Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität zu gefährden.
Product
Red Hat OpenShift ist eine "Platform as a Service" (PaaS) Lösung zur Bereitstellung von Applikationen in der Cloud.
Vulnerabilities 134
-
High 8.8
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS…
KEV May 4, 2022 -
Medium 6.9
Potential XSS vulnerability in jQuery
In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute unt…
KEV Jan 23, 2025 -
Critical 9.8
Exposure of Sensitive Information to an Unauthorized Actor in urllib3
urllib3 before version 1.23 does not remove the Authorization HTTP header when following a cross-origin redirect (i.e., a redirect that differs in host, port, or scheme). This can allow for credentials in the Authorization header to be exposed to unintended h…
-
Critical 9.8
Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.
-
Critical 9.8CVE-2019-5482 EPSS 18%
Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.
-
High 8.2
Regular Expression Denial of Service in websocket-extensions (NPM package)
websocket-extensions npm module prior to 0.1.4 allows Denial of Service (DoS) via Regex Backtracking. The extension parser may take quadratic time when parsing a header containing an unclosed string parameter value whose content is a repeating two-byte sequen…
-
High 7.8CVE-2019-5436 EPSS 50%
A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4…
-
High 7.8CVE-2020-1712 Public exploit
A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are…
-
High 7.7
Signature Malleabillity in elliptic
The Elliptic package 6.5.2 for Node.js allows ECDSA signature malleability via variations in encoding, leading '\0' bytes, or integer overflows. This could conceivably have a security-relevant impact if an application relied on a single canonical signature.
-
High 7.5CVE-2018-18074 Public exploit
Insufficiently Protected Credentials in Requests
The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network.
-
High 7.5
Improper Certificate Validation in urllib3
The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA certificates is different from the OS store of CA certificates, which results in SSL connections succeeding in situations where a verification failure is the cor…
-
High 7.5
An exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1.45.3. A specially cra…
-
High 7.5
golang.org/x/text Infinite loop
The x/text package before 0.3.3 for Go has a vulnerability in encoding/unicode that could lead to the UTF-16 decoder entering an infinite loop, causing the program to crash or run out of memory. An attacker could provide a single byte to a UTF16 decoder insta…
-
High 7.5
Improper Verification of Cryptographic Signature in golang.org/x/crypto
golang.org/x/crypto before v0.0.0-20200220183623-bac4c82f6975 for Go allows a panic during signature verification in the golang.org/x/crypto/ssh package. A client can attack an SSH server that accepts public keys. Also, a server can attack any SSH client.
-
High 7.4CVE-2020-8203 Public exploit
Prototype Pollution in lodash
Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20.
-
High 7.1CVE-2019-3822 EPSS 13%
libcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow. The function creating an…
-
Medium 6.9
jQuery has a potential XSS vulnerability
In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3…
-
Medium 6.5
Nokogiri NULL Pointer Dereference
A NULL pointer dereference vulnerability exists in the xpath.c:xmlXPathCompOpEval() function of libxml2 through 2.9.8 when parsing an invalid XPath expression in the XPATH_OP_AND or XPATH_OP_OR case. Applications processing untrusted XSL format inputs with th…
-
Medium 6.3
A vulnerability was discovered in gdm before 3.31.4. When timed login is enabled in configuration, an attacker could by…
-
Medium 6.1
Grafana XSS via a column style
Grafana 5.3.1 has XSS via a column style on the "Dashboard > Table Panel" screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099.
-
Medium 6.1
Improper Neutralization of CRLF Sequences in urllib3 library for Python
In the urllib3 library through 1.24.1 for Python, CRLF injection is possible if the attacker controls the request parameter.
-
Medium 6.1
XSS in jQuery as used in Drupal, Backdrop CMS, and other products
jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Obj…
-
Medium 6.1
Grafana XSS in header column rename
Grafana before 6.7.3 allows table-panel XSS via column.title or cellLinkTooltip.
-
Medium 5.6
Prototype Pollution in Ajv
An issue was discovered in ajv.validate() in Ajv (aka Another JSON Schema Validator) 6.12.2. A carefully crafted JSON schema could be provided that allows execution of other code by prototype pollution. (While untrusted schemas are recommended against, the wo…
-
Medium 5.6CVE-2020-7598 Public exploit
Prototype Pollution in minimist
minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a "constructor" or "__proto__" payload.
-
Medium 5.4CVE-2018-16890 Public exploit
libcurl versions from 7.36.0 to before 7.64.0 is vulnerable to a heap buffer out-of-bounds read. The function handling …
-
Medium 5.4
Grafana stored XSS
Grafana through 6.7.1 allows stored XSS due to insufficient input protection in the originalUrl field, which allows an attacker to inject JavaScript code that will be executed after clicking on Open Original Dashboard after visiting the snapshot.
