crossplane 输入验证错误漏洞

crossplane is a framework for building cloud-native control planes without writing code. An input validation error vulnerability exists in Crossplane versions prior to 1.11.5, 1.12.3, and 1.13.0, which stems from a mirroring backend that does not validate the byte content of Crossplane packages,...

CVE-2023-37198

A CWE-94: Improper Control of Generation of Code 'Code Injection' vulnerability exists that could cause remote code execution when an admin user on DCE uploads or tampers with install packages...

DEBIAN-CVE-2011-1829

APT before 0.8.15.2 does not properly validate inline GPG signatures, which allows man-in-the-middle attackers to install modified packages via vectors involving lack of an initial clearsigned message...

openssh security update

CentOS Errata and Security Advisory CESA-2008:0855 Updated openssh packages are now available for Red Hat Enterprise Linux 4, Red Hat Enterprise Linux 5, and Red Hat Enterprise Linux 4.5 Extended Update Support. This update has been rated as having critical security impact by the Red Hat Security...