docs: update security bulletin #3598

JamieM-Spectro · 2024-08-16T18:11:45Z

Describe the Change

This PR ....

Changed Pages

💻 Security bulletins

Jira Tickets

🎫 Jira Ticket

Backports

Can this PR be backported?

Yes. Remember to add the relevant backport labels to your PR.
No. Please leave a short comment below about why this PR cannot be backported.

netlify · 2024-08-16T18:12:21Z

✅ Deploy Preview for docs-spectrocloud ready!

Name	Link
🔨 Latest commit	`875713e`
🔍 Latest deploy log	https://app.netlify.com/sites/docs-spectrocloud/deploys/66bfac1becd44400083e95c2
😎 Deploy Preview	https://deploy-preview-3598--docs-spectrocloud.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

…ectrocloud/librarium into 8-16-24-4.4.b.-CVE-release-JF

github-actions

Remaining comments which cannot be posted as a review comment to avoid GitHub Rate Limit

vale

github-actions · 2024-08-16T18:33:13Z

docs/docs-content/security-bulletins/reports/cve-2019-1010022.md

+
+## Last Update
+
+8/16/2024


🚫 [vale] _{reported by reviewdog 🐶}
[Google.DateFormat] Use 'July 31, 2016' format, not '8/16/2024'.

github-actions · 2024-08-16T18:33:13Z

docs/docs-content/security-bulletins/reports/cve-2019-1010022.md

+
+## NIST CVE Summary
+
+GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass stack guard protection. The


🚫 [vale] _{reported by reviewdog 🐶}
[Vale.Spelling] Did you really mean 'Libc'?

github-actions · 2024-08-16T18:33:13Z

docs/docs-content/security-bulletins/reports/cve-2019-1010022.md

+## NIST CVE Summary
+
+GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass stack guard protection. The
+component is: nptl. The attack vector is: Exploit stack buffer overflow vulnerability and use this bypass vulnerability


🚫 [vale] _{reported by reviewdog 🐶}
[Vale.Spelling] Did you really mean 'nptl'?

github-actions · 2024-08-16T18:33:13Z

docs/docs-content/security-bulletins/reports/cve-2019-1010022.md

+
+## Our Official Summary
+
+Waiting on a fix from third party mongodb vendor.


🚫 [vale] _{reported by reviewdog 🐶}
[Vale.Spelling] Did you really mean 'mongodb'?

github-actions · 2024-08-16T18:33:13Z

docs/docs-content/security-bulletins/reports/cve-2019-1010022.md

+
+## Revision History
+
+- 1.0 08/16/2024 Initial Publication


🚫 [vale] _{reported by reviewdog 🐶}
[Google.DateFormat] Use 'July 31, 2016' format, not '08/16/2024'.

github-actions · 2024-08-16T18:33:15Z

docs/docs-content/security-bulletins/reports/cve-2021-39537.md

+## Revision History
+
+- 1.0 08/16/2024 Initial Publication
+- 2.0 08/17/2024 Added Palette VerteX 4.4.12 to Affected Products


🚫 [vale] _{reported by reviewdog 🐶}
[Google.DateFormat] Use 'July 31, 2016' format, not '08/17/2024'.

github-actions · 2024-08-16T18:33:15Z

docs/docs-content/security-bulletins/reports/cve-2023-45142.md

@@ -14,7 +14,7 @@ tags: ["security", "cve"]

 ## Last Update

-7/16/2024
+8/16/2024


🚫 [vale] _{reported by reviewdog 🐶}
[Google.DateFormat] Use 'July 31, 2016' format, not '8/16/2024'.

github-actions · 2024-08-16T18:33:15Z

docs/docs-content/security-bulletins/reports/cve-2023-45142.md

+
+## Revision History
+
+- 1.0 07/16/2024 Initial Publication


🚫 [vale] _{reported by reviewdog 🐶}
[Google.DateFormat] Use 'July 31, 2016' format, not '07/16/2024'.

github-actions · 2024-08-16T18:33:15Z

docs/docs-content/security-bulletins/reports/cve-2023-45142.md

+## Revision History
+
+- 1.0 07/16/2024 Initial Publication
+- 2.0 08/16/2024 Added palette VerteX 4.4.12 to Affected Products


