5478 matches found
The FIPS Compliance of HKDF
HKDF is an HMAC-based key-derivation function specified in RFC 5869. It’s nice and we generally like using it. FIPS Federal Information Processing Standards is used generally as a moniker for the set of standards, recommendations, and guidance published by the U.S. National Institute of Standards...
EulerOS 2.0 SP8 : shim (EulerOS-SA-2024-2489)
According to the versions of the shim package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service attack Impact summar...
openssl security update
3.0.7-28.0.1 - Drop OpenELA branding, apply Oracle branding patches - Enable openssl-fips-provider dependency Orabug: 36504822 - Temporary disable openssl-fips-provider dependency Orabug: 36504822 - Replace upstream references Orabug: 34340177 1:3.0.7-28 - Patch for CVE-2024-6119 Resolves:...
Oracle Linux 9 : openssl (ELSA-2024-12675)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-12675 advisory. 3.0.7-28.0.1fips - Replace upstream references in fips man pages Orabug: 35824276 - Add FIPS package change: add fips suffix to Release and set Epoch to 10...
openssl security update
3.0.7-28.0.1 - Drop OpenELA branding, apply Oracle branding patches - Enable openssl-fips-provider dependency Orabug: 36504822 - Temporary disable openssl-fips-provider dependency Orabug: 36504822 - Replace upstream references Orabug: 34340177 1:3.0.7-28 - Patch for CVE-2024-6119 Resolves:...
openssl security update
3.0.7-28.0.1fips - Replace upstream references in fips man pages Orabug: 35824276 - Add FIPS package change: add fips suffix to Release and set Epoch to 10 Orabug: 35824276 - Update FIPS module name and remove upstream references from fipsmoduleindicators manpage Orabug: 35824276 3.0.7-28.0.1 -...
Google Chrome Switches to ML-KEM for Post-Quantum Cryptography Defense
Google has announced that it will be switching from KYBER to ML-KEM in its Chrome web browser as part of its ongoing efforts to defend against the risk posed by cryptographically relevant quantum computers CRQCs. "Chrome will offer a key share prediction for hybrid ML-KEM codepoint 0x11EC," David...
nss bug fix and enhancement update
An update is available for nss. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Network Security Services NSS is a set of libraries designed to support the...
nss bug fix and enhancement update
An update is available for nss. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Network Security Services NSS is a set of libraries designed to support the...
RHSA-2024:2447 Red Hat Security Advisory: openssl and openssl-fips-provider security update
Bulletin has no description...
Moderate: Red Hat Bug Fix Advisory: nss bug fix and enhancement update
An update for nss is now available for Red Hat Enterprise Linux 9.2 Extended Update Support and Red Hat Enterprise Linux 9. Network Security Services NSS is a set of libraries designed to support the cross-platform development of security-enabled client and server applications. Bug Fixes and...
Moderate: Red Hat Bug Fix Advisory: nss bug fix and enhancement update
An update for nss is now available for Red Hat Enterprise Linux 8.8 Extended Update Support and Red Hat Enterprise Linux 8. Network Security Services NSS is a set of libraries designed to support the cross-platform development of security-enabled client and server applications. Bug Fixes and...
[SECURITY] Fedora 40 Update: wolfssl-5.7.2-2.fc40
The wolfSSL embedded SSL library formerly CyaSSL is a lightweight SSL/TLS library written in ANSI C and targeted for embedded, RTOS, and resource-constrained environments - primarily because of its small size, speed, and feature set. It is commonly used in standard operating environments as well...
GHSA-CVP8-5R8G-FHVQ vulnerabilities
Vulnerabilities for packages: gitlab-rails-ee-fips, gitlab-rails-ee...
CVE-2024-7341 vulnerabilities
Vulnerabilities for packages: keycloak-fips...
CVE-2024-45296 vulnerabilities
Vulnerabilities for packages: kubeflow-centraldashboard, argo-workflows, opensearch-dashboards, arangodb, thingsboard, sqlpad, kubeflow-pipelines, opensearch-dashboards-fips...
CVE-2024-34156 vulnerabilities
Vulnerabilities for packages: sonobuoy, hubble-fips, kyverno-policy-reporter-ui, go-bindata, mailpit, metrics-server-fips, flux-image-automation-controller-fips, mkcert, dockerize-fips, prometheus-node-exporter, kubernetes-ingress-defaultbackend-fips, victoriametrics-operator-fips, go-md2man,...
CVE-2024-34158 vulnerabilities
Vulnerabilities for packages: sonobuoy, hubble-fips, kyverno-policy-reporter-ui, go-bindata, mailpit, metrics-server-fips, flux-image-automation-controller-fips, mkcert, dockerize-fips, prometheus-node-exporter, kubernetes-ingress-defaultbackend-fips, victoriametrics-operator-fips, go-md2man,...
openSUSE Security Advisory (SUSE-SU-2024:3106-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...