TI-2024-16580 CVE-2024-25126 · GHSA-22f2-v57c-j9cx
Rack ReDos in content type parsing (2nd degree polynomial)
Priority HIGH 72
Rack is a modular Ruby web server interface.
RHSA-2024:10806
Satellite 6.15.5 Async Update
Released 2024-12-04 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Satellite 6.15 for RHEL 8 python-pulp-container-2.16.9-2.el8pc, python3.11-pulp-container-2.16.9-2.el8pc, rubygem-activestorage-6.1.7.7-1.el8sat +1
Fixes 5 records
TI-2024-15443 CVE-2024-23342 · GHSA-wj6h-64fc-37mp
python-ecdsa vulnerable to Minerva attack on P-256
Priority HIGH 68
The `ecdsa` PyPI package is a pure Python implementation of ECC (Elliptic Curve Cryptography) with support for ECDSA (Elliptic Curve Digital Signature Algorithm), EdDSA (Edwards-curve Digital Signature Algorithm) and ECD…
TI-2024-17236 CVE-2024-26146 · GHSA-54rr-7fvw-6x8f
Possible Denial of Service Vulnerability in Rack Header Parsing
Priority MEDIUM 43
Rack is a modular Ruby web server interface.
TI-2024-17231 CVE-2024-26141 · GHSA-xj5v-6v4g-jfw6
Possible DoS Vulnerability with Range Header in Rack
Priority MEDIUM 42
Rack is a modular Ruby web server interface.
TI-2024-17234 CVE-2024-26144 · GHSA-8h22-8cf7-hq6g
Possible Sensitive Session Information Leak in Active Storage
Priority LOW 33
Rails is a web-application framework.