🚫 [vale] _{reported by reviewdog 🐶}
[Google.DateFormat] Use 'July 31, 2016' format, not '08/16/2024'.

github-actions · 2024-08-16T18:33:15Z

docs/docs-content/security-bulletins/reports/cve-2023-39325.md

@@ -14,7 +14,7 @@ tags: ["security", "cve"]

 ## Last Update

-7/16/2024
+8/16/2024


🚫 [vale] _{reported by reviewdog 🐶}
[Google.DateFormat] Use 'July 31, 2016' format, not '8/16/2024'.

github-actions

Remaining comments which cannot be posted as a review comment to avoid GitHub Rate Limit

vale

github-actions · 2024-08-16T18:47:55Z

docs/docs-content/security-bulletins/reports/cve-2023-39325.md

+
+## Revision History
+
+- 1.0 07/16/2024 Initial Publication


🚫 [vale] _{reported by reviewdog 🐶}
[Google.DateFormat] Use 'July 31, 2016' format, not '07/16/2024'.

github-actions · 2024-08-16T18:47:55Z

docs/docs-content/security-bulletins/reports/cve-2023-39325.md

+## Revision History
+
+- 1.0 07/16/2024 Initial Publication
+- 2.0 08/16/2024 Added palette VerteX 4.4.12 to Affected Products


🚫 [vale] _{reported by reviewdog 🐶}
[Google.DateFormat] Use 'July 31, 2016' format, not '08/16/2024'.

github-actions · 2024-08-16T18:47:55Z

docs/docs-content/security-bulletins/reports/cve-2019-9923.md

+
+## Last Update
+
+8/16/2024


🚫 [vale] _{reported by reviewdog 🐶}
[Google.DateFormat] Use 'July 31, 2016' format, not '8/16/2024'.

github-actions · 2024-08-16T18:47:55Z

docs/docs-content/security-bulletins/reports/cve-2019-9923.md

+
+## NIST CVE Summary
+
+Pax_decode_header in sparse.c in GNU Tar before 1.32 had a NULL pointer dereference when parsing certain archives that


🚫 [vale] _{reported by reviewdog 🐶}
[Vale.Spelling] Did you really mean 'Pax_decode_header'?

github-actions · 2024-08-16T18:47:55Z

docs/docs-content/security-bulletins/reports/cve-2019-9923.md

+
+## NIST CVE Summary
+
+Pax_decode_header in sparse.c in GNU Tar before 1.32 had a NULL pointer dereference when parsing certain archives that


🚫 [vale] _{reported by reviewdog 🐶}
[Vale.Spelling] Did you really mean 'dereference'?

github-actions · 2024-08-16T18:47:56Z

docs/docs-content/security-bulletins/reports/cve-2023-0464.md

+## Revision History
+
+- 1.0 07/16/2024 Initial Publication
+- 2.0 08/16/2024 Added palette VerteX 4.4.12 to Affected Products


🚫 [vale] _{reported by reviewdog 🐶}
[Google.DateFormat] Use 'July 31, 2016' format, not '08/16/2024'.

github-actions · 2024-08-16T18:47:56Z

docs/docs-content/security-bulletins/reports/cve-2024-21626.md

@@ -14,7 +14,7 @@ tags: ["security", "cve"]

 ## Last Update

-7/16/2024
+8/16/2024


🚫 [vale] _{reported by reviewdog 🐶}
[Google.DateFormat] Use 'July 31, 2016' format, not '8/16/2024'.

github-actions · 2024-08-16T18:47:57Z

docs/docs-content/security-bulletins/reports/cve-2024-21626.md

+
+## Revision History
+
+- 1.0 07/16/2024 Initial Publication


🚫 [vale] _{reported by reviewdog 🐶}
[Google.DateFormat] Use 'July 31, 2016' format, not '07/16/2024'.

github-actions · 2024-08-16T18:47:57Z

docs/docs-content/security-bulletins/reports/cve-2024-21626.md

+## Revision History
+
+- 1.0 07/16/2024 Initial Publication
+- 2.0 08/16/2024 Added palette VerteX 4.4.12 to Affected Products


🚫 [vale] _{reported by reviewdog 🐶}
[Google.DateFormat] Use 'July 31, 2016' format, not '08/16/2024'.

