Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities

Summary IBM Cloud Transformation Advisor has addressed multiple security vulnerabilities including those in Node.js, swagger, jQuery, Netty, Apache commons, validator.js, Chalk ansi-regex, Json-schema, Java SE and IBM WebSphere Application Server Liberty. Vulnerability Details CVEID:CVE-2021-4453...

[SECURITY] Fedora 36 Update: capnproto-0.9.2-1.fc36

Cap=EF=BF=BD=EF=BF=BD=EF=BF=BDn Proto is an insanely fast data interchange fo rmat and capability-based RPC system. Think JSON, except binary. Or think Protocol Buffers, except faster. In fact, in benchmarks, Cap=EF=BF=BD=EF=BF=BD=EF=BF=BDn Proto is INFINITY TIMES faster than Protocol Buffers. Th...

SUSE-SU-2022:4280-1 Security update for sudo

This update for sudo fixes the following issues: Security fixes: - CVE-2022-43995: Fixed a potential heap-based buffer over-read when entering a password of seven characters or fewer and using the crypt password backend bsc1204986. Other: - Make sure SIGCHLD is not ignored when sudo is executed;...

SUSE-SU-2022:4240-1 Security update for sudo

This update for sudo fixes the following issues: Security fixes: - CVE-2022-43995: Fixed a potential heap-based buffer over-read when entering a password of seven characters or fewer and using the crypt password backend bsc1204986. Other: - Make sure SIGCHLD is not ignored when sudo is executed;...

CVE-2022-41932

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to make XWiki create many new schemas and fill them with tables just by using a crafted user identifier in the login form. This may lead to degraded database performance. The...

CVE-2022-41932

Summary: CVE-2022-41932 affects XWiki Platform and allows an attacker to trigger creation of many new schemas and tables by supplying a crafted user identifier in the login form, causing degraded database performance. The underlying issue is a design/logic flaw that enables uncontrolled resource ...

PT-2022-26163 · Xwiki · Xwiki Platform

Name of the Vulnerable Software and Affected Versions: XWiki Platform versions prior to 13.10.8 XWiki Platform versions prior to 14.4.2 XWiki Platform versions prior to 14.6RC1 Description: The issue allows an attacker to create many new schemas and fill them with tables by using a crafted user...

NVIDIA GPU Display Driver code-related vulnerabilities

The NVIDIA GPU Display Driver is a driver from NVIDIA that is used to interactively support the graphics card display module in the operating system. A security vulnerability exists in NVIDIA GPU Display Driver, which originates from a null pointer dereference issue at the kernel schema level...

NVIDIA GPU Display Driver buffer error vulnerability

NVIDIA GPU Display Driver is a driver from NVIDIA Corporation that is used to provide interactive support for graphics card display modules in operating systems. A security vulnerability exists in NVIDIA GPU Display Driver that originates from an out-of-bounds read issue at the kernel schema laye...

Path traversal

A Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in spacewalk/Uyuni of SUSE Linux Enterprise Module for SUSE Manager Server 4.2, SUSE Linux Enterprise Module for SUSE Manager Server 4.3, SUSE Manager Server 4.2 allows remote attackers to read files...

Updates on Spring Cloud Stream 4.0.0 Schema Registry Support

This blog gives an update on the Schema Registry support that is part of Spring Cloud Stream version 4.0.x. Many enterprises use a schema registry for schema evolution use cases, such as the Confluent Schema Registry. Starting with version 1.1.x of Spring Cloud Stream until 3.0.0, we provided a...

EulerOS 2.0 SP10 : python-ldap (EulerOS-SA-2022-2694)

According to the versions of the python-ldap package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - python-ldap before 3.4.0 is vulnerable to a denial of service when ldap.schema is used for untrusted schema definitions, because of a regula...

azureml-webservice-schema (>=0.1.57, <=1.0.33), mmtfpyspark (0.2.7) +1 more potentially affected by CVE-2022-31777 via pyspark (2.3.1)

pyspark PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - azureml-webservice-schema =0.1.57, =2.0.3, =2.1.1 Source cves: CVE-2022-31777 Source advisory: OSV:GHSA-43XG-8WMJ-CW8H...

azureml-webservice-schema (>=0.1.57, <=1.0.33), mmtfpyspark (0.2.7) +1 more potentially affected by CVE-2022-31777 via pyspark (2.3.1)

pyspark PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - azureml-webservice-schema =0.1.57, =2.0.3, =2.1.1 Source cves: CVE-2022-31777 Source advisory: OSV:PYSEC-2022-42976...

SUSE-SU-2022:3750-1 Security update for SUSE Manager Server 4.3

This update fixes the following issues: cobbler: - Consider case of 'nextserver' being a hostname during migration of Cobbler collections. - Fix problem with 'proxyurlext' setting being None type. - Fix settings migration schema to work while upgrading on existing running Uyuni and SUSE Manager...

Error: "File too large" when upload customized login schema xml file to ADC

1. When add login schema via ADC cli, below erro will prompt: 2. When add login schema via, below GUI error will show:...

mysql: Server: Information Schema unspecified vulnerability (CPU Jan 2022)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Information Schema. Supported versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

mysql: Server: Information Schema unspecified vulnerability (CPU Jan 2022)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Information Schema. Supported versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

Moderate: Red Hat Security Advisory: RHOSDT 2.6.0 operator/operand containers Security Update

An update is now available for Red Hat Openshift distributed tracing 2.6.0 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

MAL-2022-7045 Malicious code in wasm-ion-schema-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c16eba09da01fa54cb0a3ea2a06b80a6afbcc2368cc8acfc2cc08052bc045cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...