CVE-2025-21614 affecting package packer for versions less than 1.9.5-7

CVE-2025-21614 affecting package packer for versions less than 1.9.5-7. An upgraded version of the package is available that resolves this issue...

CVE-2024-45338 affecting package packer for versions less than 1.9.5-6

CVE-2024-45338 affecting package packer for versions less than 1.9.5-6. A patched version of the package is available...

CVE-2024-45337 affecting package packer for versions less than 1.9.5-5

CVE-2024-45337 affecting package packer for versions less than 1.9.5-5. A patched version of the package is available...

CVE-2025-47913 affecting package packer for versions less than 1.9.5-16

CVE-2025-47913 affecting package packer for versions less than 1.9.5-16. A patched version of the package is available...

CVE-2025-11065 affecting package packer for versions less than 1.9.5-18

CVE-2025-11065 affecting package packer for versions less than 1.9.5-18. A patched version of the package is available...

CVE-2025-21613 affecting package packer for versions less than 1.9.5-7

CVE-2025-21613 affecting package packer for versions less than 1.9.5-7. An upgraded version of the package is available that resolves this issue...

CBL Mariner 2.0 Security Update: cert-manager / cni-plugins / kubevirt / multus / packer / prometheus-adapter (CVE-2023-3978)

The version of cert-manager / cni-plugins / kubevirt / multus / packer / prometheus-adapter installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-3978 advisory. - Text nodes not in the HTML namespace ar...

AZL-42943 CVE-2024-6104 affecting package packer for versions less than 1.9.5-2

go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file. This could lead to go-retryablehttp writing sensitive HTTP basic auth credentials to its log file. This vulnerability, CVE-2024-6104, was fixed in go-retryablehttp 0.7.7...

AZL-42874 CVE-2024-6104 affecting package packer for versions less than 1.9.5-2

go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file. This could lead to go-retryablehttp writing sensitive HTTP basic auth credentials to its log file. This vulnerability, CVE-2024-6104, was fixed in go-retryablehttp 0.7.7...

CVE-2023-45288 affecting package packer for versions less than 1.10.1-2

CVE-2023-45288 affecting package packer for versions less than 1.10.1-2. A patched version of the package is available...

Cryptojacking Campaign Targets Misconfigured Kubernetes Clusters

Cybersecurity researchers have warned of an ongoing cryptojacking campaign targeting misconfigured Kubernetes clusters to mine Dero cryptocurrency. Cloud security firm Wiz, which shed light on the activity, said it's an updated variant of a financially motivated operation that was first documente...

Hackers Exploit Legitimate Packer Software to Spread Malware Undetected

Threat actors are increasingly abusing legitimate and commercially available packer software such as BoxedApp to evade detection and distribute malware such as remote access trojans and information stealers. "The majority of the attributed malicious samples targeted financial institutions and...

Fedora: Security Advisory (FEDORA-2024-df5322cd61)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 40 Update: upx-4.2.3-1.fc40

UPX is a free, portable, extendable, high-performance executable packer for several different executable formats. It achieves an excellent compression ratio and offers very fast decompression. Your executables suffer no memory overhead or other drawbacks...

CVE-2023-49568 affecting package packer for versions less than 1.9.5-3

CVE-2023-49568 affecting package packer for versions less than 1.9.5-3. A patched version of the package is available...

CVE-2023-49569 affecting package packer for versions less than 1.9.5-3

CVE-2023-49569 affecting package packer for versions less than 1.9.5-3. A patched version of the package is available...

CVE-2023-3978 affecting package packer for versions less than 1.9.5-3

CVE-2023-3978 affecting package packer for versions less than 1.9.5-3. A patched version of the package is available...

[SECURITY] Fedora 38 Update: upx-4.2.3-1.fc38

UPX is a free, portable, extendable, high-performance executable packer for several different executable formats. It achieves an excellent compression ratio and offers very fast decompression. Your executables suffer no memory overhead or other drawbacks...

[SECURITY] Fedora 39 Update: upx-4.2.3-1.fc39

UPX is a free, portable, extendable, high-performance executable packer for several different executable formats. It achieves an excellent compression ratio and offers very fast decompression. Your executables suffer no memory overhead or other drawbacks...

AZL-39202 CVE-2023-45288 affecting package packer for versions less than 1.10.1-2

An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no...