AZL-13651 CVE-2023-23916 affecting package cmake for versions less than 3.21.4-13

An allocation of resources without limits or throttling vulnerability exists in curl v7.88.0 based on the "chained" HTTP compression algorithms, meaning that a server response can be compressed multiple times and potentially with differentalgorithms. The number of acceptable "links" in this...

AZL-34615 CVE-2023-23914 affecting package cmake for versions less than 3.21.4-10

A cleartext transmission of sensitive information vulnerability exists in curl v7.88.0 that could cause HSTS functionality fail when multiple URLs are requested serially. Using its HSTS support, curl can be instructed to use HTTPS instead of usingan insecure clear-text HTTP step even when HTTP is...

AZL-13650 CVE-2023-23914 affecting package cmake for versions less than 3.21.4-6

A cleartext transmission of sensitive information vulnerability exists in curl v7.88.0 that could cause HSTS functionality fail when multiple URLs are requested serially. Using its HSTS support, curl can be instructed to use HTTPS instead of usingan insecure clear-text HTTP step even when HTTP is...

CVE-2022-43551 affecting package cmake for versions less than 3.21.4-3

CVE-2022-43551 affecting package cmake for versions less than 3.21.4-3. A patched version of the package is available...

CVE-2022-43551 affecting package cmake 3.21.4-2

CVE-2022-43551 affecting package cmake 3.21.4-2. A patched version of the package is available...

AZL-13280 CVE-2022-43552 affecting package cmake for versions less than 3.21.4-13

A use after free vulnerability exists in curl 7.87.0. Curl can be asked to tunnel virtually all protocols it supports through an HTTP proxy. HTTP proxies can and often do deny such tunnel operations. When getting denied to tunnel the specific protocols SMB or TELNET, curl would use a heap-allocat...

AZL-34604 CVE-2022-43552 affecting package cmake for versions less than 3.28.2-1

A use after free vulnerability exists in curl 7.87.0. Curl can be asked to tunnel virtually all protocols it supports through an HTTP proxy. HTTP proxies can and often do deny such tunnel operations. When getting denied to tunnel the specific protocols SMB or TELNET, curl would use a heap-allocat...

Bkcrack - Crack Legacy Zip Encryption With Biham And Kocher's Known Plaintext Attack

Crack legacy zip encryption with Biham and Kocher's known plaintext attack. Overview A ZIP archive may contain many entries whose content can be compressed and/or encrypted. In particular, entries can be encrypted with a password-based Encryption Algorithm symmetric encryption algorithm referred ...

Malicious code in vcpkg-cmake-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e8ecf4f4a2a5acb298dbaab7c776bc3d8828d32d341cf921e890baa970f010e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6899 Malicious code in vcpkg-cmake (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80593ffd7d75714d0af2374df6c55cdee9641b04d9d96f9d909d1417f6384604 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6900 Malicious code in vcpkg-cmake-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e8ecf4f4a2a5acb298dbaab7c776bc3d8828d32d341cf921e890baa970f010e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vcpkg-cmake (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80593ffd7d75714d0af2374df6c55cdee9641b04d9d96f9d909d1417f6384604 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

new packages: cmake

An update is available for cmake. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...

mariadb:10.3 security and bug fix update

galera 25.3.34-4 - Explicitly require the 'procps-ng' package - Otherwise it will not require it in the lightweight systems e.g. containers - and Galera won't work properly 25.3.34-3 - Use downstream garbd-wrapper and garbd.service to ensure compatibility - Add upstream versions of garbd-wrapper...

OPENSUSE-SU-2022:0067-1 Security update for libdxfrw, librecad

This update for libdxfrw, librecad fixes the following issues: - Update to version 1.0.1+git.20220109: fixed ambiguous error for DRWDimension::parseDwg fixed enless while-loop for pre 2004 versions dwgReader::readDwgObjects stop reading after 1st error dwgReader::readDwgEntities stop reading afte...

cmake bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

cmake bug fix and enhancement update

An update is available for cmake. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8.5...

ALEA-2021:4246 cmake bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

Networkit - A Growing Open-Source Toolkit For Large-Scale Network Analysis

NetworKit is an open-source tool suite for high-performance network analysis. Its aim is to provide tools for the analysis of large networks in the size range from thousands to billions of edges. For this purpose, it implements efficient graph algorithms, many of them parallel to utilize multicor...

cmake bug fix and enhancement update

An update is available for cmake. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list CMake is an open source, cross-platform build system that is used to control th...