Ubuntu 18.04 LTS : OpenSSL vulnerabilities (USN-6709-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6709-1 advisory. It was discovered that checking excessively long DH keys or parameters may be very slow. A remote attacker could possibly use this issue to cause OpenSSL...

EulerOS Virtualization 2.11.1 : shim (EulerOS-SA-2024-1421)

According to the versions of the shim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tri...

EulerOS Virtualization 2.9.1 : openssl (EulerOS-SA-2024-1461)

According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Issue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very...

EulerOS Virtualization 2.9.1 : shim (EulerOS-SA-2024-1462)

According to the versions of the shim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Issue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow...

EulerOS Virtualization 2.9.0 : shim (EulerOS-SA-2024-1477)

According to the versions of the shim package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Issue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow...

EulerOS Virtualization 2.11.1 : openssl (EulerOS-SA-2024-1417)

According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Issue summary: The POLY1305 MAC message authentication code implementation contains a bug that might corrupt the internal state ...

CVE-2024-29018 vulnerabilities

Vulnerabilities for packages: buildkitd, zot, docker-compose, tkn, aactl, spire-server, conftest, cilium-cli, buf, kubescape, up, conftest-fips, melange, ctop, spire-server-fips, crossplane, kargo, wolfictl, kaniko, cadvisor-fips, syft, prometheus, cadvisor, dagger, loki, trivy, ko, grype...

openssh security update

7.4p1-23.0.3fips - Change Epoch from 1 to 10 - Enable fips KDF POST Orabug: 32461750 - Disable diffie-hellman-group-exchange-sha256 KEX FIPS method Orabug: 32461739 7.4p1-23.0.3 - add KEXINITIAL flag Orabug: 36160445 - implement 'strict key exchange' CVE-2023-48795Orabug: 36160445...

CVE-2024-28249 vulnerabilities

Vulnerabilities for packages: hubble-ui, hubble-ui-backend-fips...

GHSA-V6Q2-4QR3-5CW6 vulnerabilities

Vulnerabilities for packages: hubble-ui, hubble-ui-backend-fips...

GHSA-J89H-QRVR-XC36 vulnerabilities

Vulnerabilities for packages: hubble-ui, hubble-ui-backend-fips...

GHSA-68MJ-9PJQ-MC85 vulnerabilities

Vulnerabilities for packages: hubble-ui, hubble-ui-backend-fips...

GHSA-2VGG-9H6W-M454 vulnerabilities

Vulnerabilities for packages: argo-cd, argo-cd-fips...

CVE-2024-21662 vulnerabilities

Vulnerabilities for packages: argo-cd, argo-cd-fips...

openssh security update

7.4p1-23.0.3fips - Change Epoch from 1 to 10 - Enable fips KDF POST Orabug: 32461750 - Disable diffie-hellman-group-exchange-sha256 KEX FIPS method Orabug: 32461739 7.4p1-23.0.3 - add KEXINITIAL flag Orabug: 36160445 - implement 'strict key exchange' CVE-2023-48795Orabug: 36160445...

GHSA-JWV5-8MQV-G387 vulnerabilities

Vulnerabilities for packages: argo-cd, argo-cd-fips...

EulerOS Virtualization 2.10.0 : openssl (EulerOS-SA-2024-1387)

According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Issue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very...

EulerOS Virtualization 2.10.1 : shim (EulerOS-SA-2024-1371)

According to the versions of the shim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Issue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow...

EulerOS Virtualization 2.10.0 : shim (EulerOS-SA-2024-1392)

According to the versions of the shim package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Issue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow...

SUSE SLES15: libopenssl-1_1-devel / libopenssl-1_1-devel-32bit / libopenssl1_1 / etc (SUSE-SU-2024:0832-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0832-1 advisory. - CVE-2024-0727: Denial of service when processing a maliciously formatted PKCS12 file bsc1219243. Tenable has extracted the preceding...