Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift ausnutzen, um einen Denial of Service Zustand herbeizuführen, Informationen offenzulegen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.
Product
Red Hat OpenShift ist eine "Platform as a Service" (PaaS) Lösung zur Bereitstellung von Applikationen in der Cloud.
Vulnerabilities 93
-
Critical 9.8
A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability ca…
-
Critical 9.8
zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip heade…
-
Critical 9.8
Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.
-
Critical 9.8
GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file,…
-
Critical 9.1
Insufficient randomness in github.com/Masterminds/goutils
Randomly-generated alphanumeric strings contain significantly less entropy than expected. The RandomAlphaNumeric and CryptoRandomAlphaNumeric functions always return strings containing at least one digit from 0 to 9. This significantly reduces the amount of e…
-
Critical 9.1
HashiCorp Vault Incorrect Permission Assignment for Critical Resource
HashiCorp Vault and Vault Enterprise 0.11.0 up to 1.7.5 and 1.8.4 templated ACL policies would always match the first-created entity alias if multiple entity aliases exist for a specified entity and mount combination, potentially resulting in incorrect policy…
-
Critical 9.1
GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.
-
High 8.8
An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's ch…
-
High 8.8
PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to …
-
High 8.2
Authentication Bypass by Spoofing and Insufficient Verification of Data Authenticity in Hashicorp Vault
HashiCorp Vault and Vault Enterprise versions 0.7.1 and newer, when configured with the AWS IAM auth method, may be vulnerable to authentication bypass. Fixed in 1.2.5, 1.3.8, 1.4.4, and 1.5.1..
-
High 8.2
HashiCorp Vault Authentication bypass
HashiCorp Vault and Vault Enterprise versions 0.8.3 and newer, when configured with the GCP GCE auth method, may be vulnerable to authentication bypass. Fixed in 1.2.5, 1.3.8, 1.4.4, and 1.5.1.
-
High 8.1CVE-2022-24903 Public exploit
Buffer overflow in TCP syslog server (receiver) components in rsyslog
Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buffer overflow when octet-counted framing is used. This can result in a segfault or some other malfunction. As of our understanding, this vulnerability…
-
High 7.8CVE-2015-20107 Public exploit
In Python (aka CPython) up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the…
-
High 7.8
An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and p…
-
High 7.8
A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform. This issue m…
-
High 7.8
An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, …
-
High 7.8
Python 3.9.x before 3.9.16 and 3.10.x before 3.10.9 on Linux allows local privilege escalation in a non-default configu…
-
High 7.8
A null pointer dereference issue was discovered in function gui_x11_create_blank_mouse in gui_x11.c in vim 8.1.2269 thr…
-
High 7.8
An issue was discovered in GNU Emacs through 28.2. htmlfontify.el has a command injection vulnerability. In the hfy-ist…
-
High 7.8
In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environme…
-
High 7.8
A flaw was found in the Emacs text editor. Processing a specially crafted org-mode code with the "org-babel-execute:lat…
-
High 7.5
Nokogiri affected by zlib's Out-of-bounds Write vulnerability
zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.
-
High 7.5
Inefficient Regular Expression Complexity in chalk/ansi-regex
ansi-regex is vulnerable to Inefficient Regular Expression Complexity
-
High 7.5
In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc becaus…
-
High 7.5
A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification o…
-
High 7.5
golang.org/x/net/http2 Denial of Service vulnerability
In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error.
-
High 7.5
Stack exhaustion when decoding certain messages in encoding/gob
Uncontrolled recursion in Decoder.Decode in encoding/gob before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a message which contains deeply nested structures.
