openSUSE Security Advisory (SUSE-SU-2024:1486-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Moderate: Red Hat Security Advisory: RHACS 4.5 enhancement and security update

Updated images are now available for Red Hat Advanced Cluster Security. The updated image includes new features, bug fixes, and updates to patch vulnerabilities. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base...

CVE-2024-29903

A flaw was found in the Cosign package where maliciously crafted software artifacts can trigger uncontrolled resource consumption by allocating too much memory and starving out the system. A successful attack may result in a denial of service of the machine running Cosign, impacting availability...

CVE-2024-29903 vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, spire-server-fips, wolfictl, falcoctl-fips, policy-controller-fips, kubescape, spire-server, tkn, tekton-chains-fips, gitsign, ko, skaffold, tkn-fips, ko-fips, vexctl, zot, aactl, falco, melange, slsa-verifier, flux-source-controller,...

CVE-2024-29903 vulnerabilities

Vulnerabilities for packages: kubescape, vexctl, flux-source-controller, gitsign, apko, neuvector-sigstore-interface, wolfictl, policy-controller, tkn, falcoctl, spire-server, goreleaser, zot, zarf, tekton-chains, slsa-verifier, melange, aactl, skaffold, falco, ko...