OPENSUSE-SU-2024:10708-1 cvs-1.12.13-1.14 on GA media

These are all security issues fixed in the cvs-1.12.13-1.14 package on the GA media of openSUSE Tumbleweed...

Sylius 安全漏洞

Sylius is an open source e-commerce platform based on the Symfony framework from the Polish company Sylius. A security vulnerability exists in Sylius version 1.12.13, which stems from a cross-site scripting XSS vulnerability in the Province field...

CVE-2024-29376

Summary: CVE-2024-29376 affects Sylius 1.12.13 with a Cross Site Scripting (XSS) flaw in the Province field of the Address Book (and Checkout flow). The public advisories confirm an XSS payload risk when saving/entering the Province value, enabling script execution on affected pages. Root cause d...

AZL-34584 CVE-2024-26147 affecting package cert-manager for versions less than 1.12.13-1

Helm is a package manager for Charts for Kubernetes. Versions prior to 3.14.2 contain an uninitialized variable vulnerability when Helm parses index and plugin yaml files missing expected content. When either an index.yaml file or a plugins plugin.yaml file were missing all metadata a panic would...

Cilium Security Vulnerabilities

Cilium is an open source software. It is used to provide and transparently secure network connectivity and load balancing between application workloads, such as application containers or processes. Cilium suffers from a security vulnerability that stems from allowing an attacker to conduct a deni...

[SECURITY] Fedora 30 Update: golang-1.12.13-1.fc30

The Go Programming Language...

ALPINE-CVE-2016-6511

epan/proto.c in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to cause a denial of service OpenFlow dissector large loop via a crafted packet...

CVE-2016-6507

Public technical details for CVE-2016-6507 are not present in the connected documents. The provided materials reference the vulnerability in Wireshark 1.12.x, but do not include concrete root cause, affected versions beyond 1.12.x, mitigations, or patch information.

Debian DSA-2407-1 : cvs - heap overflow

It was discovered that a malicious CVS server could cause a heap overflow in the CVS client, potentially allowing the server to execute arbitrary code on the client. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...