Rocky Linux 8 : container-tools:rhel8 (RLSA-2024:3254)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:3254 advisory. buildah: full container escape at build time CVE-2024-1753 golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters...

CGA-P3W2-7JG8-HQRQ

Bulletin has no description...

Security Bulletin: IBM® Db2® NSE (Net Search Extender) is affected by a vulnerability in the open source Expat library. (CVE-2024-28757)

Summary IBM® Db2® NSE Net Search Extender is affected by a vulnerability in the open source Expat library. Vulnerability Details CVEID:CVE-2024-28757 DESCRIPTION: libexpat could allow a remote attacker to obtain sensitive information, caused by improper handling of XML external entity XXE...

CVE-2024-5742

A vulnerability was found in GNU Nano that allows a possible privilege escalation through an insecure temporary file. If Nano is killed while editing, a file it saves to an emergency file with the permissions of the running user provides a window of opportunity for attackers to escalate privilege...

CGA-2FQ6-P83Q-PM8X

Bulletin has no description...

CGA-979W-8Q4F-99C4

Bulletin has no description...

CGA-XG52-C7JP-QWQR

Bulletin has no description...

CGA-X65Q-F85X-F2CF

Bulletin has no description...

CGA-WHVJ-J3X7-6CWH

Bulletin has no description...

CGA-W5X6-GR2G-63F7

Bulletin has no description...

CGA-QH5M-P3CQ-84W2

Bulletin has no description...

CGA-QHJ5-83FH-MQ73

Bulletin has no description...

CGA-Q83J-J7X8-F2W9

Bulletin has no description...

CGA-P57P-9876-69WF

Bulletin has no description...

CGA-MP3V-HHVH-F5Q3

Bulletin has no description...

CGA-M33M-H78C-JF35

Bulletin has no description...

CGA-JR93-HJMC-JQ78

Bulletin has no description...

CGA-JP8X-P2PF-PCP2

Bulletin has no description...

CGA-FGH7-PHH7-CJ6X

Bulletin has no description...

CGA-X25G-GP3C-5PHC

Bulletin has no description...