Inclusion of Sensitive Information in Log Files in go-retryablehttp - CVE-2024-6104

Vulnerability identifier: #VU94616

CSH Severity: Low

CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-6104

CWE-ID: CWE-532

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due to software stores sensitive information into log files. A local user can read the log files and gain access to sensitive data obtain from HTTP requests.

go-retryablehttp
SUSE Linux Enterprise Server 15 SP3
SUSE Linux Enterprise Server 15 SP4
SUSE Linux Enterprise Server 15 SP5
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Manager Proxy Module
SUSE Linux Enterprise Micro
SUSE Manager Client Tools for SLE Micro
SUSE Linux Enterprise Micro for Rancher
openSUSE Leap Micro
SUSE Enterprise Storage
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
Anolis OS
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
SUSE Manager Client Tools for SLE
SUSE Linux Enterprise Server for the Raspberry Pi
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise High Performance Computing
SUSE Package Hub 15
Containers Module
Basesystem Module
openSUSE Leap
openEuler
Fedora
IBM Concert Software
Netcool Operations Insight
Cluster Observability Operator
APEX Cloud Platform for Red Hat OpenShift
Red Hat OpenShift Dev Spaces
OpenShift Logging
Terraform
Financial Transaction Manager
Red Hat OpenShift Container Platform
toolbox-tests
toolbox
toolbox (Red Hat package)
mgrctl-debuginfo
mgrctl
mgrctl-bash-completion
mgrctl-zsh-completion
mgrctl-lang
firewalld-prometheus-config
udica
conmon-rs (Red Hat package)
wasmedge (Red Hat package)
golang-github-prometheus-promu (Red Hat package)
slirp4netns (Red Hat package)
runc
runc (Red Hat package)
slirp4netns
oci-seccomp-bpf-hook
rekor-debuginfo
rekor
containernetworking-plugins (Red Hat package)
containernetworking-plugins
opentofu
aardvark-dns
fuse-overlayfs (Red Hat package)
netavark
skopeo (Red Hat package)
fuse-overlayfs
crun
crun (Red Hat package)
skopeo-zsh-completion
skopeo
skopeo-bash-completion
skopeo-fish-completion
skopeo-debuginfo
skopeo-tests
cri-tools (Red Hat package)
cri-o (Red Hat package)
buildah (Red Hat package)
buildah
buildah-tests
NetworkManager (Red Hat package)
containers-common
containers-common (Red Hat package)
doctl
python-werkzeug (Red Hat package)
conmon (Red Hat package)
conmon
cosign-zsh-completion
cosign
cosign-bash-completion
cosign-debuginfo
cosign-fish-completion
oath-toolkit (Red Hat package)
haproxy (Red Hat package)
ignition (Red Hat package)
golang-github-prometheus-prometheus
container-selinux
container-selinux (Red Hat package)
python3-criu
crit
criu
criu-libs
criu-devel
cephadm-ansible (Red Hat package)
libslirp
libslirp-devel
libslirp (Red Hat package)
podman (Red Hat package)
python3-podman
podman-docker
podman
podman-catatonit
podman-gvproxy
podman-plugins
podman-remote
podman-tests
podmansh
podman-help
podman-debuginfo
podman-debugsource
podman-remote-debuginfo
openshift (Red Hat package)
openshift-clients (Red Hat package)
openshift4-aws-iso (Red Hat package)
ose-aws-ecr-image-credential-provider (Red Hat package)
ose-azure-acr-image-credential-provider (Red Hat package)
ose-gcp-gcr-image-credential-provider (Red Hat package)
openshift-ansible (Red Hat package)
golang-github-acme-lego
python2-rhnlib
python3-rhnlib
spacecmd
kernel (Red Hat package)
kernel-rt (Red Hat package)
grafana (Red Hat package)
ceph (Red Hat package)
ovn24.03 (Red Hat package)
ovn24.09 (Red Hat package)
cockpit-podman
APEX Cloud Platform for Microsoft Azure
watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component
watsonx Assistant Cartridge
IBM Netezza for Cloud Pak for Data
Red Hat OpenShift GitOps
Multicluster Engine for Kubernetes
OpenShift Data Foundation (formerly OpenShift Container Storage)
Red Hat Ceph Storage

Install updates from vendor's website.

