Latest redhat update infrastructure Vulnerabilities

● CVE-2023-50782

Python-cryptography: bleichenbacher timing oracle attack against rsa decryption - incomplete fix for cve-2020-25659

Redhat Ansible Automation Platform=2.0

Redhat Enterprise Linux=8.0

Redhat Enterprise Linux=9.0

Redhat Update Infrastructure=4

Python-cryptography Project Python-cryptography<42.0.0

pip/cryptography<42.0.0

and 8 more

● CVE-2023-50781

M2crypto: bleichenbacher timing attacks in the rsa decryption api - incomplete fix for cve-2020-25657

pip/m2crypto<=0.40.1

Redhat Enterprise Linux=8.0

Redhat Enterprise Linux=9.0

Redhat Update Infrastructure=4

M2crypto Project M2crypto

● CVE-2022-3644

The collection remote for pulp_ansible stores tokens in plaintext instead of using pulp's encrypted field and exposes them in read/write mode via the API () instead of marking it as write only.

Pulpproject Pulp Ansible

Redhat Ansible Automation Platform=2.0

Redhat Satellite=6.0

Redhat Update Infrastructure=3.0

● CVE-2013-4518

Redhat Update Infrastructure=2.1.3

Redhat Enterprise Linux=6.0

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.