PT-2026-4942

Name of the Vulnerable Software and Affected Versions OpenSSL versions 3.3 through 3.6 Description A flaw exists in OpenSSL where the SSL CIPHER find function, when used in a QUIC protocol client or server, can experience a NULL pointer dereference if it receives an unknown cipher suite from its...

PT-2026-4948

Name of the Vulnerable Software and Affected Versions OpenSSL versions 1.1.1 through 3.6 OpenSSL version 1.0.2 is not affected Description The issue relates to the handling of non-block-aligned input lengths when using the low-level OCB API directly with AES-NI or other hardware-accelerated code...

PT-2026-4940

Name of the Vulnerable Software and Affected Versions OpenSSL versions 3.4.0 through 3.6.0 Description The vulnerability relates to improper validation of PBMAC1 parameters within PKCS12 files. Specifically, the PBKDF2 salt and keylength parameters are used without sufficient validation during MA...

GHSA-32GQ-X56H-299C vulnerabilities

Vulnerabilities for packages: chezmoi, ksops, litestream, flux-kustomize-controller-fips, flux-kustomize-controller, grafana-fips, grafana, age, age-fips, sops, sops-fips...

CVE-2024-8650 vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips...

CVE-2024-8116 vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips...

SUSE SLES15 Security Update : buildah (SUSE-SU-2024:4303-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:4303-1 advisory. Security issues fixed: - CVE-2024-9675: cache arbitrary directory mount bsc1231499 - CVE-2024-9407: Improper Input Validation in...

SUSE-SU-2024:4303-1 Security update for buildah

This update for buildah fixes the following issues: Security issues fixed: - CVE-2024-9675: cache arbitrary directory mount bsc1231499 - CVE-2024-9407: Improper Input Validation in bind-propagation Option of Dockerfile RUN --mount Instruction bsc1231208 - CVE-2024-9676: symlink traversal...

CVE-2024-9367 vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips...

CVE-2024-9387 vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips...

CVE-2024-8647 vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips...

CVE-2024-12570 vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips...

CVE-2024-12292 vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips...

CVE-2024-11274 vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips...

GHSA-CXRX-Q234-M22M vulnerabilities

Vulnerabilities for packages: keycloak, apicurio-registry...

CVE-2024-12397 vulnerabilities

Vulnerabilities for packages: keycloak, apicurio-registry...

CVE-2024-45337 vulnerabilities

Vulnerabilities for packages: kube-state-metrics-fips, grafana-agent-operator, gptscript, azcopy, timestamp-authority-fips, vault-benchmark, go-discover, buildkitd-fips, actions-runner-controller-fips, kube-state-metrics, haproxy-ingress, kaniko, kube-vip, grafana-fips,...

GHSA-V778-237X-GJRC vulnerabilities

Vulnerabilities for packages: kube-state-metrics-fips, grafana-agent-operator, gptscript, azcopy, timestamp-authority-fips, vault-benchmark, go-discover, buildkitd-fips, actions-runner-controller-fips, kube-state-metrics, haproxy-ingress, kaniko, kube-vip, grafana-fips,...

ruby security update

3.0.7-163 - Fix REXML ReDoS vulnerability. CVE-2024-49761 Resolves: rbhz2322153 3.0.7-162 - Upgrade to Ruby 3.0.7. Resolves: RHEL-35740 - Fix HTTP response splitting in CGI. Resolves: RHEL-35741 - Fix ReDoS vulnerability in URI. Resolves: RHEL-35742 - Fix ReDoS vulnerability in Time. Resolves:...

ruby:3.1 security update

ruby 3.1.5-145 - Fix REXML ReDoS vulnerability. CVE-2024-49761 Resolves: RHEL-68530 3.1.5-144 - Upgrade to Ruby 3.1.5. Resolves: RHEL-33978 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34129 - Fix RCE vulnerability with .rdocoptions in RDoc. Resolves: RHEL-34121 - Fix arbitrary...