Debian dla-3171 : distro-info-data - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3171 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3171-1 [email protected] https://www.debian.org/lts/security/...

GHSA-GWC9-M7RH-J2WW vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner-fips, dynamic-localpv-provisioner, kubeflow, terraform-provider-sendgrid, k3d, terraform-provider-sendgrid-fips, kubeflow-fips...

GHSA-69CG-P879-7622 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner-fips, wireguard-go, dynamic-localpv-provisioner, kubeflow, kubeflow-katib, terraform-provider-sendgrid, grpcurl, k3d, kube-state-metrics, terraform-provider-sendgrid-fips, kubeflow-fips, hey...

CVE-2022-27664 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner-fips, wireguard-go, dynamic-localpv-provisioner, kubeflow, kubeflow-katib, terraform-provider-sendgrid, grpcurl, k3d, kube-state-metrics, terraform-provider-sendgrid-fips, kubeflow-fips, hey...

CVE-2021-43565 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner-fips, dynamic-localpv-provisioner, kubeflow, terraform-provider-sendgrid, k3d, terraform-provider-sendgrid-fips, kubeflow-fips...

GHSA-P782-XGP4-8HR8 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner-fips, dynamic-localpv-provisioner, kubeflow, terraform-provider-sendgrid, grpcurl, k3d, terraform-provider-sendgrid-fips, kind, ctop...

GHSA-F4W6-3RH6-6Q4Q vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-provisioner...

GHSA-HP87-P4GW-J4GQ vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, thanos-operator, dynamic-localpv-provisioner-fips, thanos-operator-fips...

CVE-2022-28948 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, thanos-operator, dynamic-localpv-provisioner-fips, thanos-operator-fips...

new packages: python-distro

An update is available for python-distro. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

GHSA-8C26-WMH5-6G9V vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner-fips, dynamic-localpv-provisioner, kubeflow, terraform-provider-sendgrid, k3d, terraform-provider-sendgrid-fips, kubeflow-fips...

GHSA-CG3Q-J54F-5P7P vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, dynamic-localpv-provisioner-fips...

CVE-2022-21698 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, dynamic-localpv-provisioner-fips...

openSUSE: Security Advisory for libdnf (openSUSE-SU-2021:2685-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE: Security Advisory for salt (openSUSE-SU-2021:0899-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Open Distro for Elasticsearch SSRF漏洞（CVE-2021-31828）

SSRF in Open Distro for Elasticsearch CVE-2021-31828 Rotem Bar Published on May 11, 2021 7 min read After an interesting adventure, it's now possible to announce a new CVE-2021-31828 which effects Open Distro for ElasticSearch ODFE , versions until 1.12.0.2. Open Distro is a plugin for...

CVE-2021-31828

An SSRF issue in Open Distro for Elasticsearch ODFE before 1.13.1.0 allows an existing privileged user to enumerate listening services or interact with configured resources via HTTP requests exceeding the Alerting plugin's intended scope...

Server side request forgery (ssrf)

An SSRF issue in Open Distro for Elasticsearch ODFE before 1.13.1.0 allows an existing privileged user to enumerate listening services or interact with configured resources via HTTP requests exceeding the Alerting plugin's intended scope...

CVE-2021-31828

An SSRF issue in Open Distro for Elasticsearch ODFE before 1.13.1.0 allows an existing privileged user to enumerate listening services or interact with configured resources via HTTP requests exceeding the Alerting plugin's intended scope...

CVE-2021-31828

An SSRF issue in Open Distro for Elasticsearch ODFE before 1.13.1.0 allows an existing privileged user to enumerate listening services or interact with configured resources via HTTP requests exceeding the Alerting plugin's intended scope...