SECURITY

USN-6295-1: Podman vulnerability It was discovered that Podman incorrectly handled certain supplementary groups. An attacker could possibly use this issue to expose sensitive information or execute binary code. Source: USN-6295-1: Podman vulnerability

USN-6294-1: HAProxy vulnerability Ben Kallus discovered that HAProxy incorrectly handled empty Content-Length headers. A remote attacker could possibly use this issue to manipulate the payload and bypass certain restrictions. Source: USN-6294-1: HAProxy vulnerability

USN-6293-1: OpenStack Heat vulnerability It was discovered that OpenStack Heat incorrectly handled certain hidden parameter values. A remote authenticated user could possibly use this issue to obtain sensitive data. Source: USN-6293-1: OpenStack Heat vulnerability

USN-6292-1: Ceph vulnerability It was discovered that Ceph incorrectly handled crash dumps. A local attacker could possibly use this issue to escalate privileges to root. Source: USN-6292-1: Ceph vulnerability

USN-6291-1: GStreamer vulnerability Hanno Bock discovered that GStreamer incorrecly handled certain datetime strings. An attacker could possibly use this issue to cause a denial of service or expose sensitive information. Source: USN-6291-1: GStreamer vulnerability