9928 matches found
CVE-2024-47211: Undefined Security Weakness
In OpenStack Ironic before 21.4.4, 22.x and 23.x before 23.0.3, 23.x and 24.x before 24.1.3, and 25.x and 26.x before 26.1.0, there is a lack of checksum validation of supplied imagesource URLs when configured to convert images to a raw format for streaming...
CVE-2024-47211
OpenStack Ironic versions before 21.4.4, 22.x, 23.x before 23.0.3, 23.x and 24.x before 24.1.3, and 25.x and 26.x before 26.1.0 are vulnerable to a lack of checksum validation on supplied image_source URLs. This occurs when the system is configured to convert images to a raw format for streaming,...
CVE-2024-47211
In OpenStack Ironic before 21.4.4, 22.x and 23.x before 23.0.3, 23.x and 24.x before 24.1.3, and 25.x and 26.x before 26.1.0, there is a lack of checksum validation of supplied imagesource URLs when configured to convert images to a raw format for streaming...
CVE-2024-47211
In OpenStack Ironic before 21.4.4, 22.x and 23.x before 23.0.3, 23.x and 24.x before 24.1.3, and 25.x and 26.x before 26.1.0, there is a lack of checksum validation of supplied imagesource URLs when configured to convert images to a raw format for streaming...
OpenStack Ironic security vulnerabilities
OpenStack Ironic is an integrated OpenStack program open-sourced by OpenStack. It is used to configure bare metal rather than virtual machines. A security vulnerability exists in OpenStack Ironic that stems from a lack of checksum validation of the provided imagesource URL. The following versions...
org.jenkins-ci.main:jenkins-test-harness (1.596.3), org.jenkins-ci.main:jenkins-war (1.596.3) +4 more potentially affected by CVE-2024-47804 via org.jenkins-ci.main:jenkins-core (1.596.3)
org.jenkins-ci.main:jenkins-core MAVEN version 1.596.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.596.3 - org.jenkins-ci.main:jenkins-war 1.596.3 -...
org.jenkins-ci.plugins:anka-build (>=1.12, <=1.13), org.jenkins-ci.plugins:openstack-cloud (>=2.18, <=2.42) +1 more potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (2.1.2)
org.jenkins-ci.plugins:credentials MAVEN version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - org.jenkins-ci.plugins:anka-build =1.12, =2.18, =1.12, =1.17 Source cves: CVE-2024-47805...
RHSA-2023:5964 Red Hat Security Advisory: Red Hat OpenStack Platform 16.2.5 (collectd-libpod-stats) security update
Bulletin has no description...
RHSA-2023:5967 Red Hat Security Advisory: Red Hat OpenStack Platform 16.1.9 (collectd-libpod-stats, etcd) security update
Bulletin has no description...
RHSA-2023:5970 Red Hat Security Advisory: Red Hat OpenStack Platform 17.1.1 (collectd-libpod-stats) security update
Bulletin has no description...
RHSA-2023:5965 Red Hat Security Advisory: Red Hat OpenStack Platform 16.2.5 (collectd-libpod-stats, etcd) security update
Bulletin has no description...
RHSA-2023:5969 Red Hat Security Advisory: Red Hat OpenStack Platform 17.1.1 security update
Bulletin has no description...
RHSA-2024:6775 Red Hat Security Advisory: Red Hat OpenStack Platform 18.0 (python-webob) security update
Bulletin has no description...
RHSA-2023:3161 Red Hat Security Advisory: Red Hat OpenStack Platform 13.0 security update
Bulletin has no description...
RHSA-2023:3157 Red Hat Security Advisory: Red Hat OpenStack Platform 17.0 security update
Bulletin has no description...
RHSA-2023:3158 Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 security update
Bulletin has no description...
RHSA-2023:3447 Red Hat Security Advisory: Red Hat OpenStack Platform 16.1 (etcd) security update
Bulletin has no description...
RHSA-2023:3445 Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (etcd) security update
Bulletin has no description...