When following an HTTP redirect to a domain which is not a subdomain match or exact match of the initial domain, an http.Client does not forward sensitive headers such as "Authorization" or "Cookie". For example, a redirect from foo.com to www.foo.com will forward the Authorization header, but a redirect to bar.com will not. A maliciously crafted HTTP redirect could cause sensitive headers to be unexpectedly forwarded.

Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

When following an HTTP redirect to a domain which is not a subdomain m ...

Security update for buildah

Security update for podman

Security update for skopeo

Security update for apptainer

Security update for golang-github-prometheus-alertmanager

Security update for golang-github-prometheus-prometheus

Security update for golang-github-prometheus-node_exporter

Уязвимость consul

Уязвимость terraform

Security update for containerd

Security update for kubernetes1.25

Security update for kubernetes1.24

Security update for kubernetes1.27

Security update for kubernetes1.28

Множественные уязвимости packer

Moderate: container-tools:rhel8 security update

ELSA-2024-6969: container-tools:ol8 security update (MODERATE)