sys-cluster

Security Bug Reports

• sys-cluster/csync2: Authentication bypass in HELLO command when SSL enabled (CVE-2019-{15522,15523})

  718550 - Assigned to Gentoo Security
• <sys-cluster/crmsh-4.5.0: multiple vulnerabilities

  765352 - Assigned to Gentoo Security
• sys-cluster/kube-apiserver: webhook redirect vulnerability

  813645 - Assigned to Gentoo Security
• sys-cluster/teleport: multiple vulnerabilities

  813702 - Assigned to Gentoo Security
• <sys-cluster/keepalived-2.2.7: dbus access control bypass (CVE-2021-44225)

  827342 - Assigned to Gentoo Security
• sys-cluster/ceph: volume does not respect configured osd_dmcrypt_key_size

  831047 - Assigned to Gentoo Security
• sys-cluster/teleport: remote code execution

  866356 - Assigned to Gentoo Security
• sys-cluster/glusterfs: multiple vulnerabilities

  897926 - Assigned to Jaco Kroon
• sys-cluster/ceph: RGW crash

  905339 - Assigned to Gentoo Security
• <sys-cluster/pmix-4.2.8: root privilege escalation

  914381 - Assigned to Gentoo Security
• <sys-cluster/ceph-17.2.7: improperly verified POST keys

  918410 - Assigned to Gentoo Security
• sys-cluster/kube-apiserver: authentication bypass vulnerability

  919131 - Assigned to Gentoo Security
• <sys-cluster/libqb-2.0.8: buffer overflow via long log messages

  919157 - Assigned to Gentoo Security
• sys-cluster/nomad: multiple vulnerabilities

  925029 - Assigned to Gentoo Security
• sys-cluster/slurm: Incorrect Authorization

  942684 - Assigned to Gentoo Security
• <sys-cluster/kubelet-{1.28.12,1.29.7,1.30.3,1.31.0}: Arbitrary command execution through gitRepo volume

  944204 - Assigned to Gentoo Security