Data Distribution Service: An Overview Part 1

In this three-part blog series, we’ll look into Data Distribution Service, why it is critical, and how you can mitigate risks associated with it...

[SECURITY] [DSA 5174-1] gnupg2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5174-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 03, 2022 https://www.debian.org/security/faq -...

python security update

2.7.5-92.0.1 - Add Oracle Linux distribution in platform.py orabug 20812544 2.7.5-92 - Security fix for CVE-2021-3177 Resolves: rhbz1918168 2.7.5-91 - Security fixes for CVE-2020-26116, CVE-2020-26137 and CVE-2022-0391 - Test fixes for the latest expat security release - Update the certificates...

[SECURITY] Fedora 36 Update: snapd-2.56.2-1.fc36

Snappy is a modern, cross-distribution, transactional package manager designed for working with self-contained, immutable packages...

Arbitrage on stake()

Lines of code Vulnerability details Issue: there is a huge arb opportunity for people who deposit 1 block before the rebase Consequences: then they can call instantUnstakeReserve or instantUnstakeCurve to unstake the staked amount, in this way the profit that needs to be distributed on the next...

Yield of LiquidityReserve can be stolen

Lines of code Vulnerability details Impact Using sandwich attacks and JIT Just-in-time liquidity, the yield of LiquidityReserve could be extracted for liquidity providers. Proof of Concept The yield of LiquidityReserve is distributed when a user calls instantUnstakeReserve in Staking. Then, in...

[SECURITY] [DSA 5166-1] slurm-wlm security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5166-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 20, 2022 https://www.debian.org/security/faq -...

Spring Tools 4.15.1 released

Dear Spring Community, I am happy to announce the 4.15.1 release of the Spring Tools 4 for Eclipse, Visual Studio Code, and Theia. fixes and improvements Spring Boot fixed: VScode incorrectly suggests removing @Autowired annotation from methods 787 Spring Boot fixed: VScode quick fix should not...

Researchers Uncover 'Hermit' Android Spyware Used in Kazakhstan, Syria, and Italy

An enterprise-grade surveillanceware dubbed Hermit has been put to use by entities operating from within Kazakhstan, Syria, and Italy over the years since 2019, new research has revealed. Lookout attributed the spy software, which is equipped to target both Android and iOS, to an Italian company...

org.drools.planner:drools-planner-core (5.2.0.cr1), org.drools.planner:drools-planner-distribution (5.2.0.cr1) +25 more potentially affected by CVE-2021-41411 via org.drools:drools-core (5.2.0.cr1)

org.drools:drools-core MAVEN version 5.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.drools:drools-core and may be impacted: - org.drools.planner:drools-planner-core 5.2.0.cr1 - org.drools.planner:drools-planner-distribution 5.2.0.cr1 -...

org.drools.planner:drools-planner-core (5.3.2.final), org.drools.planner:drools-planner-distribution (5.3.2.final) +32 more potentially affected by CVE-2021-41411 via org.drools:drools-core (5.3.2.final)

org.drools:drools-core MAVEN version 5.3.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.drools:drools-core and may be impacted: - org.drools.planner:drools-planner-core 5.3.2.final - org.drools.planner:drools-planner-distribution 5.3.2.fin...

org.drools.planner:drools-planner-core (5.3.5.final), org.drools.planner:drools-planner-distribution (5.3.5.final) +32 more potentially affected by CVE-2021-41411 via org.drools:drools-core (5.3.5.final)

org.drools:drools-core MAVEN version 5.3.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.drools:drools-core and may be impacted: - org.drools.planner:drools-planner-core 5.3.5.final - org.drools.planner:drools-planner-distribution 5.3.5.fin...

org.drools.planner:drools-planner-core (5.4.0.beta1), org.drools.planner:drools-planner-distribution (5.4.0.beta1) +23 more potentially affected by CVE-2021-41411 via org.drools:drools-core (5.4.0.beta1)

org.drools:drools-core MAVEN version 5.4.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.drools:drools-core and may be impacted: - org.drools.planner:drools-planner-core 5.4.0.beta1 - org.drools.planner:drools-planner-distribution 5.4.0.bet...

org.drools.planner:drools-planner-core (5.3.3.final), org.drools.planner:drools-planner-distribution (5.3.3.final) +32 more potentially affected by CVE-2021-41411 via org.drools:drools-core (5.3.3.final)

org.drools:drools-core MAVEN version 5.3.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.drools:drools-core and may be impacted: - org.drools.planner:drools-planner-core 5.3.3.final - org.drools.planner:drools-planner-distribution 5.3.3.fin...

org.drools.planner:drools-planner-core (5.2.0.m2), org.drools.planner:drools-planner-distribution (5.2.0.m2) +25 more potentially affected by CVE-2021-41411 via org.drools:drools-core (5.2.0.m2)

org.drools:drools-core MAVEN version 5.2.0.m2 is affected by a known vulnerability. The following packages have a transitive dependency on org.drools:drools-core and may be impacted: - org.drools.planner:drools-planner-core 5.2.0.m2 - org.drools.planner:drools-planner-distribution 5.2.0.m2 -...

org.drools.planner:drools-planner-core (5.3.0.cr1), org.drools.planner:drools-planner-distribution (5.3.0.cr1) +22 more potentially affected by CVE-2021-41411 via org.drools:drools-core (5.3.0.cr1)

org.drools:drools-core MAVEN version 5.3.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.drools:drools-core and may be impacted: - org.drools.planner:drools-planner-core 5.3.0.cr1 - org.drools.planner:drools-planner-distribution 5.3.0.cr1 -...

org.drools.planner:drools-planner-core (5.4.0.cr1), org.drools.planner:drools-planner-distribution (5.4.0.cr1) +35 more potentially affected by CVE-2021-41411 via org.drools:drools-core (5.4.0.cr1)

org.drools:drools-core MAVEN version 5.4.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.drools:drools-core and may be impacted: - org.drools.planner:drools-planner-core 5.4.0.cr1 - org.drools.planner:drools-planner-distribution 5.4.0.cr1 -...

DNP3 Source Code Library DoS

The vulnerability of .NET components in the communication protocol library used for connecting components of ASU systems in the Triangle MicroWorks DNP3 Source Code Library platform for managing public distribution and transmission networks, such as Schneider Electric Saitel DP RTU Remote Termina...

reentrancy by _harvest() and _deposit() code in the middle of claimBribesFromHiddenHand() external calls to tokens and change balances of AURA token so claimBribesFromHiddenHand() make wrong transfers and fund would be lost

Lines of code Vulnerability details Impact Function claimBribesFromHiddenHand makes some external calls to token lists which fetches from hiddenHandDistributor.rewards if AURA was on of those tokens and also one of those tokens were malicious or made some external call then it's possible to reent...

Vulners Linux Audit API: Security Bulletin Publication Dates in Results

Hello everyone! In this short episode, I want to talk about the new feature in Vulners Linux API. Alternative video link for Russia: Linux security bulletin publication dates are now included in scan results. Why is it useful? A few words why this Linux Audit API is needed. You collect a list of...