ELSA-2024-9098: skopeo security update (MODERATE)

Security update for go1.22-openssl

Security update for go1.22-openssl

The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations. This misalignment could be exploited to create an zip file with contents that vary depending on the implementation reading the file. The archive/zip package now rejects files containing these errors.

Уязвимость пакета archive-zip языка программирования Golang, позволяющая нарушителю создать произвольный zip-файл

Security update for go1.22

Security update for go1.21

Security update for go1.21

Security update for go1.22

Уязвимость nomad

Множественные уязвимости golang

Moderate: golang security update

ELSA-2024-4237: go-toolset security update (MODERATE)

ELSA-2024-4212: golang security update (MODERATE)

Moderate: grafana security update

ELSA-2024-5291: grafana security update (MODERATE)

A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.

A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.

A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.