USN-6409-1: GNU C Library vulnerabilities | Cloud Foundry

Severity Unknown Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 22.04 Description It was discovered that the GNU C Library incorrectly handled the GLIBCTUNABLES environment variable. An attacker could possibly use this issue to perform a privilege escalation attack. CVE-2023-4911 It w...

Important: Red Hat Security Advisory: Red Hat OpenShift GitOps security update

An update is now available for Red Hat OpenShift GitOps 1.11. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

Metasploit Wrap-Up 03/15/2024

New module content 3 GitLab Password Reset Account Takeover Authors: asterion04 and h00die Type: Auxiliary Pull request: 18716 contributed by h00die Path: admin/http/gitlabpasswordresetaccounttakeover AttackerKB reference: CVE-2023-7028 Description: This adds an exploit module that leverages an...

JetBrains TeamCity Information Disclosure

The vulnerability of the CI/CD application integration and delivery system of JetBrains TeamCity is related to the disclosure of information during data transmission. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected informatio...

Authentication flaw

Coder allows oragnizations to provision remote development environments via Terraform. Prior to versions 2.6.1, 2.7.3, and 2.8.4, a vulnerability in Coder's OIDC authentication could allow an attacker to bypass the CODEROIDCEMAILDOMAIN verification and create an account with an email not in the...

io.quarkus:quarkus-minikube-deployment (1.8.1.final), io.quarkus:quarkus-openshift-deployment (1.8.1.final) potentially affected by CVE-2024-1979 via io.quarkus:quarkus-kubernetes-deployment (1.8.1.final)

io.quarkus:quarkus-kubernetes-deployment MAVEN version 1.8.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-kubernetes-deployment and may be impacted: - io.quarkus:quarkus-minikube-deployment 1.8.1.final -...

io.automatiko.quarkus:automatiko-operator-deployment (0.18.0), io.quarkus:quarkus-kind-deployment (2.11.1.final) +2 more potentially affected by CVE-2024-1979 via io.quarkus:quarkus-kubernetes-deployment (2.11.1.final)

io.quarkus:quarkus-kubernetes-deployment MAVEN version 2.11.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-kubernetes-deployment and may be impacted: - io.automatiko.quarkus:automatiko-operator-deployment 0.18.0 -...

io.automatiko.quarkus:automatiko-operator-deployment (>=0.30.0, <=0.33.0), io.quarkiverse.helm:quarkus-helm-deployment (>=1.0.1, <=1.2.1) +7 more potentially affected by CVE-2024-1979 via io.quarkus:quarkus-kubernetes-deployment (>=3.0.0.alpha1, <=3.7.2)

io.quarkus:quarkus-kubernetes-deployment MAVEN version =3.0.0.alpha1, =0.30.0, =1.0.1, =1.0.1, =6.0.0.cr1, =6.0.0.cr1, =6.0.0, =3.0.0.alpha1, =3.0.0.alpha1, =3.0.0.alpha1, =3.7.2 Source cves: CVE-2024-1979 Source advisory: OSV:GHSA-7G97-7R3C-5CC6...

io.automatiko.quarkus:automatiko-operator-deployment (0.5.0), io.quarkus:quarkus-minikube-deployment (1.13.4.final) +1 more potentially affected by CVE-2024-1979 via io.quarkus:quarkus-kubernetes-deployment (1.13.4.final)

io.quarkus:quarkus-kubernetes-deployment MAVEN version 1.13.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-kubernetes-deployment and may be impacted: - io.automatiko.quarkus:automatiko-operator-deployment 0.5.0 -...

io.quarkus:quarkus-minikube-deployment (1.9.1.final), io.quarkus:quarkus-openshift-deployment (1.9.1.final) potentially affected by CVE-2024-1979 via io.quarkus:quarkus-kubernetes-deployment (1.9.1.final)

io.quarkus:quarkus-kubernetes-deployment MAVEN version 1.9.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-kubernetes-deployment and may be impacted: - io.quarkus:quarkus-minikube-deployment 1.9.1.final -...

io.quarkus:quarkus-minikube-deployment (1.7.1.final), io.quarkus:quarkus-openshift-deployment (1.7.1.final) potentially affected by CVE-2024-1979 via io.quarkus:quarkus-kubernetes-deployment (1.7.1.final)

io.quarkus:quarkus-kubernetes-deployment MAVEN version 1.7.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-kubernetes-deployment and may be impacted: - io.quarkus:quarkus-minikube-deployment 1.7.1.final -...

