sys-cluster

Security Bug Reports

• sys-cluster/csync2: Authentication bypass in HELLO command when SSL enabled (CVE-2019-{15522,15523})

  718550 - Assigned to Gentoo Security
• <sys-cluster/crmsh-4.5.0: multiple vulnerabilities

  765352 - Assigned to Gentoo Security
• sys-cluster/kube-apiserver: webhook redirect vulnerability

  813645 - Assigned to Gentoo Security
• sys-cluster/teleport: multiple vulnerabilities

  813702 - Assigned to Gentoo Security
• <sys-cluster/keepalived-2.2.7: dbus access control bypass (CVE-2021-44225)

  827342 - Assigned to Gentoo Security
• <sys-cluster/kubectl-1.26.0: lacks escape/meta/control sequence filtering in terminal output

  830714 - Assigned to Gentoo Security
• sys-cluster/ceph: volume does not respect configured osd_dmcrypt_key_size

  831047 - Assigned to Gentoo Security
• sys-cluster/teleport: remote code execution

  866356 - Assigned to Gentoo Security
• sys-cluster/glusterfs: multiple vulnerabilities

  897926 - Assigned to Jaco Kroon
• sys-cluster/ceph: RGW crash

  905339 - Assigned to Gentoo Security
• <sys-cluster/kops-1.28.2: account credential leakage into containers

  909091 - Assigned to Gentoo Security
• <sys-cluster/pmix-4.2.8: root privilege escalation

  914381 - Assigned to Gentoo Security
• <sys-cluster/ceph-17.2.7: improperly verified POST keys

  918410 - Assigned to Gentoo Security
• <sys-cluster/kubelet-{1.27.9,1.28.5}: privilege escalation in windows nodes

  918665 - Assigned to Gentoo Security
• sys-cluster/kube-apiserver: authentication bypass vulnerability

  919131 - Assigned to Gentoo Security
• sys-cluster/libqb: buffer overflow via long log messages

  919157 - Assigned to Gentoo Security
• sys-cluster/slurm: multiple vulnerabilities

  920104 - Assigned to Gentoo Security
• sys-cluster/nomad: multiple vulnerabilities

  925029 - Assigned to Gentoo Security