Security Bulletin: IBM Watson CP4D Data Stores is vulnerable to Golang golang-fips/openssl denial of service vulnerabilitiy( CVE-2024-1394 )

Summary Potential Golang golang-fips/openssl denial of service vulnerabilitiy CVE-2024-1394 has been identified that may affect IBM Watson CP4D Data Stores. The vulnerability have been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2024-1394 DESCRIPTION:...

CVE-2025-0290 vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips...

CVE-2024-45339 vulnerabilities

Vulnerabilities for packages: portieris, pulumi, sigstore-scaffolding-fips, step-issuer-fips, kube-bench-fips, spark-operator-fips, smarter-device-manager-fips, caddy-fips, flyte, step, pulumi-language-dotnet, amass, spark-operator, flux-image-reflector-controller, opa, grafana-mimir, step-ca-fip...

CVE-2025-0314 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, gitlab-cng-fips...

CVE-2024-11931 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, gitlab-cng-fips...

GHSA-9M5P-C77C-F9J7 vulnerabilities

Vulnerabilities for packages: cilium, hubble-ui-backend-fips, hubble-ui...

CVE-2025-23028 vulnerabilities

Vulnerabilities for packages: cilium, hubble-ui-backend-fips, hubble-ui...

GHSA-M3HP-8546-5QMR vulnerabilities

Vulnerabilities for packages: keycloak...

CVE-2025-0604 vulnerabilities

Vulnerabilities for packages: keycloak-fips...

GHSA-WPFP-CM49-9M9Q vulnerabilities

Vulnerabilities for packages: terraform, opentofu, vault, opentofu-fips...

SUSE CVE-2024-13176

Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation. Impact summary: A timing side-channel in ECDSA signature computations could allow recovering the private key by an attacker. However, measuring the timing would...

AZL-55894 CVE-2024-13176 affecting package edk2 for versions less than 20240524git3e722403cd16-6

Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation. Impact summary: A timing side-channel in ECDSA signature computations could allow recovering the private key by an attacker. However, measuring the timing would...

AZL-78537 CVE-2024-13176 affecting package openssl-fips-provider 3.1.2-1

Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation. Impact summary: A timing side-channel in ECDSA signature computations could allow recovering the private key by an attacker. However, measuring the timing would...

AZL-56010 CVE-2024-13176 affecting package openssl for versions less than 1.1.1k-36

Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation. Impact summary: A timing side-channel in ECDSA signature computations could allow recovering the private key by an attacker. However, measuring the timing would...

DEBIAN-CVE-2024-13176

Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation. Impact summary: A timing side-channel in ECDSA signature computations could allow recovering the private key by an attacker. However, measuring the timing would...

K000149306: OpenSSL vulnerability CVE-2024-4603

Security Advisory Description Issue summary: Checking excessively long DSA keys or parameters may be very slow. Impact summary: Applications that use the functions EVPPKEYparamcheck or EVPPKEYpubliccheck to check a DSA public key or DSA parameters may experience long delays. Where the key or...

CVE-2024-56323 vulnerabilities

Vulnerabilities for packages: grafana, grafana-fips...

CVE-2024-13041 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, gitlab-cng-fips...

CVE-2024-6324 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, gitlab-cng-fips...

CBL Mariner 2.0 Security Update: golang / msft-golang (CVE-2024-9355)

The version of golang / msft-golang installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-9355 advisory. - A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly...