Read Time:17 Second

An improper signature verification vulnerability was found in coreos-installer. A specially crafted gzip installation image can bypass the image signature verification and as a consequence can lead to the installation of unsigned content. An attacker able to modify the original installation image can write arbitrary data, and achieve full access to the node being installed.

Read More

More Stories

vaultwarden-1.32.7-2.el9

FEDORA-EPEL-2025-90c1787ffb Packages in this update: vaultwarden-1.32.7-2.el9 Update description: Update to 1.32.7 Fix CVE-2024-56335 Fix CVE-2024-55226 Fix CVE-2024-55225 Fix CVE-2024-55224 Read...

pam-u2f-1.3.1-1.el9

FEDORA-EPEL-2025-b1223174a4 Packages in this update: pam-u2f-1.3.1-1.el9 Update description: pam-u2f fix to resolve CVE-2025-23013 (Partial Authentication Bypass). CVSS score 7.3 Read...

pam-u2f-1.3.1-1.fc40

FEDORA-2025-1bb4d2682b Packages in this update: pam-u2f-1.3.1-1.fc40 Update description: pam-u2f fix to resolve CVE-2025-23013 (Partial Authentication Bypass). CVSS score 7.3 Read...