ELSA-2024-7204

Опубликовано: 26 сент. 2024

Источник: oracle-oval

Платформа: Oracle Linux 9

Описание

ELSA-2024-7204: osbuild-composer security update (IMPORTANT)

[101-2.0.1]

Rebuild on new golang to address CVE-2024-34156

Обновленные пакеты

Oracle Linux 9

Oracle Linux aarch64

osbuild-composer

101-2.0.1.el9_4

osbuild-composer-core

101-2.0.1.el9_4

osbuild-composer-worker

101-2.0.1.el9_4

Oracle Linux x86_64

osbuild-composer

101-2.0.1.el9_4

osbuild-composer-core

101-2.0.1.el9_4

osbuild-composer-worker

101-2.0.1.el9_4

Связанные CVE

CVE-2024-34156

Ссылки на источники

Связанные уязвимости

CVE-2024-34156

CVSS3: 7.5

ubuntu

10 месяцев назад

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

CVE-2024-34156

CVSS3: 7.5

redhat

10 месяцев назад

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

CVE-2024-34156

CVSS3: 7.5

nvd

10 месяцев назад

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

CVE-2024-34156

CVSS3: 7.5

debian

10 месяцев назад

Calling Decoder.Decode on a message which contains deeply nested struc ...

RLSA-2024:8111

rocky

8 месяцев назад

Important: skopeo security update