io.automatiko.quarkus:automatiko-operator-deployment (0.10.0), io.quarkus:quarkus-minikube-deployment (2.4.1.final) +1 more potentially affected by CVE-2024-1979 via io.quarkus:quarkus-kubernetes-deployment (2.4.1.final)

io.quarkus:quarkus-kubernetes-deployment MAVEN version 2.4.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-kubernetes-deployment and may be impacted: - io.automatiko.quarkus:automatiko-operator-deployment 0.10.0 -...

io.quarkus:quarkus-minikube-deployment (2.2.5.final), io.quarkus:quarkus-openshift-deployment (2.2.5.final) potentially affected by CVE-2024-1979 via io.quarkus:quarkus-kubernetes-deployment (2.2.5.final)

io.quarkus:quarkus-kubernetes-deployment MAVEN version 2.2.5.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-kubernetes-deployment and may be impacted: - io.quarkus:quarkus-minikube-deployment 2.2.5.final -...

io.quarkus:quarkus-minikube-deployment (2.1.4.final), io.quarkus:quarkus-openshift-deployment (2.1.4.final) potentially affected by CVE-2024-1979 via io.quarkus:quarkus-kubernetes-deployment (2.1.4.final)

io.quarkus:quarkus-kubernetes-deployment MAVEN version 2.1.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-kubernetes-deployment and may be impacted: - io.quarkus:quarkus-minikube-deployment 2.1.4.final -...

io.quarkus:quarkus-minikube-deployment (1.5.0.cr1), io.quarkus:quarkus-openshift-deployment (1.5.0.cr1) potentially affected by CVE-2024-1979 via io.quarkus:quarkus-kubernetes-deployment (1.5.0.cr1)

io.quarkus:quarkus-kubernetes-deployment MAVEN version 1.5.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-kubernetes-deployment and may be impacted: - io.quarkus:quarkus-minikube-deployment 1.5.0.cr1 -...

io.quarkiverse.operatorsdk:quarkus-operator-sdk-csv-generator-deployment (>=3.0.8, <=3.0.9), io.quarkiverse.operatorsdk:quarkus-operator-sdk-deployment (>=3.0.8, <=3.0.9) +2 more potentially affected by CVE-2024-1979 via io.quarkus:quarkus-kubernetes-deployment (2.7.6.final)

io.quarkus:quarkus-kubernetes-deployment MAVEN version 2.7.6.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-kubernetes-deployment and may be impacted: - io.quarkiverse.operatorsdk:quarkus-operator-sdk-csv-generator-deployment...

io.quarkiverse.operatorsdk:quarkus-operator-sdk-deployment (2.0.0.beta2), io.quarkus:quarkus-minikube-deployment (2.0.1.final) +1 more potentially affected by CVE-2024-1979 via io.quarkus:quarkus-kubernetes-deployment (2.0.1.final)

io.quarkus:quarkus-kubernetes-deployment MAVEN version 2.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-kubernetes-deployment and may be impacted: - io.quarkiverse.operatorsdk:quarkus-operator-sdk-deployment 2.0.0.beta2 -...

io.quarkiverse.operatorsdk:quarkus-operator-sdk-deployment (1.8.4), io.quarkus:quarkus-minikube-deployment (1.13.3.final) +1 more potentially affected by CVE-2024-1979 via io.quarkus:quarkus-kubernetes-deployment (1.13.3.final)

io.quarkus:quarkus-kubernetes-deployment MAVEN version 1.13.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-kubernetes-deployment and may be impacted: - io.quarkiverse.operatorsdk:quarkus-operator-sdk-deployment 1.8.4 -...

io.quarkiverse.operatorsdk:quarkus-operator-sdk-bundle-generator-deployment (4.0.6), io.quarkiverse.operatorsdk:quarkus-operator-sdk-deployment (4.0.6) +3 more potentially affected by CVE-2024-1979 via io.quarkus:quarkus-kubernetes-deployment (2.13.6.final)

io.quarkus:quarkus-kubernetes-deployment MAVEN version 2.13.6.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-kubernetes-deployment and may be impacted: -...

io.quarkiverse.operatorsdk:quarkus-operator-sdk-bundle-generator-deployment (>=4.0.2, <=4.0.3), io.quarkiverse.operatorsdk:quarkus-operator-sdk-deployment (>=4.0.2, <=4.0.3) +3 more potentially affected by CVE-2024-1979 via io.quarkus:quarkus-kubernetes-deployment (2.13.1.final)

io.quarkus:quarkus-kubernetes-deployment MAVEN version 2.13.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-kubernetes-deployment and may be impacted: -...