RHSA-2017:0444 Red Hat Security Advisory: rpm-ostree and rpm-ostree-client security, bug fix, and enhancement update

Bulletin has no description...

Fedora: Security Advisory (FEDORA-2024-4afd3d38ae)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2024-589189d414)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-26964 affecting package rpm-ostree for versions less than 2022.1-7

CVE-2023-26964 affecting package rpm-ostree for versions less than 2022.1-7. A patched version of the package is available...

CVE-2021-45707 affecting package rpm-ostree for versions less than 2024.4-1

CVE-2021-45707 affecting package rpm-ostree for versions less than 2024.4-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-23639 affecting package rpm-ostree for versions less than 2024.4-1

CVE-2022-23639 affecting package rpm-ostree for versions less than 2024.4-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-24713 affecting package rpm-ostree for versions less than 2024.4-1

CVE-2022-24713 affecting package rpm-ostree for versions less than 2024.4-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-32715 affecting package rpm-ostree for versions less than 2024.4-1

CVE-2021-32715 affecting package rpm-ostree for versions less than 2024.4-1. An upgraded version of the package is available that resolves this issue...

The vulnerability of the rpm-ostree package allows unauthorized access to authentication data on Red Hat Enterprise Linux and Fedora operating systems.

The vulnerability of the rpm-ostree package in Red Hat Enterprise Linux and Fedora systems is related to the improper assignment of permissions for a critical resource. Exploiting this vulnerability can allow an attacker to gain unauthorized access to authentication data...

CBL Mariner 2.0 Security Update: rust / netavark / kata-containers / rpm-ostree (CVE-2023-22466)

The version of rust / netavark / kata-containers / rpm-ostree installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-22466 advisory. - Tokio is a runtime for writing applications with Rust. Starting with...

CBL Mariner 2.0 Security Update: kata-containers / kata-containers-cc / rpm-ostree (CVE-2024-27308)

The version of kata-containers / kata-containers-cc / rpm-ostree installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-27308 advisory. - Mio is a Metal I/O library for Rust. When using named pipes on...

CBL Mariner 2.0 Security Update: rpm-ostree / ostree (CVE-2022-47085)

The version of rpm-ostree / ostree installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-47085 advisory. - An issue was discovered in ostree before 2022.7 allows attackers to cause a denial of service o...

CBL Mariner 2.0 Security Update: rpm-ostree (CVE-2022-31394)

The version of rpm-ostree installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-31394 advisory. - Hyperium Hyper before 0.14.19 does not allow for customization of the maxheaderlistsize method in the H2...

CBL Mariner 2.0 Security Update: kata-containers / rpm-ostree (CVE-2023-26964)

The version of kata-containers / rpm-ostree installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-26964 advisory. - An issue was discovered in hyper v0.13.7. h2-0.2.4 Stream stacking occurs when the H2...

rpm-ostree bug fix and enhancement update

An update is available for rpm-ostree. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The rpm-ostree tool binds together the RPM packaging model with the OSTree...

ostree bug fix update

An update is available for ostree. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list OSTree is a tool for managing bootable, immutable, versioned file system trees...

rpm-ostree bug fix update

An update is available for rpm-ostree. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The rpm-ostree tool binds together the RPM packaging model with the OSTree...

AlmaLinux 9 : rpm-ostree (ALSA-2024:3823)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:3823 advisory. rpm-ostree: world-readable /etc/shadow file 9.4.z JIRA:AlmaLinux-31852 Tenable has extracted the preceding description block directly from the AlmaLinux security...

rpm-ostree security update

2024.3-3 - Backport https://github.com/coreos/rpm-ostree/security/advisories/GHSA-2m76-cwhg-7wv6 Resolves: RHEL-31852 2024.3-2 - Backport https://github.com/coreos/rpm-ostree/security/advisories/GHSA-2m76-cwhg-7wv6 Resolves: RHEL-31852...

Oracle Linux 9 : rpm-ostree (ELSA-2024-3823)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-3823 advisory. 2024.3-3 - Backport https://github.com/coreos/rpm-ostree/security/advisories/GHSA-2m76-cwhg-7wv6 Resolves: RHEL-31852 2024.3-2 - Backport...