go-retryablehttp - update to 0.7.7
IBM Concert Software - update to 1.0.5
Netcool Operations Insight - update to 1.6.15
Terraform - update to 1.9.3
Red Hat OpenShift Container Platform - addressed in versions 4.12.63, 4.12.64, 4.12.65, 4.13.46, 4.13.48, 4.13.49, 4.13.51, 4.13.52, 4.13.55, 4.14.33, 4.14.34, 4.14.35, 4.14.36, 4.14.38, 4.14.44, 4.14.54, 4.15.21, 4.15.24, 4.15.27, 4.15.31, 4.15.42, 4.16.3, 4.16.5, 4.16.7, 4.16.10, 4.16.26, 4.17.0, 4.17.7
toolbox-tests - update to 0.0.99.5-2.0.1
toolbox - update to 0.0.99.5-2.0.1
toolbox (Red Hat package) - addressed in versions 0.1.0-3.rhaos4.17.el8, 0.1.2-1.rhaos4.17.el9
mgrctl-debuginfo - addressed in versions 0.1.21-1.8.1, 0.1.21-150000.1.8.2
mgrctl - addressed in versions 0.1.21-1.8.1, 0.1.21-150000.1.8.2
mgrctl-bash-completion - addressed in versions 0.1.21-1.8.1, 0.1.21-150000.1.8.2
mgrctl-zsh-completion - addressed in versions 0.1.21-1.8.1, 0.1.21-150000.1.8.2
mgrctl-lang - update to 0.1.21-150000.1.8.2
firewalld-prometheus-config - addressed in versions 0.1-150000.3.56.1, 0.1-150100.4.20.1
udica - update to 0.2.6-21
Cluster Observability Operator - update to 0.4.1
conmon-rs (Red Hat package) - addressed in versions 0.6.3-1.rhaos4.17.el8, 0.6.3-1.rhaos4.17.el9
wasmedge (Red Hat package) - update to 0.14.0-1.rhaos4.14.el9
golang-github-prometheus-promu (Red Hat package) - update to 0.16.0-17.gitf6c51c9.el9
slirp4netns (Red Hat package) - update to 1.1.8-3.rhaos4.17.el8
runc - update to 1.1.12-4.0.1
runc (Red Hat package) - addressed in versions 1.1.13-2.rhaos4.17.el8, 1.1.13-3.rhaos4.13.el8, 1.1.13-3.rhaos4.13.el9, 1.1.13-4.rhaos4.17.el9
slirp4netns - update to 1.2.3-1
oci-seccomp-bpf-hook - update to 1.2.10-1
rekor-debuginfo - update to 1.3.10-150400.4.25.1
rekor - update to 1.3.10-150400.4.25.1
containernetworking-plugins (Red Hat package) - addressed in versions 1.4.0-3.rhaos4.13.el8, 1.4.0-3.rhaos4.17.el8
containernetworking-plugins - update to 1.4.0-5.0.1
APEX Cloud Platform for Microsoft Azure - update to 01.04.01.00
opentofu - addressed in versions 1.7.3-3.fc39, 1.7.3-3.fc40, 1.7.3-3.fc41, 1.8.0-1.fc39, 1.8.0-1.fc40
aardvark-dns - update to 1.10.0-2.0.1
fuse-overlayfs (Red Hat package) - update to 1.10-3.rhaos4.17.el8
netavark - update to 1.10.3-1.0.1
skopeo (Red Hat package) - addressed in versions 1.11.3-2.rhaos4.13.el8, 1.11.3-2.rhaos4.13.el9, 1.16.0-2.rhaos4.17.el8, 1.16.0-2.rhaos4.17.el9, 1.16.1-1.el9
Red Hat OpenShift GitOps - update to 1.12.6
fuse-overlayfs - update to 1.13-1.0.1
crun - update to 1.14.3-2
crun (Red Hat package) - addressed in versions 1.14.3-2.rhaos4.17.el8, 1.14.3-2.rhaos4.17.el9
skopeo-zsh-completion - update to 1.14.4-150300.11.16.1
skopeo - update to 1.14.4-150300.11.16.1
skopeo-bash-completion - update to 1.14.4-150300.11.16.1
skopeo-fish-completion - update to 1.14.4-150300.11.16.1
skopeo-debuginfo - update to 1.14.4-150300.11.16.1
skopeo-tests - update to 1.14.5-3.0.1
skopeo - update to 1.14.5-3.0.1
cri-tools (Red Hat package) - addressed in versions 1.26.0-6.el8, 1.26.0-6.el9, 1.30.0-4.el8, 1.30.0-4.el9
cri-o (Red Hat package) - addressed in versions 1.26.5-20.rhaos4.13.git2e90133.el8, 1.26.5-20.rhaos4.13.git2e90133.el9, 1.27.8-3.rhaos4.14.git107168f.el8, 1.27.8-3.rhaos4.14.git107168f.el9, 1.30.5-7.rhaos4.17.git2e89940.el8, 1.30.5-7.rhaos4.17.git2e89940.el9
buildah (Red Hat package) - addressed in versions 1.29.1-4.rhaos4.13.el8, 1.29.1-4.rhaos4.13.el9, 1.33.7-2.rhaos4.17.el8, 1.33.7-2.rhaos4.17.el9