-
Medium 5.3
An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4. The …
-
Medium 4.5CVE-2019-3843 Public exploit
It was discovered that a systemd service that uses DynamicUser property can create a SUID/SGID binary that would be all…
-
Medium 4.5CVE-2019-3844 Public exploit
It was discovered that a systemd service that uses DynamicUser property can get new privileges through the execution of…
-
Medium 4.3
http.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3 does not correctly valida…
-
Medium 4.3
libcurl versions from 7.34.0 to before 7.64.0 are vulnerable to a heap out-of-bounds read in the code handling the end-…
-
Medium 4.2
Affected versions of serialize-javascript are vulnerable to Cross-site Scripting (XSS)
The serialize-javascript npm package before version 2.1.1 is vulnerable to Cross-site Scripting (XSS). It does not properly mitigate against unsafe characters in serialized regular expressions. This vulnerability is not affected on Node.js environment since N…
-
Medium 4.0
Malicious URLs can still cause Git to send a stored credential to the wrong server
Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker. This bug is similar to CVE-2020-5260(GHSA-qm7j-c969-7j4q). The fix for that bug still left the door open for an expl…
-
Unscored —
The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other produc…
-
Unscored —
In the GNU C Library (aka glibc or libc6) through 2.28, the getaddrinfo function would successfully parse a string that…
-
Unscored —
get_8bit_row in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of…
-
Unscored —
An issue was discovered in GNU gettext 0.19.8. There is a double free in default_add_message in read-catalog.c, related…
-
Unscored —
In tcpdump 4.9.2, a stack-based buffer over-read exists in the print_prefix function of print-hncp.c via crafted packet…
-
Unscored —
There is a stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp in LibRaw 0.19.1. Crafted in…
-
Unscored —
set_file_metadata in xattr.c in GNU Wget before 1.20.1 stores a file's origin URL in the user.xdg.origin.url metadata a…
-
Unscored —
The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, has a memory lea…
-
Unscored —
The xz_decomp function in xzlib.c in libxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial o…
-
Unscored —
GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. The impact is: Deny of Service, Memo…
-
Unscored —
GNU binutils gold gold v1.11-v1.16 (GNU binutils v2.21-v2.31.1) is affected by: Improper Input Validation, Signed/Unsig…
-
Unscored —
WebKitGTK and WPE WebKit prior to version 2.24.1 failed to properly apply configured HTTP proxy settings when downloadi…
-
Unscored —
The tiff_document_render() and tiff_document_get_thumbnail() functions in the TIFF document backend in GNOME Evince thr…
-
Unscored —
An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles file ownership becaus…
-
Unscored —
An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c has race conditions because the …
-
Unscored —
An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles a file's user and gro…
-
Unscored —
file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while…
-
Unscored —
daemon/gvfsdaemon.c in gvfsd from GNOME gvfs before 1.38.3, 1.40.x before 1.40.2, and 1.41.x before 1.41.3 opened a pri…
-
Unscored —
Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container, leading to denial of service (resource c…
-
Unscored —
In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than input files. This affec…
-
Unscored —
Out of bounds read in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain potentially sen…
-
Unscored —
Out of bounds read in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain potentially sen…
-
Unscored —
A flaw was discovered in ibus in versions before 1.5.22 that allows any unprivileged user to monitor and send method ca…
-
Unscored —
_TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux.c in LibTIFF through 4.0.10 mishandle Integer Overflow checks because…
-
Unscored —
ECDSA remote timing attack
Normally in OpenSSL EC groups always have a co-factor present and this is used in side channel resistant code paths. However, in some cases, it is possible to construct a group using explicit parameters (instead of using a named curve). In those cases it is p…
-
Unscored —
Fork Protection
OpenSSL 1.1.1 introduced a rewritten random number generator (RNG). This was intended to include protection in the event of a fork() system call in order to ensure that the parent and child processes did not share the same RNG state. However this protection w…
-
Unscored —
Padding Oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey
In situations where an attacker receives automated notification of the success or failure of a decryption attempt an attacker, after sending a very large number of messages to be decrypted, can recover a CMS/PKCS7 transported encryption key or decrypt any RSA…
-
Unscored —
In systemd 240, bus_open_system_watch_bind_with_description in shared/bus-util.c (as used by systemd-resolved to connec…
-
Unscored —
The POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize multiple calls of the __builtin_da…
-
Unscored —
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. …
-
Unscored —
archive_read_format_rar_read_data in archive_read_support_format_rar.c in libarchive before 3.4.0 has a use-after-free …
-
Unscored —
On the x86-64 architecture, the GNU C Library (aka glibc) before 2.31 fails to ignore the LD_PREFER_MAP_32BIT_EXEC envi…
-
Unscored —
flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which …
-
Unscored —CVE-2019-19924 EPSS 11%
SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c. This is caused by i…
-
Unscored —
zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive.
