CVE-2023-48795

CVE-2023-48795 is referenced across several connected advisories, detailing affected packages and required upgrades. Astra Linux/CBL-Mariner entries note: podman (<5.6.1-2) needs upgrade, erlang (<25.2-1), libssh2 (<1.11.1-1), libssh (<0.10.6-1), terraform (<1.3.2-25), kubevirt (&l...

CVE-2023-47174

CVE-2023-47174 affects Thorn SFTP gateway 3.4.x up to 3.4.3. The underlying issue is Java deserialization of untrusted data within the embedded Pivotal Spring Framework, which is not supported by Pivotal. This deserialization chain can lead to remote code execution in Thorn SFTP gateway environme...