buildah - update to 1.34.0-1
buildah-tests - update to 1.34.0-1
NetworkManager (Red Hat package) - update to 1.42.2-24.el9_2
containers-common - update to 1-82.0.1
containers-common (Red Hat package) - addressed in versions 1-86.rhaos4.17.el8, 1-86.rhaos4.17.el9
doctl - update to 1.120.0-1.fc42
python-werkzeug (Red Hat package) - update to 2.0.3-6.el9
conmon (Red Hat package) - addressed in versions 2.1.7-4.rhaos4.13.el8, 2.1.7-4.rhaos4.13.el9, 2.1.12-4.rhaos4.17.el8, 2.1.12-4.rhaos4.17.el9
conmon - update to 2.1.10-1
cosign-zsh-completion - update to 2.5.0-150400.3.27.1
cosign - update to 2.5.0-150400.3.27.1
cosign-bash-completion - update to 2.5.0-150400.3.27.1
cosign-debuginfo - update to 2.5.0-150400.3.27.1
cosign-fish-completion - update to 2.5.0-150400.3.27.1
Multicluster Engine for Kubernetes - update to 2.5.7
oath-toolkit (Red Hat package) - update to 2.6.12-1.el9cp
haproxy (Red Hat package) - addressed in versions 2.6.13-4.rhaos4.15.el8, 2.8.10-1.rhaos4.17.el9
ignition (Red Hat package) - update to 2.15.0-9.rhaos4.13.el9
golang-github-prometheus-prometheus - addressed in versions 2.45.6-1.53.1, 2.45.6-150000.3.56.1, 2.45.6-150100.4.20.1
container-selinux - update to 2.229.0-2
container-selinux (Red Hat package) - addressed in versions 2.231.0-3.rhaos4.17.el8, 2.231.0-3.rhaos4.17.el9
APEX Cloud Platform for Red Hat OpenShift - update to 03.02.04.00
Red Hat OpenShift Dev Spaces - update to 3.17.0
python3-criu - update to 3.18-5.0.1
crit - update to 3.18-5.0.1
criu - update to 3.18-5.0.1
criu-libs - update to 3.18-5.0.1
criu-devel - update to 3.18-5.0.1
OpenShift Data Foundation (formerly OpenShift Container Storage) - addressed in versions 4, 4.13.12, 4.14.11, 4.16.2
cephadm-ansible (Red Hat package) - update to 4.1.4-1.el9cp
libslirp - update to 4.4.0-2
libslirp-devel - update to 4.4.0-2
libslirp (Red Hat package) - update to 4.4.0-5.rhaos4.17.el8
podman (Red Hat package) - addressed in versions 4.4.1-12.rhaos4.13.el8, 4.4.1-13.rhaos4.13.el9, 4.4.1-16.4.rhaos4.14.el8, 4.4.1-16.4.rhaos4.14.el9, 4.4.1-26.2.rhaos4.15.el8, 4.4.1-26.2.rhaos4.15.el9, 4.9.4-8.rhaos4.16.el8, 4.9.4-9.rhaos4.16.el9, 5.2.0-2.rhaos4.17.el9, 5.2.0-3.rhaos4.17.el8
python3-podman - update to 4.9.0-2
podman-docker - update to 4.9.4-12.0.1
podman - update to 4.9.4-12.0.1
podman-catatonit - update to 4.9.4-12.0.1
podman-gvproxy - update to 4.9.4-12.0.1
podman-plugins - update to 4.9.4-12.0.1
podman-remote - update to 4.9.4-12.0.1
podman-tests - update to 4.9.4-12.0.1
podman-remote - update to 4.9.4-13
podman-tests - update to 4.9.4-13
podman - update to 4.9.4-13
podmansh - update to 4.9.4-13
podman-docker - update to 4.9.4-13
podman-help - update to 4.9.4-13
podman-plugins - update to 4.9.4-13
podman-gvproxy - update to 4.9.4-13
podman-debuginfo - update to 4.9.4-13
podman-debugsource - update to 4.9.4-13
podman-docker - addressed in versions 4.9.5-150300.9.34.1, 4.9.5-150300.9.43.1, 4.9.5-150300.9.46.1, 4.9.5-150400.4.30.1, 4.9.5-150400.4.38.1, 4.9.5-150400.4.44.1, 4.9.5-150500.3.15.1, 4.9.5-150500.3.18.1, 4.9.5-150500.3.34.2, 4.9.5-150500.3.40.1
podman-remote - addressed in versions 4.9.5-150300.9.34.1, 4.9.5-150300.9.43.1, 4.9.5-150300.9.46.1, 4.9.5-150400.4.30.1, 4.9.5-150400.4.38.1, 4.9.5-150400.4.44.1, 4.9.5-150500.3.15.1, 4.9.5-150500.3.18.1, 4.9.5-150500.3.34.2, 4.9.5-150500.3.40.1
