Red Hat Security AdvisoryRHSA-2024:3827
buildah security and bug fix update
Released 2024-06-11 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) buildah-2:1.33.7-2.el9_4, buildah-tests-2:1.33.7-2.el9_4
Fixes 3 records
Priority LOW 31
jose is JavaScript module for JSON Object Signing and Encryption, providing support for JSON Web Tokens (JWT), JSON Web Signature (JWS), JSON Web Encryption (JWE), JSON Web Key (JWK), JSON Web Key Set (JWKS), and more.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.02102 · Published 2024-03-09 · Partial fix · 2.0.7, 4.15.5 CWE-400
Priority LOW 31
When parsing a multipart form (either explicitly with Request.ParseMultipartForm or implicitly with Request.FormValue, Request.PostFormValue, or Request.FormFile), limits on the total size of the parsed form were not app…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01165 · Published 2024-03-05 · Partial fix · 1.21.8, 1.22.1 CWE-770
Priority LOW 26
Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.01956 · Published 2024-03-09 · Partial fix · 4.0.1, 3.0.3 +1 CWE-409