github-actions · 2024-08-16T18:47:57Z

docs/docs-content/security-bulletins/reports/cve-2019-19244.md

+
+## Last Update
+
+08/16/2024


🚫 [vale] _{reported by reviewdog 🐶}
[Google.DateFormat] Use 'July 31, 2016' format, not '08/16/2024'.

github-actions

Remaining comments which cannot be posted as a review comment to avoid GitHub Rate Limit

vale

github-actions · 2024-08-16T19:18:17Z

docs/docs-content/security-bulletins/reports/cve-2018-20657.md

+
+## Last Update
+
+08/16/2024


🚫 [vale] _{reported by reviewdog 🐶}
[Google.DateFormat] Use 'July 31, 2016' format, not '08/16/2024'.

github-actions · 2024-08-16T19:18:17Z

docs/docs-content/security-bulletins/reports/cve-2018-20657.md

+
+## NIST CVE Summary
+
+The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, has a memory leak


🚫 [vale] _{reported by reviewdog 🐶}
[Vale.Spelling] Did you really mean 'demangle_template'?

github-actions · 2024-08-16T19:18:18Z

docs/docs-content/security-bulletins/reports/cve-2018-20657.md

+
+## NIST CVE Summary
+
+The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, has a memory leak


🚫 [vale] _{reported by reviewdog 🐶}
[Vale.Spelling] Did you really mean 'libiberty'?

github-actions · 2024-08-16T19:18:18Z

docs/docs-content/security-bulletins/reports/cve-2018-20657.md

+
+## NIST CVE Summary
+
+The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, has a memory leak


🚫 [vale] _{reported by reviewdog 🐶}
[Vale.Spelling] Did you really mean 'Binutils'?

github-actions · 2024-08-16T19:18:18Z

docs/docs-content/security-bulletins/reports/cve-2018-20657.md

+## NIST CVE Summary
+
+The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, has a memory leak
+via a crafted string, leading to a denial of service (memory consumption), as demonstrated by cxxfilt, a related issue


🚫 [vale] _{reported by reviewdog 🐶}
[Vale.Spelling] Did you really mean 'cxxfilt'?

github-actions · 2024-08-16T19:18:19Z

docs/docs-content/security-bulletins/reports/cve-2021-42694.md

+
+## Last Update
+
+8/16/2024


🚫 [vale] _{reported by reviewdog 🐶}
[Google.DateFormat] Use 'July 31, 2016' format, not '8/16/2024'.

github-actions · 2024-08-16T19:18:19Z

docs/docs-content/security-bulletins/reports/cve-2021-42694.md

+## NIST CVE Summary
+
+An issue was discovered in the character definitions of the Unicode Specification through 14.0. The specification allows
+an adversary to produce source code identifiers such as function names using homoglyphs that render visually identical


🚫 [vale] _{reported by reviewdog 🐶}
[Vale.Spelling] Did you really mean 'homoglyphs'?

github-actions · 2024-08-16T19:18:19Z

docs/docs-content/security-bulletins/reports/cve-2021-42694.md

+software dependencies invoked deceptively in downstream software. NOTE: the Unicode Consortium offers the following
+alternative approach to presenting this concern. An issue is noted in the nature of international text that can affect
+applications that implement support for The Unicode Standard (all versions). Unless mitigated, an adversary could
+produce source code identifiers using homoglyph characters that render visually identical to but are distinct from a


🚫 [vale] _{reported by reviewdog 🐶}
[Vale.Spelling] Did you really mean 'homoglyph'?

github-actions · 2024-08-16T19:18:20Z

docs/docs-content/security-bulletins/reports/cve-2021-42694.md

+target identifier. In this way, an adversary could inject adversarial identifier definitions in upstream software that
+are not detected by human reviewers and are invoked deceptively in downstream software. The Unicode Consortium has
+documented this class of security vulnerability in its document, Unicode Technical Report #36, Unicode Security
+Considerations. The Unicode Consortium also provides guidance on mitigations for this class of issues in Unicode


🚫 [vale] _{reported by reviewdog 🐶}
[Vale.Spelling] Did you really mean 'mitigations'?

github-actions · 2024-08-16T19:18:20Z

docs/docs-content/security-bulletins/reports/cve-2021-42694.md

+
+## Our Official Summary
+
+Waiting on a fix from third party mongodb & calico vendors.