podman-remote-debuginfo - addressed in versions 4.9.5-150300.9.34.1, 4.9.5-150300.9.43.1, 4.9.5-150300.9.46.1, 4.9.5-150400.4.30.1, 4.9.5-150400.4.38.1, 4.9.5-150400.4.44.1, 4.9.5-150500.3.15.1, 4.9.5-150500.3.18.1, 4.9.5-150500.3.34.2, 4.9.5-150500.3.40.1
podman - addressed in versions 4.9.5-150300.9.34.1, 4.9.5-150300.9.43.1, 4.9.5-150300.9.46.1, 4.9.5-150400.4.30.1, 4.9.5-150400.4.38.1, 4.9.5-150400.4.44.1, 4.9.5-150500.3.15.1, 4.9.5-150500.3.18.1, 4.9.5-150500.3.34.2, 4.9.5-150500.3.40.1
podman-debuginfo - addressed in versions 4.9.5-150300.9.34.1, 4.9.5-150300.9.43.1, 4.9.5-150300.9.46.1, 4.9.5-150400.4.30.1, 4.9.5-150400.4.38.1, 4.9.5-150400.4.44.1, 4.9.5-150500.3.15.1, 4.9.5-150500.3.18.1, 4.9.5-150500.3.34.2, 4.9.5-150500.3.40.1
podmansh - addressed in versions 4.9.5-150300.9.34.1, 4.9.5-150300.9.43.1, 4.9.5-150300.9.46.1, 4.9.5-150400.4.30.1, 4.9.5-150400.4.38.1, 4.9.5-150400.4.44.1, 4.9.5-150500.3.15.1, 4.9.5-150500.3.18.1, 4.9.5-150500.3.34.2, 4.9.5-150500.3.40.1
openshift (Red Hat package) - addressed in versions 4.13.0-202408092110.p0.ge0953cc.assembly.stream.el8, 4.13.0-202408092110.p0.ge0953cc.assembly.stream.el9, 4.17.0-202409121706.p0.gd3adea4.assembly.stream.el8, 4.17.0-202409121706.p0.gd3adea4.assembly.stream.el9
openshift-clients (Red Hat package) - addressed in versions 4.14.0-202407260844.p0.g44b3ac2.assembly.stream.el8, 4.14.0-202407260844.p0.g44b3ac2.assembly.stream.el9, 4.16.0-202407182006.p0.gada2fa8.assembly.stream.el8, 4.16.0-202407182006.p0.gada2fa8.assembly.stream.el9, 4.17.0-202409111134.p0.gbc58b3a.assembly.stream.el8, 4.17.0-202409111134.p0.gbc58b3a.assembly.stream.el9
openshift4-aws-iso (Red Hat package) - update to 4.17.0-202404161335.p0.gd2acdd5.assembly.stream.el8
ose-aws-ecr-image-credential-provider (Red Hat package) - addressed in versions 4.17.0-202406261807.p0.g8c77f41.assembly.stream.el8, 4.17.0-202406261807.p0.g8c77f41.assembly.stream.el9
ose-azure-acr-image-credential-provider (Red Hat package) - addressed in versions 4.17.0-202406261807.p0.gb9204e2.assembly.stream.el8, 4.17.0-202406261807.p0.gb9204e2.assembly.stream.el9
ose-gcp-gcr-image-credential-provider (Red Hat package) - addressed in versions 4.17.0-202408061615.p0.g8ce997d.assembly.stream.el8, 4.17.0-202408061615.p0.g8ce997d.assembly.stream.el9
openshift-ansible (Red Hat package) - addressed in versions 4.17.0-202409041737.p0.g7fe7411.assembly.stream.el8, 4.17.0-202409041737.p0.g7fe7411.assembly.stream.el9
golang-github-acme-lego - update to 4.17.4-4.fc41
python2-rhnlib - update to 5.0.4-21.52.1
python3-rhnlib - update to 5.0.4-150000.3.46.1
spacecmd - addressed in versions 5.0.9-38.147.1, 5.0.9-150000.3.124.1
watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component - update to 5.1.1
watsonx Assistant Cartridge - update to 5.1.1
OpenShift Logging - addressed in versions 5.6.24, 5.8.13, 5.9.7, 6.0.1
kernel (Red Hat package) - addressed in versions 5.14.0-284.77.1.el9_2, 5.14.0-284.80.1.el9_2, 5.14.0-427.28.1.el9_4
kernel-rt (Red Hat package) - addressed in versions 5.14.0-284.77.1.rt14.362.el9_2, 5.14.0-284.80.1.rt14.365.el9_2
Red Hat Ceph Storage - update to 8.1
grafana (Red Hat package) - update to 10.2.6-4.el9
IBM Netezza for Cloud Pak for Data - update to 11.2.3.3
ceph (Red Hat package) - update to 19.2.1-222.el9cp
ovn24.03 (Red Hat package) - update to 24.03.1-36.el9fdp
ovn24.09 (Red Hat package) - update to 24.09.0 beta.26.el9fdp
cockpit-podman - update to 84.1-1