-
High 7.5CVE-2022-3094 EPSS 13%
An UPDATE message flood may cause named to exhaust all available memory
Sending a flood of dynamic DNS updates may cause `named` to allocate large amounts of memory. This, in turn, may cause `named` to exit due to a lack of free memory. We are not aware of any cases where this has been exploited. Memory is allocated prior to the …
-
High 7.5
Inefficient Regular Expression Complexity in moment
moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. Affected versions of moment were found to use an inefficient parsing algorithm. Specifically using string-to-date parsing in moment (more specifically rfc2822 par…
-
High 7.5CVE-2022-3358 Public exploit
Using a Custom Cipher with NID_undef may lead to NULL encryption
OpenSSL supports creating a custom cipher via the legacy EVP_CIPHER_meth_new() function and associated function calls. This function was deprecated in OpenSSL 3.0 and application authors are instead encouraged to use the new provider mechanism in order to imp…
-
High 7.5
minimatch ReDoS vulnerability
A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service (ReDoS) when calling the braceExpand function with specific arguments, resulting in a Denial of Service.
-
High 7.5
`libsqlite3-sys` via C SQLite improperly validates array index
SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API.
-
High 7.5CVE-2022-3736 EPSS 48%
named configured to answer from stale cache may terminate unexpectedly while processing RRSIG queries
BIND 9 resolver can crash when stale cache and stale answers are enabled, option `stale-answer-client-timeout` is set to a positive integer, and the resolver receives an RRSIG query. This issue affects BIND 9 versions 9.16.12 through 9.16.36, 9.18.0 through 9…
-
High 7.5
HashiCorp Consul Template could reveal Vault secret contents in error messages
HashiCorp Consul Template up to 0.27.2, 0.28.2, and 0.29.1 may expose the contents of Vault secrets in the error returned by the *template.Template.Execute method, when given a template using Vault secret contents incorrectly. Fixed in 0.27.3, 0.28.3, and 0.2…
-
High 7.5CVE-2022-38900 EPSS 23%
decode-uri-component vulnerable to Denial of Service (DoS)
decode-uri-component 0.2.0 is vulnerable to Improper Input Validation resulting in DoS.
-
High 7.5CVE-2022-3924 EPSS 16%
named configured to answer from stale cache may terminate unexpectedly at recursive-clients soft quota
This issue can affect BIND 9 resolvers with `stale-answer-enable yes;` that also make use of the option `stale-answer-client-timeout`, configured with a value greater than zero. If the resolver receives many queries that require recursion, there will be a cor…
-
High 7.5
mako is vulnerable to Regular Expression Denial of Service
Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin.
-
High 7.5CVE-2022-40303 EPSS 41%
An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE pa…
-
High 7.5
Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net
A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests.
-
High 7.5CVE-2022-43680 Public exploit
In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEnt…
-
High 7.5
An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one path when processing …
-
High 7.5
An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by suppl…
-
High 7.4
A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This side-channel can…
-
High 7.3
An issue was discovered in GNU Emacs through 28.2. In ruby-mode.el, the ruby-find-library-file function has a local com…
-
High 7.1CVE-2022-46175 Public exploit
Prototype Pollution in JSON5 via Parse Method
JSON5 is an extension to the popular JSON file format that aims to be easier to write and maintain by hand (e.g. for config files). The `parse` method of the JSON5 library before and including versions 1.0.1 and 2.2.1 does not restrict parsing of keys named `…
-
Medium 6.6CVE-2020-17049 EPSS 14%
Kerberos KDC Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists in the way Key Distribution Center (KDC) determines if a service ticket can be used for delegation via Kerberos Constrained Delegation (KCD). To exploit the vulnerability, a compromised service that is configured…
-
Medium 6.5
Python 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no protection against multip…
-
Medium 6.5
A vulnerability was found in logrotate in how the state file is created. The state file is used to prevent parallel exe…
-
Medium 6.5
An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenti…
-
Medium 6.5
An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenti…
-
Medium 6.5
An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenti…
-
Medium 6.5
Vault Vulnerable to SQL Injection When Configuring the Microsoft SQL Database Storage Backend
HashiCorp Vault and Vault Enterprise versions 0.8.0 through 1.13.1 are vulnerable to an SQL injection attack when configuring the Microsoft SQL (MSSQL) Database Storage Backend. When configuring the MSSQL plugin through the local, certain parameters are not s…
-
Medium 6.5
Vault PKI Issuer Endpoint Did Not Correctly Authorize Access to Issuer Metadata
HashiCorp Vault's PKI mount issuer endpoints did not correctly authorize access to remove an issuer or modify issuer metadata, potentially resulting in denial of service of the PKI mount. This bug did not affect public or private key material, trust chains or…
-
Medium 6.4
jsonwebtoken vulnerable to signature validation bypass due to insecure default algorithm in jwt.verify()
In versions `<=8.5.1` of `jsonwebtoken` library, lack of algorithm definition in the `jwt.verify()` function can lead to signature validation bypass due to defaulting to the `none` algorithm for signature verification. Users are affected if you do not specify…
-
Medium 6.2
A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int("text")…
-
Medium 5.9
pypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS)
Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.
