144034 matches found
Important: Red Hat Security Advisory: Red Hat AI Base Images 3.5.6 (Spyre)
Red Hat AI Base Images 3.5.6 Spyre is now available. Red Hat® AI Base Images...
Important: Red Hat Security Advisory: Red Hat AI Base Images 3.4.7 (ROCm 7.1)
Red Hat AI Base Images 3.4.7 ROCm 7.1 is now available. Red Hat® AI Base Images...
Important: Red Hat Security Advisory: Red Hat AI Base Images 3.5.6 (ROCm 7.14)
Red Hat AI Base Images 3.5.6 ROCm 7.14 is now available. Red Hat® AI Base Images...
Important: Red Hat Security Advisory: Red Hat AI Base Images 3.5.6 (CUDA 13.0)
Red Hat AI Base Images 3.5.6 CUDA 13.0 is now available. Red Hat® AI Base Images...
Important: Red Hat Security Advisory: Red Hat AI Base Images 3.4.7 (CUDA 12.9)
Red Hat AI Base Images 3.4.7 CUDA 12.9 is now available. Red Hat® AI Base Images...
Critical: Red Hat Security Advisory: Red Hat AI Base Images 3.4.7 (CUDA 13.0)
Red Hat AI Base Images 3.4.7 CUDA 13.0 is now available. Red Hat® AI Base Images...
Important: Red Hat Security Advisory: Red Hat AI Base Images 3.5.6 (Rubin)
Red Hat AI Base Images 3.5.6 Rubin is now available. Red Hat® AI Base Images...
Important: Red Hat Security Advisory: Red Hat AI Base Images 3.0.8 (ROCm)
Red Hat AI Base Images 3.0.8 ROCm is now available. Red Hat® AI Base Images...
Important: Red Hat Security Advisory: Red Hat AI Base Images 3.4.7 (ROCm 6.4)
Red Hat AI Base Images 3.4.7 ROCm 6.4 is now available. Red Hat® AI Base Images...
Important: Red Hat Security Advisory: Red Hat AI Base Images 3.4.7 (Gaudi)
Red Hat AI Base Images 3.4.7 Gaudi is now available. Red Hat® AI Base Images...
Important: Red Hat Security Advisory: Red Hat AI Base Images 3.0.8 (Spyre)
Red Hat AI Base Images 3.0.8 Spyre is now available. Red Hat® AI Base Images...
Important: Red Hat Security Advisory: Red Hat AI Base Images 3.5.6 (CPU)
Red Hat AI Base Images 3.5.6 CPU is now available. Red Hat® AI Base Images...
Important: Red Hat Security Advisory: Red Hat AI Base Images 3.4.7 (Spyre)
Red Hat AI Base Images 3.4.7 Spyre is now available. Red Hat® AI Base Images...
Critical: Red Hat Security Advisory: Red Hat AI Base Images 3.0.8 (CPU)
Red Hat AI Base Images 3.0.8 CPU is now available. Red Hat® AI Base Images...
Important: Red Hat Security Advisory: Red Hat AI Base Images 3.5.6 (Gaudi)
Red Hat AI Base Images 3.5.6 Gaudi is now available. Red Hat® AI Base Images...
Important: Red Hat Security Advisory: Red Hat AI Base Images 3.0.8 (TPU)
Red Hat AI Base Images 3.0.8 TPU is now available. Red Hat® AI Base Images...
Important: Red Hat Security Advisory: Red Hat AI Base Images 3.4.7 (CPU)
Red Hat AI Base Images 3.4.7 CPU is now available. Red Hat® AI Base Images...
Important: Red Hat Security Advisory: Red Hat AI Base Images 3.5.6 (TPU)
Red Hat AI Base Images 3.5.6 TPU is now available. Red Hat® AI Base Images...
Important: Red Hat Security Advisory: Red Hat AI Base Images 3.5.6 (Neuron)
Red Hat AI Base Images 3.5.6 Neuron is now available. Red Hat® AI Base Images...
Important: Red Hat Security Advisory: Red Hat AI Base Images 3.4.7 (TPU)
Red Hat AI Base Images 3.4.7 TPU is now available. Red Hat® AI Base Images...
Important: Red Hat Security Advisory: Red Hat AI Base Images 3.4.7 (Neuron)
Red Hat AI Base Images 3.4.7 Neuron is now available. Red Hat® AI Base Images...
python: Use-after-free of a server-side SSLContext when sni_callback switches contexts
A flaw was found in Python. A remote, unauthenticated TLS client can cause a use-after-free in a server that uses SSLContext.snicallback to assign a different SSLSocket.context when selecting a certificate per server name, if nothing else keeps the original SSLContext alive. This can crash the...
python: python: Certificate verification bypass via missing server_hostname validation in SSLContext.wrap_bio()
A flaw was found in Python. When establishing secure connections using the SSLContext.wrapbio function with hostname checking enabled, the module fails to validate that a target server hostname is supplied. Because of this missing check, certificate hostname verification is silently skipped rathe...