• https://discuss.hashicorp.com/c/security

• Information disclosure in HashiCorp go-retryablehttp
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.15
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• SUSE update for podman
• SUSE update for podman
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.16
• Multiple vulnerabilities in Terraform
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.15 packages
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.16 packages
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13
• Fedora 41 update for golang-github-acme-lego
• SUSE update for podman
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Fedora 41 update for opentofu
• Fedora 39 update for opentofu
• Fedora 40 update for opentofu
• Fedora 39 update for opentofu
• Fedora 40 update for opentofu
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Red Hat Enterprise Linux 8 update for the container-tools:rhel8 module
• Red Hat Enterprise Linux 8 update for the container-tools:rhel8 module
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.16
• Inclusion of Sensitive Information in Log Files in Red Hat OpenShift Container Platform 4.15
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.12
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.12
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13 packages
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.12
• SUSE update for podman
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.15
• SUSE update for SUSE Manager Client Tools
• SUSE update for SUSE Manager Client Tools
• SUSE update for golang-github-prometheus-prometheus
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.16
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.12
• Multiple vulnerabilities in Multicluster Engine for Kubernetes 2.5
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13
• Multiple vulnerabilities in OpenShift Logging 5.8
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage) 4.16
• Multiple vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage) 4.14
• Multiple vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage) 4.13
• Multiple vulnerabilities in OpenShift Logging 5.6
• Multiple vulnerabilities in OpenShift Logging 5.9
• SUSE update for podman
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.17 packages
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.17
• Multiple vulnerabilities in Cluster Observability Operator
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13
• Multiple vulnerabilities in OpenShift Logging 6.0
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.12
• Red Hat Enterprise Linux 9 update for skopeo
• Red Hat Enterprise Linux 9 update for grafana
• Multiple vulnerabilities in Red Hat OpenShift Dev Spaces 3.17
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.17
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.16
• Fedora 42 update for doctl
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.15
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in IBM Netezza for Cloud Pak for Data (on Cloud)
• openEuler 24.03 LTS SP1 update for podman
• openEuler 24.03 LTS update for podman
• SUSE update for skopeo
• SUSE update for podman
• Multiple vulnerabilities in Red Hat OpenShift Container Platform release 4.13
• SUSE update for podman
• Multiple vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage)
• SUSE update for podman
• IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component update for go-retryablehttp
• Multiple vulnerabilities in IBM Concert Software
• SUSE update for podman
• SUSE update for podman
• SUSE update for podman
• Anolis OS update for container-tools:an8 module
• SUSE update for rekor
• SUSE update for cosign
• Dell APEX Cloud Platform for Red Hat OpenShift update for third-party components
• Dell APEX Cloud Platform for Microsoft Azure update for third-party components
• Multiple vulnerabilities in Red Hat Ceph Storage 8
• Multiple vulnerabilities in Red Hat Ceph Storage 8
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in IBM Financial Transaction Manager (FTM) for RedHat OpenShift
• Multiple vulnerabilities in Netcool Operations Insight