-
Unscored —
ext/misc/zipfile.c in SQLite 3.30.1 mishandles certain uses of INSERT INTO in situations involving embedded '\0' charac…
-
Unscored —
Buffer overflow in GNU Wget 1.20.1 and earlier allows remote attackers to cause a denial-of-service (DoS) or may execut…
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …
-
Unscored —
WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain JavaScript redirec…
-
Unscored —
An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a v…
-
Unscored —
Lua 5.3.5 has a use-after-free in lua_upvaluejoin in lapi.c. For example, a crash outcome might be achieved by an attac…
-
Unscored —
In elfutils 0.175, there is a buffer over-read in the ebl_object_note function in eblobjnote.c in libebl. Remote attack…
-
Unscored —
A heap-based buffer over-read was discovered in the function read_srclines in dwarf_getsrclines.c in libdw in elfutils …
-
Unscored —
An issue was discovered in elfutils 0.175. A segmentation fault can occur in the function elf64_xlatetom in libelf/elf3…
-
Unscored —
In elfutils 0.175, a negative-sized memcpy is attempted in elf_cvt_note in libelf/note_xlate.h because of an incorrect …
-
Unscored —
In elfutils 0.175, a heap-based buffer over-read was discovered in the function elf32_xlatetom in elf32_xlatetom.c in l…
-
Unscored —CVE-2019-8457 EPSS 45%
SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when han…
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 1…
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 1…
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 1…
-
Unscored —
A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.2, tvOS 12.2, Saf…
-
Unscored —
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watc…
-
Unscored —
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watc…
-
Unscored —CVE-2019-8558 Public exploit
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 1…
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 1…
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 1…
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …
-
Unscored —CVE-2019-8601 Public exploit
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …
-
Unscored —
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14…
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …
-
Unscored —CVE-2019-8611 Public exploit
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …
-
Unscored —CVE-2019-8622 Public exploit
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …
-
Unscored —CVE-2019-8623 Public exploit
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS …
-
Unscored —CVE-2019-8671 Public exploit
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS …
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS …
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS …
-
Unscored —
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6, Secur…
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS …
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS …
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS …
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS …
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS …
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS …
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS …
-
Unscored —CVE-2019-8690 Public exploit
A logic issue existed in the handling of document loads. This issue was addressed with improved state management. This …
-
Unscored —
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6, Secur…
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13, iTunes …
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13, iTunes …
-
Unscored —
"Clear History and Website Data" did not clear the history. The issue was addressed with improved data deletion. This i…
-
Unscored —
An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, lead…
-
Unscored —
A content spoofing vulnerability was found in the openshift/console 3.11 and 4.x. This flaw allows an attacker to craft…
-
Unscored —
It was discovered that OpenShift Container Platform's (OCP) distribution of Kibana could open in an iframe, which made …
-
Unscored —
An issue was discovered in dbus >= 1.3.0 before 1.12.18. The DBusServer in libdbus, as used in dbus-daemon, leaks file …
-
Unscored —
-
Unscored —
A flaw was found in the Restricted Security Context Constraints (SCC), where it allows pods to craft custom network pac…