Important: Red Hat Security Advisory: python3 security update
An update for python3 is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabili...
pipewire: Pulse Server alloca Stack Overflow
Multiple unbounded alloca calls in the PulseAudio protocol server...
pipewire: RAOP RTSP NULL Deref
RAOP module accepts unbounded Content-Length values and does not check the pwarrayadd return...
Moderate: Red Hat Security Advisory: pipewire security update
An update for pipewire is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
Moderate: Red Hat Security Advisory: pipewire security update
An update for pipewire is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
gnutls: gnutls: Certificate validation bypass due to improper handling of URI and SRV SANs
A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that contains Uniform Resource Identifier URI or Service SRV Subject Alternative Names SANs. This could cause the certificate validation process to incorrectly fall back to...
pipewire: RAOP RTSP NULL Deref
RAOP module accepts unbounded Content-Length values and does not check the pwarrayadd return...
Moderate: Red Hat Security Advisory: gnutls security update
An update for gnutls is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
pipewire: Pulse Server alloca Stack Overflow
Multiple unbounded alloca calls in the PulseAudio protocol server...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.21 bug fix and security update
Red Hat OpenShift Container Platform release 4.22.21 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.45 bug fix and security update
Red Hat OpenShift Container Platform release 4.20.45 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.41 bug fix and security update
Red Hat OpenShift Container Platform release 4.21.41 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a...
kernel: ipv4: free inet_opt and ireq_opt after an RCU grace period
A flaw was found in the Linux kernel's IPv4 networking subsystem. A race condition occurs during concurrent processing of retransmitted Transmission Control Protocol TCP connection requests or socket migrations, allowing socket options to be freed while still in use. A remote attacker could explo...
Critical: Red Hat Security Advisory: kernel security update
An update for kernel is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring Syste...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.41 security and extras update
Red Hat OpenShift Container Platform release 4.21.41 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a security impact of...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.21 security and extras update
Red Hat OpenShift Container Platform release 4.22.21 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a security impact of...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.45 security and extras update
Red Hat OpenShift Container Platform release 4.20.45 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a security impact of...
bind: bind9: Cache poisoning via label count discrepancy, RRSIG, wildcards
It is possible for an attacker's zone to respond to a query with an RRSIG that has a smaller number of labels than the zone in which the RRSIG is contained. This causes named to produce a wildcard name for a zone that is shorter than the attacker's zone, which can result in cache poisoning. For...
bind: BIND: Denial of Service via specially crafted DNS messages
A flaw was found in the bind component, specifically within the named daemon. This vulnerability allows a remote attacker to send specially crafted Domain Name System DNS messages. These messages, which use unusual classes or meta-classes, can trigger assertion failures in the named daemon when...
bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field
The BIND resolver accepts validly-signed NSEC records where the "Next Domain Name" field points outside the signer's zone...
bind: BIND 9: Remote Denial of Service via cached SVCB/HTTPS AliasMode records
A flaw was found in BIND 9. A remote attacker can exploit this vulnerability by querying a BIND resolver for the root of a specially crafted, cached tree of SVCB/HTTPS AliasMode records. This action causes the resolver to spend a disproportionate amount of CPU time constructing the response,...
bind: bind: Denial of service via assertion failure in RPZ query processing
A flaw was found in BIND. A remote attacker can cause a denial of service DoS by sending a sequence of recursive and non-recursive queries to an affected server. When BIND is configured to handle recursive queries alongside multiple Response Policy Zones RPZ with differing recursion settings,...
bind: BIND: Denial of Service via malformed DNS64 responses
A flaw was found in BIND. When a resolver is configured to use DNS64, a specially crafted, malformed answer from an authoritative server can cause the named process to exit unexpectedly. This can lead to a Denial of Service DoS for clients relying on the affected resolver...
bind: bind: Arbitrary code execution via GSS-TSIG UDP message replay
A flaw was found in BIND. This vulnerability may allow a remote attacker to achieve arbitrary code execution on the target server. An attacker who captures a valid User Datagram Protocol UDP message signed with Generic Security Service Transaction Signature GSS-TSIG can replay it while the...
bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation
A flaw was found in BIND. A remote attacker can exploit this vulnerability by sending maliciously-constructed packets to BIND servers configured for TKEY-based authentication via GSS-API Generic Security Service Application Program Interface tokens. This can lead to excessive memory consumption,...
bind: bind9: Incorrect acceptance of NSEC3 records
BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge authenticated NXDOMAIN responses...
Important: Red Hat Security Advisory: bind9.18 security, bug fix, and enhancement update
An update for bind9.18 is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...