the package is available...
CVE-2022-2879 affecting package golang for versions less than 1.21.6-1
CVE-2022-2879 affecting package golang for versions less than 1.21.6-1. A patched version of the package is available...
CVE-2023-29405 affecting package golang for versions less than 1.21.6-1
CVE-2023-29405 affecting package golang for versions less than 1.21.6-1. A patched version of the package is available...
CVE-2023-24534 affecting package golang for versions less than 1.21.6-1
CVE-2023-24534 affecting package golang for versions less than 1.21.6-1. A patched version of the package is available...
CVE-2024-24785 affecting package golang for versions less than 1.21.6-1
CVE-2024-24785 affecting package golang for versions less than 1.21.6-1. A patched version of the package is available...
CVE-2022-41722 affecting package golang for versions less than 1.21.6-1
CVE-2022-41722 affecting package golang for versions less than 1.21.6-1. A patched version of the package is available...
CVE-2023-39533 affecting package golang for versions less than 1.21.6-1
CVE-2023-39533 affecting package golang for versions less than 1.21.6-1. A patched version of the package is available...
CVE-2023-24538 affecting package golang for versions less than 1.21.6-1
CVE-2023-24538 affecting package golang for versions less than 1.21.6-1. A patched version of the package is available...
CVE-2023-29409 affecting package golang for versions less than 1.21.6-1
CVE-2023-29409 affecting package golang for versions less than 1.21.6-1. A patched version of the package is available...
CVE-2023-39326 affecting package golang for versions less than 1.21.6-1
CVE-2023-39326 affecting package golang for versions less than 1.21.6-1. A patched version of the package is available...
CVE-2023-44487 affecting package golang for versions less than 1.21.6-1
CVE-2023-44487 affecting package golang for versions less than 1.21.6-1. A patched version of the package is available...
CVE-2023-39318 affecting package golang for versions less than 1.21.6-1
CVE-2023-39318 affecting package golang for versions less than 1.21.6-1. A patched version of the package is available...