-
Medium 5.5
Denial of service in gopkg.in/yaml.v2
Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of service vector.
-
Medium 5.5
An off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c. An attacker could sup…
-
Medium 5.5
A vulnerability was found in systemd. This security flaw can cause a local information leak due to systemd-coredump not…
-
Medium 5.5
systemd 250 and 251 allows local users to achieve a systemd-coredump deadlock by triggering a crash that has a long bac…
-
Medium 5.5
GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional ju…
-
Medium 5.3
Inefficient Regular Expression Complexity in validatorjs/validator.js
validator.js is vulnerable to Inefficient Regular Expression Complexity
-
Medium 5.3
NULL Pointer Dereference in lxml/lxml
NULL Pointer Dereference allows attackers to cause a denial of service (or application crash). This only applies when lxml is used together with libxml2 2.9.10 through 2.9.14. libxml2 2.9.9 and earlier are not affected. It allows triggering crashes through fo…
-
Medium 5.3
Processing large delegations may severely degrade resolver performance
By flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the resolver's performance, effectively denying legitimate clients access to the DNS resolution service.
-
Medium 5.3
HashiCorp Vault's revocation list not respected
HashiCorp Vault and Vault Enterprise’s TLS certificate auth method did not initially load the optionally configured CRL issued by the role's CA into memory on startup, resulting in the revocation list not being checked if the CRL has not yet been retrieved. F…
-
Medium 5.3CVE-2022-41717 Public exploit
Excessive memory growth in net/http and golang.org/x/net/http2
An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large…
-
Medium 5.0
jsonwebtoken's insecure implementation of key retrieval function could lead to Forgeable Public/Private Tokens from RSA to HMAC
jsonwebtoken is an implementation of JSON Web Tokens. Versions `<= 8.5.1` of `jsonwebtoken` library can be misconfigured so that passing a poorly implemented key retrieval function referring to the `secretOrPublicKey` argument from the readme link will result…
-
Medium 5.0
Vault Vulnerable to Cache-Timing Attacks During Seal and Unseal Operations
HashiCorp Vault's implementation of Shamir's secret sharing used precomputed table lookups, and was vulnerable to cache-timing attacks. An attacker with access to, and the ability to observe a large number of unseal operations on the host through a side chann…
-
Medium 4.4
Vault Fails to Verify if the AppRole SecretID Belongs to Role During a Destroy Operation
HashiCorp Vault and Vault Enterprise’s approle auth method allowed any authenticated user with access to an approle destroy endpoint to destroy the secret ID of any other role by providing the secret ID accessor. This vulnerability is fixed in Vault 1.13.0, 1…
-
Low 3.5
Angular Comment cross site scripting
A vulnerability was found in Angular up to 11.0.4/11.1.0-next.2. It has been classified as problematic. Affected is the handling of comments. The manipulation leads to cross site scripting. It is possible to launch the attack remotely but it might require an …
-
Unscored —
Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial of Service vi…
-
Unscored —
Accepting arbitrary Subject Alternative Name (SAN) types, unless a PKI is specifically defined to use a particular SAN …
-
Unscored —CVE-2021-44532 EPSS 10%
Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 converts SANs (Subject Alternative Names) to a string format. It …
-
Unscored —
Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 did not handle multi-value Relative Distinguished Names correctly…
-
Unscored —
Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers to perform S…
-
Unscored —
A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner to read/write any mani…
-
Unscored —
An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function o…
-
Unscored —
An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of th…
-
Unscored —CVE-2022-21824 EPSS 22%
Due to the formatting logic of the "console.table()" function it was not safe to allow user controlled input to be pass…
-
Unscored —
Libarchive v3.6.0 was discovered to contain an out-of-bounds read via the component zipx_lzma_alone_init.
