StarlingX

1 → 75 of 455 results First • Previous • • Last
Critical
Fix Released
#1849200 CVE-2018-15686: systemd: state injection during daemon-reexec
StarlingX 274
Critical
Fix Released
#1849202 CVE-2018-19788: polkit: Improper handling of uid
StarlingX 274
Critical
Fix Released
#1849209 CVE-2019-11811: kernel: use-after-free in IPMI
StarlingX 292
Critical
Fix Released
#2002269 [Debian] CVE: CVE-2022-42898: krb5: integer overflows.
StarlingX 256
Critical
Fix Released
#2002277 [Debian] CVE: CVE-2022-47629/CVE-2022-3515: libksba : integer overflow vulnerability.
StarlingX 256
Critical
Fix Released
#2002279 [Debian] CVE: CVE-2021-46848: libtasn1 : an ETYPE_OK off-by-one
StarlingX 256
Critical
Fix Released
#2002280 [Debian] CVE: CVE-2022-3643/CVE-2022-3524: kernel: multiple CVEs
StarlingX 256
Critical
Fix Released
#2002281 [Debian] CVE: CVE-2021-46669/CVE-2022-27376/CVE-2022-27377...CVE-2022-32089/CVE-2022-32091: mariadb: multiple CVEs
StarlingX 256
Critical
Fix Released
#2064862 [Debian] Critical CVE: CVE-2024-33599/CVE-2024-33600/CVE-2024-33601/CVE-2024-33602 glibc : multiple CVEs
StarlingX 256
High
Fix Released
#1791880 Fix "Resource leak" issues reported by static analysis in Stx-ha
StarlingX 272
High
Fix Released
#1794701 static analysis reports "Buffer not null terminated" issues in stx-fault/fm_common
StarlingX 272
High
Fix Released
#1794704 static analysis reports "Buffer not null terminated" issues in stx-nfv
StarlingX 278
High
Fix Released
#1794705 static analysis reports "Resource leak" issues in stx-fault/fm_common
StarlingX 272
High
Fix Released
#1794898 static analysis reports "Resource leak" issues in stx-nfv
StarlingX 278
High
Fix Released
#1794903 Fix "Resource leak" issues reported by static analysis in Stx-metal
StarlingX 272
High
Fix Released
#1794908 "Destination buffer too small" issues reported by static analysis in Stx-metal
StarlingX 274
High
Fix Released
#1794910 "Uninitialized scalar variable" issues reported by static analysis in Stx-metal
StarlingX 272
High
Fix Released
#1794937 "String not null terminated" issues reported by static analysis in Stx-metal
StarlingX 272
High
Fix Released
#1795120 Fix "Uninitialized pointer read " issues reported by static analysis in Stx-ha
StarlingX 270
High
Fix Released
#1797204 controller-0 reboot loop during the Install with extended security profile
StarlingX 6
High
Fix Released
#1805759 CVE: CVE-2018-5391: kernel: IP fragment re-assembly allows DOS (FragmentSmack)
StarlingX 18
High
Fix Released
#1806977 STX: LDAP sudo user not able to login by password
StarlingX 8
High
Fix Released
#1820756 CVE-2018-15688: systemd-network does not correctly keep track of a buffer size
StarlingX 22
High
Fix Released
#1820757 CVE-2018-18311: Perl Buffer Overflow
StarlingX 22
High
Fix Released
#1820759 CVE-2018-19115: keepalived has a Heap-based buffer overflow vulnerability
StarlingX 20
High
Fix Released
#1830487 CVEs by modern implementation of the "fill buffer" mechanism
StarlingX 12
High
Fix Released
#1836685 CVE: integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs)
StarlingX 278
High
Fix Released
#1838121 Unable to install server certificate PEM file in Docker registry mode
StarlingX 6
High
Fix Released
#1840771 CVE-2018-14618:NTLM buffer overflow via integer overflow
StarlingX 274
High
Fix Released
#1847817 CVE-2019-14835: kernel: vhost-net: guest to host kernel escape during migration
StarlingX 276
High
Fix Released
#1849195 CVE-2018-1000076: rubygems: Improper verification of signatures in tarball allows to install mis-signed gem
StarlingX 274
High
Fix Released
#1849197 CVE-2018-12327:ntp: buffer overflow in ntpq and ntpdc
StarlingX 274
High
Fix Released
#1849198 CVE-2018-14599: libX11: Off-by-one error in XListExtensions in ListExt.c
StarlingX 274
High
Fix Released
#1849199 CVE-2018-14600: libX11: Out of Bounds write in XListExtensions in ListExt.c
StarlingX 274
High
Fix Released
#1849201 CVE-2018-16402: elfutils: Double-free due to double decompression
StarlingX 274
High
Fix Released
#1849203 CVE-2018-8780: ruby: Unintentional directory traversal by poisoned NULL byte in Dir
StarlingX 274
High
Fix Released
#1849205 CVE-2019-0160: OVMF: overflows with long file names and invalid UDF media
