Fedora: Security Advisory for golang-starlark (FEDORA-2022-ba365d3703)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 36 Update: golang-starlark-0-0.7.20210113gite81fc95.fc36

Starlark is a dialect of Python intended for use as a configuration language. Like Python, it is an untyped dynamic language with high-level data types, first-class functions with lexical scope, and garbage collection. Unlike CPython, independent Starlark threads execute in parallel, so Starlark...

org.jenkins-ci.plugins:parallel-test-executor (1.6-beta-2) potentially affected by CVE-2022-34176 via org.jenkins-ci.plugins:junit (1.2-beta-2)

org.jenkins-ci.plugins:junit MAVEN version 1.2-beta-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:junit and may be impacted: - org.jenkins-ci.plugins:parallel-test-executor 1.6-beta-2 Source cves: CVE-2022-34176 Source...

org.jenkins-ci.plugins:cisco-spark (>=1.1.0, <=1.1.1), org.jenkins-ci.plugins:meliora-testlab (1.16) +1 more potentially affected by CVE-2022-34176 via org.jenkins-ci.plugins:junit (1.15)

org.jenkins-ci.plugins:junit MAVEN version 1.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:junit and may be impacted: - org.jenkins-ci.plugins:cisco-spark =1.1.0, =1.1.1 - org.jenkins-ci.plugins:meliora-testlab 1.16 -...

org.jenkins-ci.plugins:parallel-test-executor (1.6-beta-1) potentially affected by CVE-2022-34176 via org.jenkins-ci.plugins:junit (1.2-beta-1)

org.jenkins-ci.plugins:junit MAVEN version 1.2-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:junit and may be impacted: - org.jenkins-ci.plugins:parallel-test-executor 1.6-beta-1 Source cves: CVE-2022-34176 Source...

org.jenkins-ci.plugins:parallel-test-executor (>=1.10, <=1.12) potentially affected by CVE-2022-34176 via org.jenkins-ci.plugins:junit (1.22)

org.jenkins-ci.plugins:junit MAVEN version 1.22 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:junit and may be impacted: - org.jenkins-ci.plugins:parallel-test-executor =1.10, =1.12 Source cves: CVE-2022-34176 Source advisory:...

io.jenkins.plugins:tricentis-ci (>=1.0, <=1.3), org.jenkins-ci.plugins.workflow:workflow-cps (>=2.37, <=2.38) +3 more potentially affected by CVE-2022-30946 via org.jenkins-ci.plugins:script-security (1.30)

org.jenkins-ci.plugins:script-security MAVEN version 1.30 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.jenkins.plugins:tricentis-ci =1.0, =2.37, =1.22-beta-1, =1.10, =1.5, =1.6 Source...

USN-5413-1: Linux kernel vulnerabilities

Jeremy Cline discovered a use-after-free in the nouveau graphics driver of the Linux kernel during device removal. A privileged or physically proximate attacker could use this to cause a denial of service system crash. CVE-2020-27820 It was discovered that a race condition existed in the network...

USN-5413-1 linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities

Jeremy Cline discovered a use-after-free in the nouveau graphics driver of the Linux kernel during device removal. A privileged or physically proximate attacker could use this to cause a denial of service system crash. CVE-2020-27820 It was discovered that a race condition existed in the network...

PT-2022-37932

Уязвимость функции imx pd connector get modes модуля drivers/gpu/drm/imx/parallel-display.c драйвера поддержки инфраструктуры прямого рендеринга DRI ядра операционной системы Linux связана с неправильным освобождением памяти. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в...

d-clean (0.0.2), fabric3 (>=1.11.1.post1, <=1.12.0.post1) +4 more potentially affected by CVE-2022-24302 via paramiko (1.18.5)

paramiko PYPI version 1.18.5 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - d-clean 0.0.2 - fabric3 =1.11.1.post1, =1.0.2, =0.1.0.dev22, =0.1.0.dev27 - vr-server 6.11.0 - wazimap 2.1.0 Source cves: CVE-2022-24302 Source...

Updated mariadb packages fix security vulnerability

InnoDB - --skip-symbolic-links does not disallow .isl file creation MDEV-26870 - Indexed CHAR columns are broken with NOPAD collations MDEV-25440 - insert-intention lock conflicts with waiting ORDINARY lock MDEV-27025 - Crash recovery improvements MDEV-26784, MDEV-27022, MDEV-27183, MDEV-27610...

CVE-2021-42000

When a password reset or password change flow with an authentication policy is configured and the adapter in the reset or change policy supports multiple parallel reset flows, an existing user can reset another existing users password...

CVE-2021-42000

When a password reset or password change flow with an authentication policy is configured and the adapter in the reset or change policy supports multiple parallel reset flows, an existing user can reset another existing users password...

CVE-2021-42000

When a password reset or password change flow with an authentication policy is configured and the adapter in the reset or change policy supports multiple parallel reset flows, an existing user can reset another existing users password...

PT-2022-11527 · Ping Identity · Pingfederate

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue arises when a password reset or password change flow with an authentication policy is configured, and the adapter in the reset or change polic...

Ping Identity PingFederate security vulnerabilities

Ping Identity PingFederate is a flagship software-based federation server in the United States. It is used for identity management. PingFederate has a security vulnerability that stems from a faulty password reset process in the software. When a password reset or password modification process wit...

Intel Trace Analyzer and Collector buffer error vulnerability

Intel Trace Analyzer And Collector is a trace analyzer and collector from Intel USA. It is used to analyze Mpi behavior in parallel applications. Intel Trace Analyzer and Collector suffers from a buffer error vulnerability that stems from a potential security flaw in Intel Trace Analyzer and...

Intel Trace Analyzer and Collector buffer error vulnerability

Intel Trace Analyzer And Collector is a trace analyzer and collector from Intel USA. It is used to analyze Mpi behavior in parallel applications. Intel Trace Analyzer and Collector suffers from a buffer error vulnerability that stems from a potential security flaw in Intel Trace Analyzer and...

Denial of Service in Onionshare

Between September 26, 2021 and October 8, 2021, Radically Open Security conducted a penetration test of OnionShare 2.4, funded by the Open Technology Fund's Red Team lab. - Vulnerability ID: OTF-012 - Vulnerability type: Denial of Service - Threat level: Moderate Description: The receive mode...