-
Unscored —
Unbounded memory consumption when reading headers in archive/tar
Reader.Read does not set a limit on the maximum size of file headers. A maliciously crafted archive could cause Read to allocate unbounded amounts of memory, potentially causing resource exhaustion or panics. After fix, Reader.Read limits the maximum size of …
-
Unscored —
Incorrect sanitization of forwarded query parameters in net/http/httputil
Requests forwarded by ReverseProxy include the raw query parameters from the inbound request, including unparsable parameters rejected by net/http. This could permit query parameter smuggling when a Go proxy forwards a parameter with an unparsable value. Afte…
-
Unscored —
singlevar in lparser.c in Lua from (including) 5.4.0 up to (excluding) 5.4.4 lacks a certain luaK_exp2anyregup call, le…
-
Unscored —CVE-2022-29154 Public exploit
An issue was discovered in rsync before 3.2.5 that allows malicious remote servers to write arbitrary files inside the …
-
Unscored —
Panic when decoding Float and Rat types in math/big
A too-short encoded message can cause a panic in Float.GobDecode and Rat GobDecode in math/big in Go before 1.17.13 and 1.18.5, potentially allowing a denial of service.
-
Unscored —
Failure to strip relative path components in net/url
JoinPath and URL.JoinPath do not remove ../ path elements appended to a relative path. For example, JoinPath("https://go.dev", "../go") returns the URL "https://go.dev/../go", despite the JoinPath documentation stating that ../ path elements are removed from …
-
Unscored —
An issue in the component luaG_runerror of Lua v5.4.4 and below leads to a heap-buffer overflow when a recursive error …
-
Unscored —
GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyri…
-
Unscored —
In libarchive before 3.6.2, the software does not check for an error after calling calloc function that can return with…
-
Unscored —
Memory exhaustion when compiling regular expressions in regexp/syntax
Programs which compile regular expressions from untrusted sources may be vulnerable to memory exhaustion or denial of service. The parsed regexp representation is linear in the size of the input, but in some cases the constant factor can be as high as 40,000,…
-
Unscored —
Panic on large handshake records in crypto/tls
Large handshake records may cause panics in crypto/tls. Both clients and servers may send large TLS handshake records which cause servers and clients, respectively, to panic when attempting to construct responses. This affects all TLS 1.3 clients, TLS 1.2 cli…
-
Unscored —
Excessive resource consumption in mime/multipart
A denial of service is possible from excessive resource consumption in net/http and mime/multipart. Multipart form parsing with mime/multipart.Reader.ReadForm can consume largely unlimited amounts of memory and disk files. This also affects form parsing in th…
-
Unscored —
OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms handling. This is fixed …
Revision history
-
#35
Neue Updates aufgenommen
-
#34
Neue Updates von Red Hat aufgenommen
-
#33
Neue Updates von Red Hat aufgenommen
-
#32
Neue Updates von Red Hat aufgenommen
-
#31
Neue Updates von Gentoo aufgenommen
-
#30
