Summary
Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen, beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, Cross-Site Scripting (XSS)-Angriffe durchzuführen oder einen Men-in-the-Middle-Angriff auszuführen.
Product
Red Hat Enterprise Linux (RHEL) ist eine populäre Linux-Distribution.
Vulnerabilities 7
-
High 8.8
Pcp: exposure of the redis server backend allows remote command execution via pmproxy
A flaw was found in PCP. The default pmproxy configuration exposes the Redis server backend to the local network, allowing remote command execution with the privileges of the Redis user. This issue can only be exploited when pmproxy is running. By default, pm…
-
Medium 6.8
JWCrypto vulnerable to JWT bomb Attack in `deserialize` function
JWCrypto implements JWK, JWS, and JWE specifications using python-cryptography. Prior to version 1.5.6, an attacker can cause a denial of service attack by passing in a malicious JWE Token with a high compression ratio. When the server processes this token, i…
-
Medium 6.1
Osbuild-composer: race condition may disable gpg verification for package repositories
A flaw was found in osbuild-composer. A condition can be triggered that disables GPG verification for package repositories, which can expose the build phase to a Man-in-the-Middle attack, allowing untrusted code to be installed into an image being built.
-
Medium 5.9
PyCryptodome and pycryptodomex side-channel leakage for OAEP decryption
PyCryptodome and pycryptodomex before 3.19.1 allow side-channel leakage for OAEP decryption, exploitable for a Manger attack.
-
Medium 5.4
Jinja vulnerable to Cross-Site Scripting (XSS)
Jinja is an extensible templating engine. Special placeholders in the template allow writing code similar to Python syntax. It is possible to inject arbitrary HTML attributes into the rendered HTML template, potentially leading to Cross-Site Scripting (XSS). …
-
Medium 4.2
Request body not stripped after redirect in urllib3
urllib3 is a user-friendly HTTP client library for Python. urllib3 previously wouldn't remove the HTTP request body when an HTTP redirect response using status 301, 302, or 303 after the request had its method changed from one that could accept a request body…
-
Unscored —
exfatprogs before 1.2.2 allows out-of-bounds memory access, such as in read_file_dentry_set.
Revision history
-
#19
Neue Updates von openSUSE aufgenommen
-
#18
Neue Updates von SUSE aufgenommen
-
#17
Neue Updates von IBM aufgenommen
-
#16
Neue Updates von IBM aufgenommen
-
#15
Neue Updates von Amazon aufgenommen
-
#14
Neue Updates von Red Hat aufgenommen
-
#13
Neue Updates von Red Hat aufgenommen
-
#12
Neue Updates von Oracle Linux aufgenommen
-
#11
Neue Updates von Red Hat aufgenommen
-
#10
Neue Updates von SUSE aufgenommen
-
#9
Neue Updates von Red Hat aufgenommen
-
#8
Neue Updates von Oracle Linux aufgenommen
-
#7
Neue Updates von Oracle Linux aufgenommen
-
#6
Neue Updates von Oracle Linux und Red Hat aufgenommen
-
#5
Neue Updates von Red Hat aufgenommen
-
#4
Neue Updates von Red Hat aufgenommen
-
#3
Neue Updates von Oracle Linux aufgenommen
-
#2
Neue Updates von Oracle Linux aufgenommen
-
#1
Initiale Fassung
References
-
RedHat Security Advisory vom 2024-05-01
https://access.redhat.com/errata/RHSA-2024:2119
-
RedHat Security Advisory vom 2024-05-01
https://access.redhat.com/errata/RHSA-2024:2132
-
RedHat Security Advisory vom 2024-05-01
https://access.redhat.com/errata/RHSA-2024:2437
-
RedHat Security Advisory vom 2024-05-01
https://access.redhat.com/errata/RHSA-2024:2559
-
RedHat Security Advisory vom 2024-05-01
https://access.redhat.com/errata/
-
Red Hat Security Advisory RHSA-2025:0078 vom 2025-01-08
https://access.redhat.com/errata/RHSA-2025:0078
