Vulnerabilities

jq is a command-line JSON processor.

A flaw was found in Nodemailer.

A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function.

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negoti…

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service.

A flaw was found in Ceph, relating to the URL processing on RGW backends.

A key length flaw was found in Red Hat Ceph Storage.

A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner to read/write any manilla share or entire file system.

An issue was discovered in Grafana through 7.3.4, when integrated with Zabbix.

An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before version 0.3.18.

A flaw was found in the ZeroMQ server in versions before 4.3.3.

A flaw was found in Red Hat Ceph Storage 4, in the Dashboard component.

A flaw was found in the Red Hat Ceph Storage RGW in versions before 14.2.21.

A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway) in versions before 14.2.21.

An authentication flaw was found in ceph in versions before 14.2.20.

A flaw was found in ceph in versions prior to 16.y.z where ceph stores mgr module passwords in clear text.

User credentials can be manipulated and stolen by Native CephFS consumers of OpenStack Manila, resulting in potential privilege escalation.

A flaw was found in Ceph-ansible v4.0.41 where it creates an /etc/ceph/iscsi-gateway.conf with insecure default permissions.

A flaw was found in the Cephx authentication protocol in versions before 15.2.6 and before 14.2.14, where it does not verify Ceph clients correctly and is then vulnerable to replay attacks in Nautilus.

A flaw was found in Django REST Framework versions before 3.12.0 and before 3.11.2.

A flaw was found in the Ansible Engine, in ansible-engine 2.8.x before 2.8.15 and ansible-engine 2.9.x before 2.9.13, when installing packages using the dnf module.

A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway).

A flaw was found in Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and 2.9.x before 2.9.7 as well as Ansible Tower before and including versions 3.4.5 and 3.5.5 and 3.6.3 whe…

An information-disclosure flaw was found in Grafana through 6.7.3.