Bug 52418

Summary:	Необходимо закрыть CVE-2024-8185, CVE-2024-9180, CVE-2024-6468
Product:	Sisyphus	Reporter:	FelixZ <felix_z>
Component:	vault	Assignee:	bne <bne>
Status:	CLOSED FIXED	QA Contact:	qa-sisyphus
Severity:	normal
Priority:	P5	CC:	bne
Version:	unstable
Hardware:	x86_64
OS:	Linux

Description

FelixZ 2024-12-13 10:38:47 MSK

Прошу закрыть следующие уязвимости в пакете vault:
CVE-2024-8185 - https://discuss.hashicorp.com/t/hcsec-2024-26-vault-vulnerable-to-denial-of-service-through-memory-exhaustion-when-processing-raft-cluster-join-requests/71047
CVE-2024-9180 - https://discuss.hashicorp.com/t/hcsec-2024-21-vault-operators-in-root-namespace-may-elevate-their-privileges/70565
CVE-2024-6468 - https://discuss.hashicorp.com/t/hcsec-2024-14-vault-vulnerable-to-denial-of-service-when-setting-a-proxy-protocol-behavior/68518

Comment 1

Repository Robot 2024-12-15 21:08:24 MSK

vault-1.13.12-alt6 -> sisyphus:

 Sun Dec 15 2024 Nikolay Burykin <bne@altlinux> 1.13.12-alt6
 - Fixes: CVE-2024-8185, CVE-2024-9180, CVE-2024-6468 (Closes: #52418)