-
Oracle Linux Security Advisory ELSA-2024-2559 vom 2024-05-07
https://linux.oracle.com/errata/ELSA-2024-2559.html
-
Oracle Linux Security Advisory ELSA-2024-2566 vom 2024-05-09
https://linux.oracle.com/errata/ELSA-2024-2566.html
-
Red Hat Security Advisory RHSA-2024:2988 vom 2024-05-22
https://access.redhat.com/errata/RHSA-2024:2988
-
Red Hat Security Advisory RHSA-2024:2968 vom 2024-05-22
https://access.redhat.com/errata/RHSA-2024:2968
-
Red Hat Security Advisory RHSA-2024:2961 vom 2024-05-22
https://access.redhat.com/errata/RHSA-2024:2961
-
Red Hat Security Advisory RHSA-2024:2952 vom 2024-05-22
https://access.redhat.com/errata/RHSA-2024:2952
-
Red Hat Security Advisory RHSA-2024:3102 vom 2024-05-22
https://access.redhat.com/errata/RHSA-2024:3102
-
Red Hat Security Advisory RHSA-2024:2987 vom 2024-05-22
https://access.redhat.com/errata/RHSA-2024:2987
-
Red Hat Security Advisory RHSA-2024:3267 vom 2024-05-22
https://access.redhat.com/errata/RHSA-2024:3267
-
Red Hat Security Advisory RHSA-2024:3264 vom 2024-05-22
https://access.redhat.com/errata/RHSA-2024:3264
-
Red Hat Security Advisory RHSA-2024:3321 vom 2024-05-23
https://access.redhat.com/errata/RHSA-2024:3321
-
Red Hat Security Advisory RHSA-2024:3322 vom 2024-05-23
https://access.redhat.com/errata/RHSA-2024:3322
-
Red Hat Security Advisory RHSA-2024:3323 vom 2024-05-23
https://access.redhat.com/errata/RHSA-2024:3323
-
Red Hat Security Advisory RHSA-2024:3324 vom 2024-05-23
https://access.redhat.com/errata/RHSA-2024:3324
-
Red Hat Security Advisory RHSA-2024:3325 vom 2024-05-23
https://access.redhat.com/errata/RHSA-2024:3325
-
Oracle Linux Security Advisory ELSA-2024-2987 vom 2024-05-28
https://linux.oracle.com/errata/ELSA-2024-2987.html
-
Red Hat Security Advisory RHSA-2024:3392 vom 2024-05-28
https://access.redhat.com/errata/RHSA-2024:3392
-
Oracle Linux Security Advisory ELSA-2024-2961 vom 2024-05-28
https://linux.oracle.com/errata/ELSA-2024-2961.html
-
Oracle Linux Security Advisory ELSA-2024-3264 vom 2024-05-30
http://linux.oracle.com/errata/ELSA-2024-3264.html
-
Oracle Linux Security Advisory ELSA-2024-3267 vom 2024-06-01
https://linux.oracle.com/errata/ELSA-2024-3267.html
-
Red Hat Security Advisory RHSA-2024:4522 vom 2024-07-12
https://access.redhat.com/errata/RHSA-2024:4522
-
Red Hat Security Advisory RHSA-2024:11189 vom 2024-12-17
https://access.redhat.com/errata/RHSA-2024:11189
-
Red Hat Security Advisory RHSA-2024:11238 vom 2024-12-17
https://access.redhat.com/errata/RHSA-2024:11238
-
Oracle Linux Security Advisory ELSA-2024-11238 vom 2024-12-19
https://linux.oracle.com/errata/ELSA-2024-11238.html
-
SUSE Security Update SUSE-SU-2024:3976-1 vom 2024-11-12
https://lists.suse.com/pipermail/sle-security-updates/2024-November/019809.html
-
Red Hat Security Advisory RHSA-2025:1793 vom 2025-02-25
https://access.redhat.com/errata/RHSA-2025:1793
-
Red Hat Security Advisory RHSA-2025:1813 vom 2025-02-25
https://access.redhat.com/errata/RHSA-2025:1813
-
Amazon Linux Security Advisory ALAS-2025-2763 vom 2025-02-25
https://alas.aws.amazon.com/AL2/ALAS-2025-2763.html
-
IBM Security Bulletin 7230557 vom 2025-04-10
https://www.ibm.com/support/pages/node/7230557
-
IBM Security Bulletin
https://www.ibm.com/support/pages/node/7240431
-
SUSE Security Update SUSE-SU-2025:03233-1 vom 2025-09-16
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZZVWJEPKVYRNPHIHU4HAZXJJSW7AFWHY/
-
openSUSE Security Update OPENSUSE-SU-2026:12044-1 vom 2026-10-16
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/USQRU25ZGXREBNHZ74LCOTNVBMDSHKLX/
-
openSUSE Security Update OPENSUSE-SU-2026:12045-1 vom 2026-10-16
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6AQJ7NC2BIYMG7F6X7TVVABMLYUZM2KW/