Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a memory corruption that occurs when an IOCTL call is invoked from user space to verify FIPS encryption or decryption functionality...

GHSA-WXCC-2F3Q-4H58 vulnerabilities

Vulnerabilities for packages: grafana, grafana-fips...

CVE-2024-11741 vulnerabilities

Vulnerabilities for packages: grafana, grafana-fips...

SUSE SLES15 Security Update : podman (SUSE-SU-2025:0267-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0267-1 advisory. - CVE-2024-9676: github.com/containers/storage: Fixed symlink traversal vulnerability in the containers/storage library can cause...

Security Bulletin:cryptography-42.0.7-cp39-abi3-manylinux_2_28_x86_64.whl Vulnerability Affects IBM Data Observability by Databand (CVE-2024-6119)

Summary A vulnerability in cryptography-42.0.7-cp39-abi3-manylinux228x8664.whl was addressed in IBM Data Observability by Databand Vulnerability Details CVEID:CVE-2024-6119 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by an error when performing certificate name checks e.g.,...

Security Bulletin: IBM Watson CP4D Data Stores is vulnerable to Golang golang-fips/openssl denial of service vulnerabilitiy( CVE-2024-1394 )

Summary Potential Golang golang-fips/openssl denial of service vulnerabilitiy CVE-2024-1394 has been identified that may affect IBM Watson CP4D Data Stores. The vulnerability have been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2024-1394 DESCRIPTION:...

CVE-2025-0290 vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips...

CVE-2024-45339 vulnerabilities

Vulnerabilities for packages: opa, caddy, pulumi-kubernetes-operator, step-ca, step-issuer-fips, pulumi-language-yaml, nfs-subdir-external-provisioner, smarter-device-manager-fips, portieris, sriov-network-device-plugin-fips, flux-image-reflector-controller-fips, smarter-device-manager,...

CVE-2025-0314 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, gitlab-cng-fips...

CVE-2024-11931 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, gitlab-cng-fips...

GHSA-9M5P-C77C-F9J7 vulnerabilities

Vulnerabilities for packages: hubble-ui-backend-fips, cilium, hubble-ui...

CVE-2025-23028 vulnerabilities

Vulnerabilities for packages: hubble-ui-backend-fips, cilium, hubble-ui...

GHSA-M3HP-8546-5QMR vulnerabilities

Vulnerabilities for packages: keycloak...

CVE-2025-0604 vulnerabilities

Vulnerabilities for packages: keycloak-fips...

GHSA-WPFP-CM49-9M9Q vulnerabilities

Vulnerabilities for packages: terraform, vault, opentofu, opentofu-fips...

SUSE CVE-2024-13176

Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation. Impact summary: A timing side-channel in ECDSA signature computations could allow recovering the private key by an attacker. However, measuring the timing would...

AZL-78537 CVE-2024-13176 affecting package openssl-fips-provider 3.1.2-1

Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation. Impact summary: A timing side-channel in ECDSA signature computations could allow recovering the private key by an attacker. However, measuring the timing would...

AZL-55894 CVE-2024-13176 affecting package edk2 for versions less than 20240524git3e722403cd16-6

Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation. Impact summary: A timing side-channel in ECDSA signature computations could allow recovering the private key by an attacker. However, measuring the timing would...

DEBIAN-CVE-2024-13176

Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation. Impact summary: A timing side-channel in ECDSA signature computations could allow recovering the private key by an attacker. However, measuring the timing would...

AZL-56010 CVE-2024-13176 affecting package openssl for versions less than 1.1.1k-36

Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation. Impact summary: A timing side-channel in ECDSA signature computations could allow recovering the private key by an attacker. However, measuring the timing would...