Поиск уязвимостей
Количество 115
Количество 115
ALT-PU-2024-12622
ALT-PU-2024-12622: package `golang` update to version 1.22.7-alt1
ALT-PU-2024-12198
ALT-PU-2024-12198: package `golang` update to version 1.23.1-alt1
ELSA-2024-9459
ELSA-2024-9459: buildah security update (IMPORTANT)
ELSA-2024-9454
ELSA-2024-9454: podman security update (IMPORTANT)
RLSA-2025:7592
Important: yggdrasil security update
ELSA-2025-7592
ELSA-2025-7592: yggdrasil security update (IMPORTANT)
openSUSE-SU-2025:0056-1
Security update for trivy
CVE-2024-45341
A certificate with a URI which has a IPv6 address with a zone ID may incorrectly satisfy a URI name constraint that applies to the certificate chain. Certificates containing URIs are not permitted in the web PKI, so this only affects users of private PKIs which make use of URIs.
CVE-2024-45341
A certificate with a URI which has a IPv6 address with a zone ID may incorrectly satisfy a URI name constraint that applies to the certificate chain. Certificates containing URIs are not permitted in the web PKI, so this only affects users of private PKIs which make use of URIs.
CVE-2024-45341
A certificate with a URI which has a IPv6 address with a zone ID may incorrectly satisfy a URI name constraint that applies to the certificate chain. Certificates containing URIs are not permitted in the web PKI, so this only affects users of private PKIs which make use of URIs.
CVE-2024-45341
Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509
CVE-2024-45341
A certificate with a URI which has a IPv6 address with a zone ID may i ...
CVE-2025-22866
Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture. Due to the way this function is used, we do not believe this leakage is enough to allow recovery of the private key when P-256 is used in any well known protocols.
CVE-2025-22866
Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture. Due to the way this function is used, we do not believe this leakage is enough to allow recovery of the private key when P-256 is used in any well known protocols.
CVE-2025-22866
Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture. Due to the way this function is used, we do not believe this leakage is enough to allow recovery of the private key when P-256 is used in any well known protocols.
CVE-2025-22866
Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec
CVE-2025-22866
Due to the usage of a variable time instruction in the assembly implem ...
SUSE-SU-2024:3938-1
Security update for go1.22-openssl
SUSE-SU-2024:3772-1
Security update for go1.22-openssl
GHSA-3f6r-qh9c-x6mm
A certificate with a URI which has a IPv6 address with a zone ID may incorrectly satisfy a URI name constraint that applies to the certificate chain. Certificates containing URIs are not permitted in the web PKI, so this only affects users of private PKIs which make use of URIs.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2024-12622 ALT-PU-2024-12622: package `golang` update to version 1.22.7-alt1 | CVSS3: 7.5 | около 2 лет назад | |
| ALT-PU-2024-12198 ALT-PU-2024-12198: package `golang` update to version 1.23.1-alt1 | CVSS3: 7.5 | около 2 лет назад | |
| ELSA-2024-9459 ELSA-2024-9459: buildah security update (IMPORTANT) | почти 2 года назад | ||
| ELSA-2024-9454 ELSA-2024-9454: podman security update (IMPORTANT) | почти 2 года назад | ||
 | RLSA-2025:7592 Important: yggdrasil security update | около 1 года назад | ||
| ELSA-2025-7592 ELSA-2025-7592: yggdrasil security update (IMPORTANT) | больше 1 года назад | ||
 | openSUSE-SU-2025:0056-1 Security update for trivy | почти 2 года назад | ||
 | CVE-2024-45341 A certificate with a URI which has a IPv6 address with a zone ID may incorrectly satisfy a URI name constraint that applies to the certificate chain. Certificates containing URIs are not permitted in the web PKI, so this only affects users of private PKIs which make use of URIs. | CVSS3: 6.1 | 1% Низкий | почти 2 года назад |
 | CVE-2024-45341 A certificate with a URI which has a IPv6 address with a zone ID may incorrectly satisfy a URI name constraint that applies to the certificate chain. Certificates containing URIs are not permitted in the web PKI, so this only affects users of private PKIs which make use of URIs. | CVSS3: 4.2 | 1% Низкий | почти 2 года назад |
 | CVE-2024-45341 A certificate with a URI which has a IPv6 address with a zone ID may incorrectly satisfy a URI name constraint that applies to the certificate chain. Certificates containing URIs are not permitted in the web PKI, so this only affects users of private PKIs which make use of URIs. | CVSS3: 6.1 | 1% Низкий | почти 2 года назад |
 | CVE-2024-45341 Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509 | CVSS3: 6.1 | 1% Низкий | 11 месяцев назад |
| CVE-2024-45341 A certificate with a URI which has a IPv6 address with a zone ID may i ... | CVSS3: 6.1 | 1% Низкий | почти 2 года назад |
| CVE-2025-22866 Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture. Due to the way this function is used, we do not believe this leakage is enough to allow recovery of the private key when P-256 is used in any well known protocols. | CVSS3: 4 | 0% Низкий | почти 2 года назад |
| CVE-2025-22866 Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture. Due to the way this function is used, we do not believe this leakage is enough to allow recovery of the private key when P-256 is used in any well known protocols. | CVSS3: 5.3 | 0% Низкий | почти 2 года назад |
| CVE-2025-22866 Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture. Due to the way this function is used, we do not believe this leakage is enough to allow recovery of the private key when P-256 is used in any well known protocols. | CVSS3: 4 | 0% Низкий | почти 2 года назад |
| CVE-2025-22866 Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec | CVSS3: 8.4 | 0% Низкий | около 1 года назад |
| CVE-2025-22866 Due to the usage of a variable time instruction in the assembly implem ... | CVSS3: 4 | 0% Низкий | почти 2 года назад |
| SUSE-SU-2024:3938-1 Security update for go1.22-openssl | около 2 лет назад | ||
| SUSE-SU-2024:3772-1 Security update for go1.22-openssl | около 2 лет назад | ||
| GHSA-3f6r-qh9c-x6mm A certificate with a URI which has a IPv6 address with a zone ID may incorrectly satisfy a URI name constraint that applies to the certificate chain. Certificates containing URIs are not permitted in the web PKI, so this only affects users of private PKIs which make use of URIs. | CVSS3: 6.1 | 1% Низкий | почти 2 года назад |
Уязвимостей на страницу