Unable to create or update machine catalog in AWS Availability Zones of ap-southeast-2

Citrix Virtual Apps and Desktops 1912 fails to create\update machine catalog in AWS Availability Zones of ap-southeast-2 Create\Update machine catalog task fails in Availability Zone B with the below exception, but works fine for Availability Zone A and C. Error Id: XDDS:766A4A96 A volume service...

GHSA-HQ6Q-C2X6-HMCH vulnerabilities

Vulnerabilities for packages: ip-masq-agent, aws-efs-csi-driver-fips, kubernetes-dns-node-cache, spark-operator, prometheus-adapter, nodetaint, aws-efs-csi-driver, aws-ebs-csi-driver...

GHSA-HQ6Q-C2X6-HMCH vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, spark-operator, ip-masq-agent, nodetaint, prometheus-adapter, kubernetes-dns-node-cache...

CVE-2023-5528 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, spark-operator, ip-masq-agent, nodetaint, prometheus-adapter, kubernetes-dns-node-cache...

CVE-2023-5528 vulnerabilities

Vulnerabilities for packages: ip-masq-agent, aws-efs-csi-driver-fips, kubernetes-dns-node-cache, spark-operator, prometheus-adapter, nodetaint, aws-efs-csi-driver, aws-ebs-csi-driver...

Backup error: "The instance configuration for this AWS Marketplace product is not supported."

Challenge The backup of an EC2 instance fails with the following error: Processing "instance-name" failed: The instance configuration for this AWS Marketplace product is not supported. Please see the AWS Marketplace site for more information about supported instance types, regions, and operating...

Important Photon OS Security Update - PHSA-2023-4.0-0510

Updates of 'openvswitch', 'linux-secure', 'linux-aws', 'linux-rt' packages of Photon OS have been released...

CVE-2023-47108 vulnerabilities

Vulnerabilities for packages: temporal-server, k3s, docker-compose, kubevela, volume-modifier-for-k8s, buildkitd, kine, metrics-server, envoy-ratelimit, kubernetes-csi-external-resizer, kubernetes, kubescape, cri-tools, temporal...

Signing DynamoDB Sets when using the AWS Database Encryption SDK.

Impact This advisory addresses an issue when a DynamoDB Set attribute is marked as SIGNONLY in the AWS Database Encryption SDK DB-ESDK for DynamoDB. This also includes when a Set is part of a List or a Map. DB-ESDK for DynamoDB supports SIGNONLY and ENCRYPTANDSIGN attribute actions. In version...

CVE-2023-26221

The Spotfire Connectors component of TIBCO Software Inc.'s Spotfire Analyst, Spotfire Server, and Spotfire for AWS Marketplace contains an easily exploitable vulnerability that allows a low privileged attacker with read/write access to craft malicious Analyst files. A successful attack using this...

CVE-2023-26221

The Spotfire Connectors component of TIBCO Software Inc.'s Spotfire Analyst, Spotfire Server, and Spotfire for AWS Marketplace contains an easily exploitable vulnerability that allows a low privileged attacker with read/write access to craft malicious Analyst files. A successful attack using this...

Design/Logic Flaw

The Spotfire Connectors component of TIBCO Software Inc.'s Spotfire Analyst, Spotfire Server, and Spotfire for AWS Marketplace contains an easily exploitable vulnerability that allows a low privileged attacker with read/write access to craft malicious Analyst files. A successful attack using this...

Malicious code in devportal-aws-lambda (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 586c4231b2500b2299bb0a25b45ebdeaec062531b446c12f7547ab351c1b616a The OpenSSF Package Analysis project identified 'devportal-aws-lambda' @ 1.0.0 npm as malicious. It is considered malicious because: - The packa...

CVE-2023-26221

The connected PT advisory confirms CVE-2023-26221 affects TIBCO Spotfire Connectors in Spotfire Analyst (12.3.0–12.5.0), Spotfire Server (12.3.0–12.5.0), and Spotfire for AWS Marketplace (12.5.0). It is described as an easily exploitable issue that lets a low-privileged attacker with read/write a...

CVE-2023-26221 TIBCO Spotfire Insufficiently Protected Credential vulnerability

The Spotfire Connectors component of TIBCO Software Inc.'s Spotfire Analyst, Spotfire Server, and Spotfire for AWS Marketplace contains an easily exploitable vulnerability that allows a low privileged attacker with read/write access to craft malicious Analyst files. A successful attack using this...

s2n-quic potential denial of service via crafted stream frames

Impact An issue in s2n-quic could result in unnecessary resource utilization when peers open streams beyond advertised limits. Impacted versions: = v1.30.0. Patches The patch is included in v1.31.0 1. Workarounds There is no workaround. Applications using s2n-quic should upgrade to the most recen...

GHSA-475V-PQ2G-FP9G s2n-quic potential denial of service via crafted stream frames

Impact An issue in s2n-quic could result in unnecessary resource utilization when peers open streams beyond advertised limits. Impacted versions: = v1.30.0. Patches The patch is included in v1.31.0 1. Workarounds There is no workaround. Applications using s2n-quic should upgrade to the most recen...

TIBCO Software Spotfire Analyst Security Vulnerability

TIBCO Software Spotfire Analytics Platform for AWS Marketplace and so on are products of TIBCO Software, Inc.TIBCO Software Spotfire Analytics Platform for AWS Marketplace is a data visualization and analytics platform for the cloud application store AWS. TIBCO Software Spotfire Server is a...

PT-2023-20549 · Tibco Software · Spotfire For Aws Marketplace +2

Name of the Vulnerable Software and Affected Versions: TIBCO Software Inc.'s Spotfire Analyst versions 12.3.0 through 12.5.0 TIBCO Software Inc.'s Spotfire Server versions 12.3.0 through 12.5.0 TIBCO Software Inc.'s Spotfire for AWS Marketplace version 12.5.0 Description: The Spotfire Connectors...

Aws-Waf-Header-Analyzer - The Purpose Of The Project Is To Create Rate Limit In AWS WaF Based On HTTP Headers

The purpose of the project is to create rate limit in AWS WaF based on HTTP headers. Golang is a dependencie to build the binary. See the documentation to install: https://go.dev/doc/install make sudo make install The rules configuration is very simple, for example, the threshold is the limited o...