🚫 [vale] _{reported by reviewdog 🐶}
[Vale.Spelling] Did you really mean 'mongodb'?

…ectrocloud/librarium into 8-16-24-4.4.b.-CVE-release-JF

github-actions

Remaining comments which cannot be posted as a review comment to avoid GitHub Rate Limit

vale

github-actions · 2024-08-16T19:45:42Z

docs/docs-content/security-bulletins/reports/cve-2021-42694.md

+
+## Revision History
+
+- 1.0 08/16/2024 Initial Publication


🚫 [vale] _{reported by reviewdog 🐶}
[Google.DateFormat] Use 'July 31, 2016' format, not '08/16/2024'.

github-actions · 2024-08-16T19:45:42Z

docs/docs-content/security-bulletins/reports/cve-2021-42694.md

+## Revision History
+
+- 1.0 08/16/2024 Initial Publication
+- 2.0 08/17/2024 Added Palette VerteX 4.4.12 to Affected Products


🚫 [vale] _{reported by reviewdog 🐶}
[Google.DateFormat] Use 'July 31, 2016' format, not '08/17/2024'.

github-actions · 2024-08-16T19:45:42Z

docs/docs-content/security-bulletins/reports/cve-2020-36325.md

+
+## Last Update
+
+8/16/2024


🚫 [vale] _{reported by reviewdog 🐶}
[Google.DateFormat] Use 'July 31, 2016' format, not '8/16/2024'.

github-actions · 2024-08-16T19:45:42Z

docs/docs-content/security-bulletins/reports/cve-2020-36325.md

+
+## NIST CVE Summary
+
+An issue was discovered in Jansson through 2.13.1. Due to a parsing error in json_loads, there's an out-of-bounds


🚫 [vale] _{reported by reviewdog 🐶}
[Vale.Spelling] Did you really mean 'Jansson'?

github-actions · 2024-08-16T19:45:42Z

docs/docs-content/security-bulletins/reports/cve-2020-36325.md

+
+## NIST CVE Summary
+
+An issue was discovered in Jansson through 2.13.1. Due to a parsing error in json_loads, there's an out-of-bounds


🚫 [vale] _{reported by reviewdog 🐶}
[Vale.Spelling] Did you really mean 'json_loads'?

github-actions · 2024-08-16T19:45:43Z

docs/docs-content/security-bulletins/reports/cve-2018-20225.md

+## Revision History
+
+- 1.0 08/16/2024 Initial Publication
+- 2.0 08/17/2024 Added palette VerteX 4.4.12 to Affected Products


🚫 [vale] _{reported by reviewdog 🐶}
[Google.DateFormat] Use 'July 31, 2016' format, not '08/17/2024'.

github-actions · 2024-08-16T19:45:43Z

docs/docs-content/security-bulletins/reports/cve-2019-9674.md

+
+## Last Update
+
+08/16/2024


🚫 [vale] _{reported by reviewdog 🐶}
[Google.DateFormat] Use 'July 31, 2016' format, not '08/16/2024'.

github-actions · 2024-08-16T19:45:43Z

docs/docs-content/security-bulletins/reports/cve-2019-9674.md

+
+## Our Official Summary
+
+Waiting on a fix from third party mongodb vendor


🚫 [vale] _{reported by reviewdog 🐶}
[Vale.Spelling] Did you really mean 'mongodb'?

github-actions · 2024-08-16T19:45:43Z

docs/docs-content/security-bulletins/reports/cve-2019-9674.md

+
+## Revision History
+
+- 1.0 08/16/2024 Initial Publication


🚫 [vale] _{reported by reviewdog 🐶}
[Google.DateFormat] Use 'July 31, 2016' format, not '08/16/2024'.

github-actions · 2024-08-16T19:45:43Z

docs/docs-content/security-bulletins/reports/cve-2019-9674.md

+## Revision History
+
+- 1.0 08/16/2024 Initial Publication
+- 2.0 08/17/2024 Added palette VerteX 4.4.12 to Affected Products


🚫 [vale] _{reported by reviewdog 🐶}
[Google.DateFormat] Use 'July 31, 2016' format, not '08/17/2024'.