Neue Updates von Meinberg aufgenommen
-
#29
Neue Updates von Red Hat aufgenommen
-
#28
Neue Updates von Red Hat aufgenommen
-
#27
Neue Updates von Red Hat aufgenommen
-
#26
Neue Updates von Red Hat aufgenommen
-
#25
Neue Updates von Red Hat aufgenommen
-
#24
Neue Updates von Fedora aufgenommen
-
#23
Neue Updates von Oracle Linux aufgenommen
-
#22
Neue Updates von Red Hat aufgenommen
-
#21
Neue Updates von Red Hat aufgenommen
-
#20
Neue Updates von Red Hat aufgenommen
-
#19
Neue Updates von Red Hat aufgenommen
-
#18
Neue Updates von Red Hat aufgenommen
-
#17
Neue Updates von Red Hat aufgenommen
-
#16
Neue Updates von Red Hat aufgenommen
-
#15
Neue Updates von Red Hat aufgenommen
-
#14
Neue Updates von Red Hat aufgenommen
-
#13
Neue Updates von Red Hat aufgenommen
-
#12
Neue Updates von Red Hat aufgenommen
-
#11
Neue Updates von Red Hat aufgenommen
References
-
Red Hat Security Advisory RHSA-2023:3742 vom 2023-06-22
https://access.redhat.com/errata/RHSA-2023:3742
-
Red Hat Security Advisory RHSA-2023:3612 vom 2023-06-23
https://access.redhat.com/errata/RHSA-2023:3614
-
Red Hat Security Advisory RHSA-2023:3615 vom 2023-06-22
https://access.redhat.com/errata/RHSA-2023:3615
-
Red Hat Security Advisory RHSA-2023:3613 vom 2023-06-27
https://access.redhat.com/errata/RHSA-2023:3613
-
Red Hat Security Advisory vom 2023-06-29
https://access.redhat.com/errata/RHSA-2023:3918
-
Red Hat Security Advisory RHSA-2023:3943 vom 2023-06-29
https://access.redhat.com/errata/RHSA-2023:3943
-
Red Hat Security Advisory RHSA-2023:3910 vom 2023-07-06
https://access.redhat.com/errata/RHSA-2023:3910
-
Red Hat Security Advisory RHSA-2023:3915 vom 2023-07-06
https://access.redhat.com/errata/RHSA-2023:3915
-
Red Hat Security Advisory RHSA-2023:3925 vom 2023-07-06
https://access.redhat.com/errata/RHSA-2023:3925
-
Red Hat Security Advisory RHSA-2023:4003 vom 2023-07-10
https://access.redhat.com/errata/RHSA-2023:4003
-
Fedora Security Advisory FEDORA-2023-6CFE7492C1 vom 2023-07-16
https://bodhi.fedoraproject.org/updates/FEDORA-2023-6cfe7492c1
-
Fedora Security Advisory FEDORA-2023-AA7C75ED4A vom 2023-07-16
https://bodhi.fedoraproject.org/updates/FEDORA-2023-aa7c75ed4a
-
Red Hat Security Advisory RHSA-2023:4025 vom 2023-07-18
https://access.redhat.com/errata/RHSA-2023:4025
-
Red Hat Security Advisory RHSA-2023:4112 vom 2023-07-18
https://access.redhat.com/errata/RHSA-2023:4112
-
Red Hat Security Advisory RHSA-2023:4113 vom 2023-07-18
https://access.redhat.com/errata/RHSA-2023:4113
-
Red Hat Security Advisory RHSA-2023:4114 vom 2023-07-18
https://access.redhat.com/errata/RHSA-2023:4114
-
Red Hat Security Advisory RHSA-2023:4053 vom 2023-07-19
https://access.redhat.com/errata/RHSA-2023:4053
-
Red Hat Security Advisory RHSA-2023:4204 vom 2023-07-19
https://access.redhat.com/errata/RHSA-2023:4204
-
Red Hat Security Advisory RHSA-2023:4090 vom 2023-07-21
https://access.redhat.com/errata/RHSA-2023:4090
-
Red Hat Security Advisory RHSA-2023:4241 vom 2023-07-21
https://access.redhat.com/errata/RHSA-2023:4241
-
Red Hat Security Advisory RHSA-2023:4238 vom 2023-07-20
https://access.redhat.com/errata/RHSA-2023:4238
-
Red Hat Security Advisory RHSA-2023:4093 vom 2023-07-20
