Important: Red Hat Security Advisory: OpenShift Container Platform 4.13.67 bug fix and security update

Red Hat OpenShift Container Platform release 4.13.67 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.15.58 bug fix and security update

Red Hat OpenShift Container Platform release 4.15.58 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.15. Red Hat Product Security has rated this update as having a...

Fedora 40 : imagej (2024-a966a6485e)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-a966a6485e advisory. Update to 1.54i close RHBZ2267596: assorted bugfixes Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

Fedora 38 : emacs (2024-53b69fdd40)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-53b69fdd40 advisory. New upstream release 29.3, fixes rhbz2271287 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Ness...

python-cryptography security update

36.0.1-4.0.1 - Fix CVE-2023-49083: NULL-dereference when loading PKCS7 certificates Orabug: 36119159 36.0.1-4 - Fix FTBFS caused by rsapkcs1implicitrejection OpenSSL feature, resolves rhbz2203840 36.0.1-3 - Fix CVE-2023-23931: Don't allow updateinto to mutate immutable objects, resolves rhbz21723...

CVE-2022-3466

The version of cri-o as released for Red Hat OpenShift Container Platform 4.9.48, 4.10.31, and 4.11.6 via RHBA-2022:6316, RHBA-2022:6257, and RHBA-2022:6658, respectively, included an incorrect version of cri-o missing the fix for CVE-2022-27652, which was previously fixed in OCP 4.9.41 and 4.10....

CVE-2022-3466

CVE-2022-3466 refers to an issue in Red Hat OpenShift Container Platform where the RHCOS/OpenShift package updates shipped with 4.9.48, 4.10.31, and 4.11.6 contained an incorrect cri-o version that did not include the fix for CVE-2022-27652. The vulnerability could allow an attacker with access t...

CVE-2022-3466 Cri-o: security regression of cve-2022-27652

The version of cri-o as released for Red Hat OpenShift Container Platform 4.9.48, 4.10.31, and 4.11.6 via RHBA-2022:6316, RHBA-2022:6257, and RHBA-2022:6658, respectively, included an incorrect version of cri-o missing the fix for CVE-2022-27652, which was previously fixed in OCP 4.9.41 and 4.10....

Oracle Linux 9 : pcs (ELSA-2023-12595)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12595 advisory. 0.11.4-7 - Fix displaying differences between configuration checkpoints in pcs config checkpoint diff command - Fix pcs stonith update-scsi-devices...

CVE-2023-2319

It was discovered that an update for PCS package in RHBA-2023:2151 erratum released as part of Red Hat Enterprise Linux 9.2 failed to include the fix for the Webpack issue CVE-2023-28154 for PCS package, which was previously addressed in Red Hat Enterprise Linux 9.1 via erratum RHSA-2023:1591. Th...

Code injection

It was discovered that an update for PCS package in RHBA-2023:2151 erratum released as part of Red Hat Enterprise Linux 9.2 failed to include the fix for the Webpack issue CVE-2023-28154 for PCS package, which was previously addressed in Red Hat Enterprise Linux 9.1 via erratum RHSA-2023:1591. Th...

CVE-2023-2319

CVE-2023-28154 (Webpack ImportParserPlugin.js mishandling) is confirmed across multiple IBM and Red Hat related advisories in connected documents. The vulnerability could allow a remote attacker to bypass security restrictions or access the real global object. Concrete affected contexts include I...

CVE-2022-3466

The version of cri-o as released for Red Hat OpenShift Container Platform 4.9.48, 4.10.31, and 4.11.6 via RHBA-2022:6316, RHBA-2022:6257, and RHBA-2022:6658, respectively, included an incorrect version of cri-o missing the fix for CVE-2022-27652, which was previously fixed in OCP 4.9.41 and 4.10....

Important: fapolicyd bug fix update

The fapolicyd software framework introduces a form of file access control based on a user-defined policy. The application file access control feature provides one of the most efficient ways to prevent running untrusted and possibly malicious applications on the system. Bug Fixes: When an update...

Virtuozzo Linux Errata and Bugfix Advisory 2020:5015

Upstream security update. Follow RHBA-2020:5015 for details...

Virtuozzo Linux Errata and Bugfix Advisory 2020:5049

Upstream security update. Follow RHBA-2020:5049 for details...

Virtuozzo Linux Errata and Bugfix Advisory 2020:5005

Upstream security update. Follow RHBA-2020:5005 for details...

Virtuozzo Linux Errata and Bugfix Advisory 2020:5047

Upstream security update. Follow RHBA-2020:5047 for details...

Virtuozzo Linux Errata and Bugfix Advisory 2020:5016

Upstream security update. Follow RHBA-2020:5016 for details...

Virtuozzo Linux Errata and Bugfix Advisory 2020:5048

Upstream security update. Follow RHBA-2020:5048 for details...