-
Unscored —
libldap in certain third-party OpenLDAP packages has a certificate-validation flaw when the third-party package is asse…
-
Unscored —
Kibana versions before 6.8.9 and 7.7.0 contain a prototype pollution flaw in TSVB. An authenticated attacker with privi…
Revision history
-
#22
Neue Updates von openSUSE aufgenommen
-
#21
Neue Updates von Red Hat aufgenommen
-
#20
Neue Updates von Red Hat aufgenommen
-
#19
Neue Updates von Red Hat aufgenommen
-
#18
Neue Updates von SUSE aufgenommen
-
#17
Neue Updates von Red Hat aufgenommen
-
#16
Neue Updates von Red Hat aufgenommen
-
#15
Neue Updates von Red Hat aufgenommen
-
#14
Neue Updates von Red Hat aufgenommen
-
#13
Neue Updates von Red Hat aufgenommen
-
#12
Neue Updates von Red Hat aufgenommen
-
#11
Neue Updates von Red Hat aufgenommen
-
#10
Neue Updates von Oracle Linux aufgenommen
-
#9
Neue Updates von Red Hat aufgenommen
-
#8
Neue Updates von Red Hat aufgenommen
-
#7
Neue Updates von Red Hat aufgenommen
-
#6
Neue Updates von Red Hat aufgenommen
-
#5
Neue Updates von Debian aufgenommen
-
#4
Neue Updates von Debian aufgenommen
-
#3
Neue Updates von SUSE aufgenommen
-
#2
Neue Updates von Red Hat aufgenommen
-
#1
Initiale Fassung
References
-
Red Hat Security Advisory RHSA-2021:0980 vom 2021-03-25
https://access.redhat.com/errata/RHSA-2021:0980
-
Red Hat Security Advisory RHSA-2021:1129 vom 2021-04-08
https://access.redhat.com/errata/RHSA-2021:1129
-
SUSE Security Update SUSE-SU-2021:1962-1 vom 2021-06-11
https://lists.suse.com/pipermail/sle-security-updates/2021-June/009001.html
-
Red Hat Security Advisory RHSA-2021:1168 vom 2021-04-13
https://access.redhat.com/errata/RHSA-2021:1168
-
Red Hat Security Advisory RHSA-2020:4298 vom 2020-10-27
https://access.redhat.com/errata/RHSA-2020:4298
-
Red Hat Security Advisory RHSA-2020:4847 vom 2020-11-04
https://access.redhat.com/errata/RHSA-2020:4847
-
Red Hat Security Advisory RHSA-2020:4694 vom 2020-11-04
https://access.redhat.com/errata/RHSA-2020:4694
-
Red Hat Security Advisory RHSA-2020:4682 vom 2020-11-04
https://access.redhat.com/errata/RHSA-2020:4682
-
SUSE Security Update SUSE-SU-2020:3309-1 vom 2020-11-12
https://lists.suse.com/pipermail/sle-security-updates/2020-November/007763.html
-
Debian Security Advisory DLA-2453 vom 2020-11-16
https://lists.debian.org/debian-lts-announce/2020/11/msg00027.html
-
Debian Security Advisory DLA-2455 vom 2020-11-18
https://lists.debian.org/debian-lts-announce/2020/11/msg00031.html
-
Red Hat Security Advisory RHSA-2020:5249 vom 2020-11-30
https://access.redhat.com/errata/RHSA-2020:5249
-
Red Hat Security Advisory RHSA-2020:5305 vom 2020-12-01
https://access.redhat.com/errata/RHSA-2020:5305
-
Red Hat Security Advisory RHSA-2020:5533 vom 2020-12-15
https://access.redhat.com/errata/RHSA-2020:5533
-
Red Hat Security Advisory RHSA-2020:5499 vom 2020-12-15
https://access.redhat.com/errata/RHSA-2020:5499
-
Red Hat Security Advisory RHSA-2020:5581 vom 2020-12-16
https://access.redhat.com/errata/RHSA-2020:5581
-
Oracle Linux Security Advisory ELSA-2020-5499 vom 2020-12-18
https://linux.oracle.com/errata/ELSA-2020-5499.html
-
Red Hat Security Advisory RHSA-2021:0421 vom 2021-02-04
https://access.redhat.com/errata/RHSA-2021:0421
-
Red Hat Security Advisory RHSA-2021:0521 vom 2021-02-15
https://access.redhat.com/errata/RHSA-2021:0521
-
Red Hat Security Advisory RHSA-2021:0551 vom 2021-02-16
https://access.redhat.com/errata/RHSA-2021:0551
-
Red Hat Security Advisory RHSA-2021:0548 vom 2021-02-16
https://access.redhat.com/errata/RHSA-2021:0548
-
Red Hat Security Advisory RHSA-2021:0781 vom 2021-03-09
https://access.redhat.com/errata/RHSA-2021:0781
-
Red Hat Security Advisory RHSA-2021:0799 vom 2021-03-10
https://access.redhat.com/errata/RHSA-2021:0799
-
Red Hat Security Advisory RHSA-2021:2643 vom 2021-07-14
https://access.redhat.com/errata/RHSA-2021:2643
-
Red Hat Security Advisory RHSA-2021:3140 vom 2021-08-11
https://access.redhat.com/errata/RHSA-2021:3140
-
Red Hat Security Advisory RHSA-2021:3259 vom 2021-08-25
https://access.redhat.com/errata/RHSA-2021:3259
-
openSUSE Security Update OPENSUSE-SU-2026:12044-1 vom 2026-10-16
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/USQRU25ZGXREBNHZ74LCOTNVBMDSHKLX/
-
openSUSE Security Update OPENSUSE-SU-2026:12045-1 vom 2026-10-16
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6AQJ7NC2BIYMG7F6X7TVVABMLYUZM2KW/