Security update for kubernetes1.28

Security update for kubernetes1.24

Security update for go1.23

Security update for go1.22

Security update for go1.23

Security update for go1.22

Important: podman security update

Important: container-tools:rhel8 security update

Important: golang security update

Important: go-toolset:rhel8 security update

ELSA-2024-8112: buildah security update (IMPORTANT)

ELSA-2024-8039: podman security update (IMPORTANT)

ELSA-2024-8038: container-tools:ol8 security update (IMPORTANT)

ELSA-2024-6913: golang security update (IMPORTANT)

ELSA-2024-6908: go-toolset:ol8 security update (IMPORTANT)

The HTTP client drops sensitive headers after following a cross-domain redirect. For example, a request to a.com/ containing an Authorization header which is redirected to b.com/ will not send that header to b.com. In the event that the client received a subsequent same-domain redirect, however, the sensitive headers would be restored. For example, a chain of redirects from a.com/, to b.com/1, and finally to b.com/2 would incorrectly send the Authorization header to b.com/2.

Уязвимость языка программирования Golang, связанная с недостаточной защитой служебных данных, позволяющая нарушителю получить несанкционированный доступ к учетным данным

Множественные уязвимости golang

ELSA-2024-9459: buildah security update (IMPORTANT)

ELSA-2024-9454: podman security update (IMPORTANT)