https://access.redhat.com/errata/RHSA-2023:4093
-
Red Hat Security Advisory RHSA-2023:4091 vom 2023-07-20
https://access.redhat.com/errata/RHSA-2023:4091
-
Red Hat Security Advisory RHSA-2023:4225 vom 2023-07-27
https://access.redhat.com/errata/RHSA-2023:4225
-
Red Hat Security Advisory RHSA-2023:4226 vom 2023-07-27
https://access.redhat.com/errata/RHSA-2023:4226
-
Red Hat Security Advisory RHSA-2023:4470 vom 2023-08-03
https://access.redhat.com/errata/RHSA-2023:4470
-
Red Hat Security Advisory RHSA-2023:4335 vom 2023-08-08
https://access.redhat.com/errata/RHSA-2023:4335
-
Red Hat Security Advisory RHSA-2023:4674 vom 2023-08-23
https://access.redhat.com/errata/RHSA-2023:4674
-
Red Hat Security Advisory RHSA-2023:4983 vom 2023-09-05
https://access.redhat.com/errata/RHSA-2023:4983
-
Red Hat Security Advisory RHSA-2023:5103 vom 2023-09-12
https://access.redhat.com/errata/RHSA-2023:5103
-
Red Hat Security Advisory RHSA-2023:5233 vom 2023-09-19
https://access.redhat.com/errata/RHSA-2023:5233
-
Red Hat Security Advisory RHSA-2023:5314 vom 2023-09-20
https://access.redhat.com/errata/RHSA-2023:5314
-
Red Hat Security Advisory RHSA-2023:6316 vom 2023-11-07
https://access.redhat.com/errata/RHSA-2023:6316
-
Red Hat Security Advisory RHSA-2023:7058 vom 2023-11-15
https://access.redhat.com/errata/RHSA-2023:7058
-
Oracle Linux Security Advisory ELSA-2023-6939 vom 2023-11-21
https://linux.oracle.com/errata/ELSA-2023-6939.html
-
Fedora Security Advisory FEDORA-2023-14A33318B8 vom 2023-12-03
https://bodhi.fedoraproject.org/updates/FEDORA-2023-14a33318b8
-
Red Hat Security Advisory RHSA-2023:7672 vom 2023-12-06
https://access.redhat.com/errata/RHSA-2023:7672
-
Red Hat Security Advisory RHSA-2023:7820 vom 2023-12-14
https://access.redhat.com/errata/RHSA-2023:7820
-
Red Hat Security Advisory RHSA-2023:5006 vom 2023-12-30
https://access.redhat.com/errata/RHSA-2023:5006
-
Red Hat Security Advisory RHSA-2023:7823 vom 2024-01-05
https://access.redhat.com/errata/RHSA-2023:7823
-
Red Hat Security Advisory RHSA-2024:0139 vom 2024-01-10
https://access.redhat.com/errata/RHSA-2024:0139
-
Red Hat Security Advisory RHSA-2024:0143 vom 2024-01-10
https://access.redhat.com/errata/RHSA-2024:0143
-
Red Hat Security Advisory RHSA-2024:0137 vom 2024-01-10
https://access.redhat.com/errata/RHSA-2024:0137
-
Red Hat Security Advisory RHSA-2024:0121 vom 2024-01-10
https://access.redhat.com/errata/RHSA-2024:0121
-
Meinberg Security Advisory
https://www.meinberg.de/german/news/meinberg-security-advisory-mbgsa-2024-01-lantime-firmware-v7-08-007.htm
-
Gentoo Linux Security Advisory GLSA-202405-04 vom 2024-05-04
https://security.gentoo.org/glsa/202405-04
-
Red Hat Security Advisory RHSA-2024:2987 vom 2024-05-22
https://access.redhat.com/errata/RHSA-2024:2987
-
Red Hat Security Advisory RHSA-2024:3254 vom 2024-05-22
https://access.redhat.com/errata/RHSA-2024:3254
-
Red Hat Security Advisory RHSA-2024:4631 vom 2024-07-18
https://access.redhat.com/errata/RHSA-2024:4631
-
Red Hat Security Advisory RHSA-2025:19094 vom 2025-10-24
https://access.redhat.com/errata/RHSA-2025:19094
-
Atlassian Security Bulletin - November 18 2025
https://confluence.atlassian.com/security/security-bulletin-november-18-2025-1671463469.html