* Added 1 CVE for 8-9-24 * Added Official Summary to 8-9-24 CVE * CVEs for new release * 4.4.b cve changes added-JF * docs: make format * docs: make format * docs: fix table link issue * docs: add 24790 * 4.4.b minor cve updates --------- Co-authored-by: frederickjoi <[email protected]> Co-authored-by: Lenny Chen <[email protected]> Co-authored-by: Lenny Chen <[email protected]>

* fix: release 4.4.b (#3479) * fix: new path release * docs: PEM-5475 (#3481) * docs: PEM-5475 * docs: added tooltip * docs: PLT-1321 Remove Validator Palette CLI Command (#3515) * docs: PLT-1321 * docs: add release note statement * chore: fix redirect * docs: Apply suggestions from code review Co-authored-by: caroldelwing <[email protected]> * chore: prettier --------- Co-authored-by: caroldelwing <[email protected]> * docs: document node drain configmap PCP-3323 (#3575) * docs: document node drain configmap PCP-3323 * docs: fix vale PCP-3323 * Apply suggestions from code review Co-authored-by: caroldelwing <[email protected]> * docs: review changes PCP-3323 * docs: fix yaml indentation PCP-3323 * docs: adjust drain intro --------- Co-authored-by: caroldelwing <[email protected]> * docs: Audit logs (#3564) * docs: audit log first draft * docs: autid log edit * docs: fix syntax issue * docs: fix syntax issue * docs: minor edits * docs: make minor change * Apply suggestions from code review Co-authored-by: Yuliia Horbenko <[email protected]> * docs: minor edits * docs: minor edit --------- Co-authored-by: Lenny Chen <[email protected]> Co-authored-by: Yuliia Horbenko <[email protected]> * docs: add core dump file docs (#3563) * docs: add core dump file docs * Update docs/docs-content/clusters/edge/local-ui/host-management/download-core-dump.md * Apply suggestions from code review Co-authored-by: Yuliia Horbenko <[email protected]> --------- Co-authored-by: Lenny Chen <[email protected]> Co-authored-by: Yuliia Horbenko <[email protected]> * docs: update certificate management self-hosted PEM-5422 (#3566) * docs: update certificate management self-hosted PEM-5422 * docs: fix phrasing * Optimised images with calibre/image-actions * docs: add manual reconciliation details PEM-5422 * docs: undo image delete PEM-5422 * Optimised images with calibre/image-actions * docs: update reconciliation details * docs: restructure pages PEM-5422 * Optimised images with calibre/image-actions * docs: fix vale * Apply suggestions from code review Co-authored-by: Yuliia Horbenko <[email protected]> * docs: apply further edits from code review PEM-5422 * docs: adjust reconcile points PEM-5422 * docs: fix misspelling * docs: adjust intro --------- Co-authored-by: vault-token-factory-spectrocloud[bot] <133815545+vault-token-factory-spectrocloud[bot]@users.noreply.github.com> Co-authored-by: Yuliia Horbenko <[email protected]> * docs: validate user data (#3548) * docs: first commit * docs: user data reorg * docs: user-data reorg * docs: fix broken links * docs: add validate docs * docs: fix vale issues * docs: add validate steps * docs: finish adding reference * docs: minor edits * docs: add install parameter explanation * docs: implement suggestions * docs: change validate step * docs: clarify build includes user data validation --------- Co-authored-by: Lenny Chen <[email protected]> * docs: add enhancement language (#3565) Co-authored-by: Lenny Chen <[email protected]> * docs: Document the usage of VMO in airgapped self-hosted instances (#3584) * docs: Draft for VMO in airgap installations * Optimised images with calibre/image-actions * Optimised images with calibre/image-actions * Apply suggestions from code review Co-authored-by: caroldelwing <[email protected]> * docs: fix formatting --------- Co-authored-by: vault-token-factory-spectrocloud[bot] <133815545+vault-token-factory-spectrocloud[bot]@users.noreply.github.com> Co-authored-by: Adelina Simion <[email protected]> Co-authored-by: caroldelwing <[email protected]> * docs: add airgap VMO profile creation PEM-5497 (#3583) * docs: add airgap VMO profile creation PEM-5497 * docs: add registry field description PEM-5497 * docs: adjust the private registry section PEM-5497 * Apply suggestions from code review Co-authored-by: Yuliia Horbenko <[email protected]> * docs: fix formatting PEM-5497 * docs: fix indentation PEM-5497 * docs: add link to install vmo guide PEM-5497 * docs: adjust wording PEM-5497 --------- Co-authored-by: Yuliia Horbenko <[email protected]> * docs: update edge api (#3562) Co-authored-by: Lenny Chen <[email protected]> * Palette Go SDK (#3577) * docs: create sdk page * docs: add palette sdk reference page and guides * docs: add note to update the output * docs: add app output * Apply suggestions from code review Co-authored-by: Adelina Simion <[email protected]> * docs: suggestions from code review * docs: add auth methods * docs: update demo code * docs: apply suggestions from code review --------- Co-authored-by: Adelina Simion <[email protected]> * docs: modify core dump (#3585) * docs: add core dump file docs * Update docs/docs-content/clusters/edge/local-ui/host-management/download-core-dump.md * Apply suggestions from code review Co-authored-by: Yuliia Horbenko <[email protected]> * docs: minor changes * docs: netlify preview * Apply suggestions from code review Co-authored-by: caroldelwing <[email protected]> * docs: make format --------- Co-authored-by: Lenny Chen <[email protected]> Co-authored-by: Yuliia Horbenko <[email protected]> Co-authored-by: caroldelwing <[email protected]> * docs: validate user data mod (#3587) * docs: first commit * docs: user data reorg * docs: user-data reorg * docs: fix broken links * docs: add validate docs * docs: fix vale issues * docs: add validate steps * docs: finish adding reference * docs: minor edits * docs: add install parameter explanation * docs: implement suggestions * docs: change validate step * docs: clarify build includes user data validation * docs: add clarifications for user-data * docs: format * docs: make format * Apply suggestions from code review Co-authored-by: caroldelwing <[email protected]> * docs: finish validating user data --------- Co-authored-by: Lenny Chen <[email protected]> Co-authored-by: caroldelwing <[email protected]> * docs: update oss licenses DOC-1343 (#3589) * docs: update oss licenses DOC-1343 * docs: update punctuation DOC-1343 * docs: remove trailing break * docs: fix formatting * docs: add no proxy list configuration for VMO PEM-5233 (#3586) * docs: add no proxy list configuration for VMO PEM-5233 * docs: adjust wording PEM-5233 * Apply suggestions from code review Co-authored-by: caroldelwing <[email protected]> * docs: fix formatting --------- Co-authored-by: caroldelwing <[email protected]> * docs: OPS-4863 (#3523) * docs: OPS-4863 * chore: save * docs: reorganize folders and guides * docs: add non-airgap rhel guide, restructure folders * docs: grammar fix * docs: fix broken links * docs: add rocky guide, add comp matrix * docs: fix more broken links * docs: vale suggestions * docs: apply suggestions from code review * docs: remove airgap references * docs: fix broken links * docs: add reference to compat matrix --------- Co-authored-by: Carolina Delwing Rosa <[email protected]> * docs: update api files (#3593) Co-authored-by: Lenny Chen <[email protected]> * docs: update downloads with new artifacts DOC-1335 (#3594) * docs: reformat downloads (#3596) * [4.4.b] Binaries References and Upgrade Path (#3595) * docs: document