CLSA-2022-1655819051 Fixed CVE-2022-22576 in curl

CVE-2022-22576: check additional SASL parameters for connection reuse...

PT-2022-3301

Name of the Vulnerable Software and Affected Versions OpenSSL versions 3.0.0 through 3.0.3 OpenSSL versions 1.1.1 through 1.1.1o OpenSSL versions 1.0.2 through 1.0.2ze Description The issue is related to improper encryption and potential buffer overflow, allowing a remote attacker to obtain...

Malicious code in jetpack-connection (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80ccf01e2a373a2de8badfc143620e55dd5cd5d206f90ccb4055dc32df4883fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4025 Malicious code in jetpack-connection (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80ccf01e2a373a2de8badfc143620e55dd5cd5d206f90ccb4055dc32df4883fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in generator-connection (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b345a8a1a86ee085f16d78670da372a22461e5135ffd1e0f252cb45ca2985bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3331 Malicious code in generator-connection (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b345a8a1a86ee085f16d78670da372a22461e5135ffd1e0f252cb45ca2985bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PVS Wizard fails to connect to Cloud

In the process of using a PVS Wizard, after entering your credentials to connect to Citrix Cloud, you might see this error: "Cannot connect to the Citrix Virtual Desktops Controller at : Citrix Virtual Desktops FullAdmin or MachineAdmin permission required." Following the below steps 1. If Remote...

EulerOS 2.0 SP5 : 389-ds-base (EulerOS-SA-2022-1881)

According to the versions of the 389-ds-base packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to...

CVE-2022-32550

An issue was discovered in AgileBits 1Password, involving the method various 1Password apps and integrations used to create connections to the 1Password service. In specific circumstances, this issue allowed a malicious server to convince a 1Password app or integration it is communicating with th...

CVE-2022-32550

An issue was discovered in AgileBits 1Password, involving the method various 1Password apps and integrations used to create connections to the 1Password service. In specific circumstances, this issue allowed a malicious server to convince a 1Password app or integration it is communicating with th...

Design/Logic Flaw

An issue was discovered in AgileBits 1Password, involving the method various 1Password apps and integrations used to create connections to the 1Password service. In specific circumstances, this issue allowed a malicious server to convince a 1Password app or integration it is communicating with th...

CLSA-2022-1655317984 Fixed CVE-2022-22576 in curl

CVE-2022-22576: check additional SASL parameters for connection reuse...

CLSA-2022-1655317708 Fix CVE(s): CVE-2022-22576

SECURITY UPDATE: Reusing OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials - debian/patches/CVE-2022-22576.patch: Check additional SASL parameters for connection reuse - CVE-2022-22576...

CVE-2021-35076

Possible null pointer dereference due to improper validation of RRC connection reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

Null pointer dereference

Possible null pointer dereference due to improper validation of RRC connection reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-35076

Possible null pointer dereference due to improper validation of RRC connection reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead.

...

Archiving Job Fails With: "Failed to provision a proxy appliance : Unable to connect by SSH to Appliance."

Challenge An Archiving Job for a Scale-Out Backup Repository fails with the error: Failed to provision a proxy appliance: Unable to connect by SSH to Appliance. Copy Log Example dd.mm.yyyy hh:mm:ss Warning Failed to provision a proxy appliance: Unable to connect by SSH to appliance. dd.mm.yyyy...

Malicious code in cs-connection-hub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29eae716d8e0ba65820582f2c6f159bae978f21cd7eea64fe3e3524cd320be77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2260 Malicious code in cs-connection-hub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29eae716d8e0ba65820582f2c6f159bae978f21cd7eea64fe3e3524cd320be77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...