java-11-openjdk security and bug fix update

1:11.0.11.0.9-1.0.1 - link atomic for ix86 build 1:11.0.11.0.9-1 - Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz1937736 1:11.0.11.0.9-0 - Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed...

RemoteClinic 2 - 'Multiple' Cross-Site Scripting (XSS)

Exploit Title: RemoteClinic 2 - 'Multiple' Cross-Site Scripting XSS Exploit Author: nu11secur1ty Debug: g3ck0dr1v3r Date: 04/21/2021 Vendor Homepage: https://remoteclinic.io/ Software Link: https://github.com/remoteclinic/RemoteClinic CVE: CVE-2021-30044 + Exploit Source:...

java-1.8.0-openjdk security update

1:1.8.0.292.b10-0 - Update to aarch64-shenandoah-jdk8u292-b10 GA - Update release notes for 8u292-b10. - Update tarball generation script to use PR3822 which handles JDK-8233228 & JDK-8035166 changes - Remove RH1868759 patch as this is now resolved upstream by JDK-8258833. - Re-organise S/390...

SUSE: Security Advisory (SUSE-SU-2018:1251-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2021:0226-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2021:0227-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

label-studio (>=1.1.0 <=1.2.0), thenewboston-ml-dev (=0.2.3) potentially affected by CVE-2021-30459 via django-debug-toolbar (=3.2.0)

django-debug-toolbar PYPI version =3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-debug-toolbar and may be impacted: - label-studio =1.1.0, =1.2.0 - thenewboston-ml-dev =0.2.3 Source cves: CVE-2021-30459 Source advisory:...

GHSA-PGHF-347X-C2GJ SQL Injection via in django-debug-toolbar

Impact With Django Debug Toolbar attackers are able to execute SQL by changing the rawsql input of the SQL explain, analyze or select forms and submitting the form. NOTE: This is a high severity issue for anyone using the toolbar in a production environment. Generally the Django Debug Toolbar tea...

mc4ep-lavender (>=0.8.0 <=0.17.0), muses-lpdp (>=0.2.2 <=0.4.0rc1590080566) +2 more potentially affected by CVE-2021-30459 via django-debug-toolbar (>=2.1.0 <=2.2.0)

django-debug-toolbar PYPI version =2.1.0, =0.8.0, =0.2.2, =0.1.2, =0.1.6 Source cves: CVE-2021-30459 Source advisory: OSV:GHSA-PGHF-347X-C2GJ...

openSUSE: Security Advisory for sudo (openSUSE-SU-2021:0169-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

GO-2021-0065 Unauthorized credential disclosure in k8s.io/kubernetes and k8s.io/client-go

Authorization tokens may be inappropriately logged if the verbosity level is set to a debug level...

GO-2021-0064 Unauthorized credential disclosure via debug logs in k8s.io/kubernetes and k8s.io/client-go

Authorization tokens may be inappropriately logged if the verbosity level is set to a debug level. This is due to an incomplete fix for CVE-2019-11250...

CVE-2021-30459

A SQL Injection issue in the SQL Panel in Jazzband Django Debug Toolbar before 1.11.1, 2.x before 2.2.1, and 3.x before 3.2.1 allows attackers to execute SQL statements by changing the rawsql input field of the SQL explain, analyze, or select form...

CVE-2021-30459

A SQL Injection issue in the SQL Panel in Jazzband Django Debug Toolbar before 1.11.1, 2.x before 2.2.1, and 3.x before 3.2.1 allows attackers to execute SQL statements by changing the rawsql input field of the SQL explain, analyze, or select form...

PYSEC-2021-10

A SQL Injection issue in the SQL Panel in Jazzband Django Debug Toolbar before 1.11.1, 2.x before 2.2.1, and 3.x before 3.2.1 allows attackers to execute SQL statements by changing the rawsql input field of the SQL explain, analyze, or select form...

Sql injection

A SQL Injection issue in the SQL Panel in Jazzband Django Debug Toolbar before 1.11.1, 2.x before 2.2.1, and 3.x before 3.2.1 allows attackers to execute SQL statements by changing the rawsql input field of the SQL explain, analyze, or select form...

mc4ep-lavender (>=0.8.0 <=0.17.0), muses-lpdp (>=0.2.2 <=0.4.0rc1590080566) +2 more potentially affected by CVE-2021-30459 via django-debug-toolbar (>=2.1.0 <=2.2.0)

django-debug-toolbar PYPI version =2.1.0, =0.8.0, =0.2.2, =0.1.2, =0.1.6 Source cves: CVE-2021-30459 Source advisory: OSV:PYSEC-2021-10...

label-studio (>=1.1.0 <=1.2.0), thenewboston-ml-dev (=0.2.3) potentially affected by CVE-2021-30459 via django-debug-toolbar (=3.2.0)

django-debug-toolbar PYPI version =3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-debug-toolbar and may be impacted: - label-studio =1.1.0, =1.2.0 - thenewboston-ml-dev =0.2.3 Source cves: CVE-2021-30459 Source advisory: OSV:PYSEC-2021-10...

PYSEC-2021-10

A SQL Injection issue in the SQL Panel in Jazzband Django Debug Toolbar before 1.11.1, 2.x before 2.2.1, and 3.x before 3.2.1 allows attackers to execute SQL statements by changing the rawsql input field of the SQL explain, analyze, or select form...

CVE-2021-30459

A SQL Injection issue in the SQL Panel in Jazzband Django Debug Toolbar before 1.11.1, 2.x before 2.2.1, and 3.x before 3.2.1 allows attackers to execute SQL statements by changing the rawsql input field of the SQL explain, analyze, or select form...