StarlingX 278
High
Fix Released
#1849206 CVE-2019-11810: kernel: a NULL pointer dereference in drivers/scsi/megaraid/megaraid_sas_base.c leading to DoS
StarlingX 274
High
Fix Released
#1849210 CVE-2019-5953: wget: do_conversion() buffer overflow
StarlingX 274
High
Fix Released
#1852825 CVE-2019-14287: sudo: can bypass certain policy blacklists
StarlingX 272
High
Fix Released
#1853017 After keystone admin password changed, user account locked
StarlingX 14
High
Fix Released
#1860193 Add nospectre_v1 to kernel boot args and provide config option for users to remove it if desired
StarlingX 268
High
Fix Released
#1865565 Cant access dex client when all the dex pods running on standby controller
StarlingX 12
High
Fix Released
#1877125 system https_enabled is True, but admin/public endpoint are http
StarlingX 10
High
Fix Released
#1877138 DC system controller admin endpoint is http, not https by default
StarlingX 14
High
Fix Released
#1877179 Re-visit decision lockout of sysadmin and keystone admin on Nx failed logins due to Denial-Of-Service considerations
StarlingX 8
High
Fix Released
#1881425 CVE-2015-2716: expat: Buffer overflow in the XML parser
StarlingX 260
High
Fix Released
#1881426 CVE-2018-18751: gettext: double free in default_add_message
StarlingX 260
High
Fix Released
#1881429 CVE-2019-15916: kernel: memory leak in register_queue_kobjects
StarlingX 6
High
Fix Released
#1882117 Remove the dependency between docker registry auth and keystone admin user
StarlingX 8
High
Fix Released
#1894870 etcd instance not secured
StarlingX 268
High
Fix Released
#1902149 CVE-2019-5482: curl: heap overflow in TFTP
StarlingX 258
High
Fix Released
#1902993 CVE-2017-12652: libpng: does not check length of chunks
StarlingX 256
High
Fix Released
#1902995 CVE-2019-12450: glib2: file_copy_fallback does not restrict file permissions
StarlingX 256
High
Fix Released
#1902997 CVE-2018-20843: expat: XML input leads to high RAM and CPU
StarlingX 6
High
Fix Released
#1906470 CVE-2019-11068: libxslt: bypass of protection mechanism
StarlingX 256
High
Fix Released
#1906471 CVE-2019-17006: nss: crypto primitives missing length checks
StarlingX 256
High
Fix Released
#1918154 CVE-2020-10878: perl: perl before 5.30.3 has an integer overflow
StarlingX 256
High
Fix Released
#1921511 kubernetes-ca cert/key are replaced by etcd-ca cert/key
StarlingX 6
High
Fix Released
#1926372 CVE-2021-26937 screen segfault
StarlingX 256
High
Fix Released
#1937288 cert-rotation cron job doesn't renew certs in 3 conf files
StarlingX 6
High
Fix Released
#1945997 CVE-2021-31535 libX11: missing request length checks
StarlingX 256
High
Fix Released
#1947462 secret-observer cron job pods does not work on ipv6
StarlingX 6
High
Fix Released
#1975520 Debian: mtcAgent segfaults when handling barbican secret fetch failures
StarlingX 6
High
Fix Released
#1982723 Debian: CVE-2022-29155: openldap: OpenLDAP SQL injection
StarlingX 6
High
Fix Released
#1993832 StarlingX | Puppet error - Duplicate declaration during ansible playbook
StarlingX 6
High
Fix Released
#1998370 cert-mon fails to monitor platform cert changes
StarlingX 6
High
Fix Released
#2006409 [Debian] CVE: CVE-2022-4337 / CVE-2022-4338: openvswitch: multiple CVEs
StarlingX 256
High
Fix Released
#2006410 [Debian] CVE: CVE-2022-3094 / CVE-2022-3736 / CVE-2022-3924: bind: multiple CVEs
StarlingX 256
High
Fix Released
#2009332 [Debian] CVE: CVE-2023-23916: curl: An allocation of resources without limits or throttling vulnerability
StarlingX 256
High
Fix Released
#2009333 [Debian] CVE: CVE-2022-25147: apr-util: Integer Overflow or Wraparound vulnerability
StarlingX 256
High
Fix Released
#2009334 [Debian] CVE: CVE-2023-25725: haproxy : may allow a bypass of access control
StarlingX 256
High
Fix Released
#2009336 [Debian] CVE: CVE-2022-4450/CVE-2023-0215: openssl: multi CVEs
StarlingX 256
High
Fix Released
#2012865 [Debian] CVE: CVE-2006-20001/CVE-2023-25690/CVE-2022-36760/CVE-2022-37436/CVE-2023-27522: apache2: multi CVEs
StarlingX 256
High
Fix Released
#2012866 [Debian] CVE: CVE-2022-24963: apr: Integer Overflow or Wraparound vulnerability
StarlingX 256
1 → 75 of 455 results First • Previous • • Last
Bug supervisor:
starlingx bugs