upgrade paths, cli references * docs: attempt to fix prettier issue * docs: revert changes in spectro-downloads file * docs: parsed api files (#3599) Co-authored-by: Lenny Chen <[email protected]> * docs: release notes 4.4.b (#3547) * docs: preliminary drafts * docs: updates to release notes * docs: update rl notes * docs: fix broken table * docs: add breaking change * docs: edit rl notes * docs: modify release notes * docs: update release notes * docs: update known issues * docs: add troubleshooting * docs: fix syntax issue * docs: add links to features * docs: add links * docs: fix links * docs: fix typos * docs: add compolent compatibility * docs: update compatibility matrix * Apply suggestions from code review Co-authored-by: caroldelwing <[email protected]> * docs: address review comments * docs: minor modification * Apply suggestions from code review Co-authored-by: Adelina Simion <[email protected]> * docs: make format --------- Co-authored-by: Lenny Chen <[email protected]> Co-authored-by: caroldelwing <[email protected]> Co-authored-by: Adelina Simion <[email protected]> * docs: 4.4.b final CVE revision (#3601) * Added 1 CVE for 8-9-24 * Added Official Summary to 8-9-24 CVE * CVEs for new release * 4.4.b cve changes added-JF * docs: make format * docs: make format * docs: fix table link issue * docs: add 24790 * 4.4.b minor cve updates * final cve revision 4.4.b * docs: fix format issue --------- Co-authored-by: JamieM-Spectro <[email protected]> Co-authored-by: Lenny Chen <[email protected]> Co-authored-by: Lenny Chen <[email protected]> --------- Co-authored-by: caroldelwing <[email protected]> Co-authored-by: Adelina Simion <[email protected]> Co-authored-by: Lenny Chen <[email protected]> Co-authored-by: Lenny Chen <[email protected]> Co-authored-by: Yuliia Horbenko <[email protected]> Co-authored-by: vault-token-factory-spectrocloud[bot] <133815545+vault-token-factory-spectrocloud[bot]@users.noreply.github.com> Co-authored-by: frederickjoi <[email protected]> Co-authored-by: JamieM-Spectro <[email protected]> * docs: CVE update 8 9 24 (#3567) * Added 1 CVE for 8-9-24 * Added Official Summary to 8-9-24 CVE * docs: add CVE * docs: fix formatting issue * docs: adjust jest config * docs: remove jest changes * docs: remove redundant file * Update docs/docs-content/security-bulletins/reports/cve-2024-0743.md Co-authored-by: caroldelwing <[email protected]> --------- Co-authored-by: frederickjoi <[email protected]> Co-authored-by: Lenny Chen <[email protected]> Co-authored-by: caroldelwing <[email protected]> * docs: update security bulletin (#3598) * Added 1 CVE for 8-9-24 * Added Official Summary to 8-9-24 CVE * CVEs for new release * 4.4.b cve changes added-JF * docs: make format * docs: make format * docs: fix table link issue * docs: add 24790 * 4.4.b minor cve updates --------- Co-authored-by: frederickjoi <[email protected]> Co-authored-by: Lenny Chen <[email protected]> Co-authored-by: Lenny Chen <[email protected]> * docs: CVE update 8/6/24 (#3559) * docs: add 2 new cves to security bulletin * 2 new CVEs on 08032024 * Updated with our official summaries * docs: make format --------- Co-authored-by: Lenny Chen <[email protected]> Co-authored-by: JamieM-Spectro <[email protected]> --------- Co-authored-by: Karl Cardenas <[email protected]> Co-authored-by: caroldelwing <[email protected]> Co-authored-by: Lenny Chen <[email protected]> Co-authored-by: Lenny Chen <[email protected]> Co-authored-by: Yuliia Horbenko <[email protected]> Co-authored-by: vault-token-factory-spectrocloud[bot] <133815545+vault-token-factory-spectrocloud[bot]@users.noreply.github.com> Co-authored-by: frederickjoi <[email protected]> Co-authored-by: JamieM-Spectro <[email protected]>

vault-token-factory-spectrocloud · 2024-08-17T17:05:36Z

🎉 This PR is included in version 4.4.12 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

frederickjoi and others added 4 commits August 9, 2024 07:52

Added 1 CVE for 8-9-24

f4045d3

Added Official Summary to 8-9-24 CVE

3c3d8db

CVEs for new release

bd918db

4.4.b cve changes added-JF

682f845

JamieM-Spectro requested a review from a team as a code owner August 16, 2024 18:11

JamieM-Spectro requested review from addetz, lennessyy and caroldelwing August 16, 2024 18:11

frederickjoi and others added 3 commits August 16, 2024 11:17

Merge branch '8-16-24-4.4.b.-CVE-release-JF' of https://github.com/sp…

a0440e5

…ectrocloud/librarium into 8-16-24-4.4.b.-CVE-release-JF

docs: make format

99d7333

Merge branch 'master' into 8-16-24-4.4.b.-CVE-release-JF

8e41121

lennessyy changed the title ~~8 16 24 4.4.b. CVE release jf~~ docs: update security bulletin Aug 16, 2024

github-actions bot reviewed Aug 16, 2024

View reviewed changes

lennessyy added 2 commits August 16, 2024 11:35

docs: make format

3f7aa15

docs: fix table link issue

8c2c667

github-actions bot reviewed Aug 16, 2024

View reviewed changes

docs: add 24790

5786422

github-actions bot reviewed Aug 16, 2024

View reviewed changes

frederickjoi added 2 commits August 16, 2024 12:44

4.4.b minor cve updates

ed8e2e9

Merge branch '8-16-24-4.4.b.-CVE-release-JF' of https://github.com/sp…

875713e

…ectrocloud/librarium into 8-16-24-4.4.b.-CVE-release-JF

github-actions bot reviewed Aug 16, 2024

View reviewed changes

lennessyy approved these changes Aug 16, 2024

View reviewed changes

lennessyy merged commit 38f9a1b into master Aug 16, 2024
15 checks passed

lennessyy deleted the 8-16-24-4.4.b.-CVE-release-JF branch August 16, 2024 20:44

vault-token-factory-spectrocloud bot added the released label Aug 17, 2024


		## NIST CVE Summary

		GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass stack guard protection. The


		## Our Official Summary

		Waiting on a fix from third party mongodb vendor.


		## NIST CVE Summary

		Pax_decode_header in sparse.c in GNU Tar before 1.32 had a NULL pointer dereference when parsing certain archives that


		## NIST CVE Summary

		The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, has a memory leak


		## NIST CVE Summary

		An issue was discovered in Jansson through 2.13.1. Due to a parsing error in json_loads, there's an out-of-bounds

docs: update security bulletin #3598

docs: update security bulletin #3598

Conversation

JamieM-Spectro commented Aug 16, 2024 • edited by lennessyy Loading

Describe the Change

Changed Pages

Jira Tickets

Backports

netlify bot commented Aug 16, 2024 • edited Loading

✅ Deploy Preview for docs-spectrocloud ready!

github-actions bot left a comment

Choose a reason for hiding this comment

github-actions bot Aug 16, 2024

Choose a reason for hiding this comment

github-actions bot Aug 16, 2024

Choose a reason for hiding this comment

github-actions bot Aug 16, 2024

Choose a reason for hiding this comment

github-actions bot Aug 16, 2024

Choose a reason for hiding this comment

github-actions bot Aug 16, 2024

Choose a reason for hiding this comment

github-actions bot Aug 16, 2024

Choose a reason for hiding this comment

github-actions bot Aug 16, 2024

Choose a reason for hiding this comment

github-actions bot Aug 16, 2024

Choose a reason for hiding this comment

github-actions bot Aug 16, 2024

Choose a reason for hiding this comment

github-actions bot Aug 16, 2024

Choose a reason for hiding this comment

github-actions bot left a comment

Choose a reason for hiding this comment

github-actions bot Aug 16, 2024

Choose a reason for hiding this comment

github-actions bot Aug 16, 2024

Choose a reason for hiding this comment

github-actions bot Aug 16, 2024

Choose a reason for hiding this comment

github-actions bot Aug 16, 2024

Choose a reason for hiding this comment

github-actions bot Aug 16, 2024

Choose a reason for hiding this comment

github-actions bot Aug 16, 2024

Choose a reason for hiding this comment

github-actions bot Aug 16, 2024

Choose a reason for hiding this comment

github-actions bot Aug 16, 2024

Choose a reason for hiding this comment

github-actions bot Aug 16, 2024

Choose a reason for hiding this comment

github-actions bot Aug 16, 2024

Choose a reason for hiding this comment

github-actions bot left a comment

Choose a reason for hiding this comment

github-actions bot Aug 16, 2024

Choose a reason for hiding this comment

github-actions bot Aug 16, 2024

Choose a reason for hiding this comment

github-actions bot Aug 16, 2024

Choose a reason for hiding this comment

github-actions bot Aug 16, 2024

Choose a reason for hiding this comment

github-actions bot Aug 16, 2024

Choose a reason for hiding this comment

github-actions bot Aug 16, 2024

Choose a reason for hiding this comment

github-actions bot Aug 16, 2024

Choose a reason for hiding this comment

github-actions bot Aug 16, 2024

Choose a reason for hiding this comment

github-actions bot Aug 16, 2024

Choose a reason for hiding this comment

github-actions bot Aug 16, 2024

Choose a reason for hiding this comment

github-actions bot left a comment

Choose a reason for hiding this comment

github-actions bot Aug 16, 2024

Choose a reason for hiding this comment

JamieM-Spectro commented Aug 16, 2024 •

edited by lennessyy

Loading

netlify bot commented Aug 16, 2024 •

edited

Loading