CVE-2022-49251

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: va-macro: fix accessing array out of bounds for enum type Accessing enums using integer would result in array out of bounds access on platforms like aarch64 where sizeoflong is 8 compared to enum size which is 4 byt...

systemd security update

239-82.0.1 - Fixed deletion issue for symlink when device is opened Orabug: 36228608 - Fix local-fs and remote-fs targets during system boot replaces old Orabug: 25897792 Orabug: 35871376 - 1A Add 'systemd-fstab-generator-reload-targets.service' file Orabug: 35871376 - 1B Add required rpms for...

Malicious code in @zscaler/api-enums (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c39d52170e43f12fe7201b08e2de04584d74da45150b565ffc66b523ef4d9b73 The OpenSSF Package Analysis project identified '@zscaler/api-enums' @ 5.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8487 Malicious code in @zscaler/api-enums (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c39d52170e43f12fe7201b08e2de04584d74da45150b565ffc66b523ef4d9b73 The OpenSSF Package Analysis project identified '@zscaler/api-enums' @ 5.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in extensible-enums (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 336896380fb13b7092e55f3756da694bd34818d4178f9cf615e012a4f7f6ed0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2938 Malicious code in extensible-enums (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 336896380fb13b7092e55f3756da694bd34818d4178f9cf615e012a4f7f6ed0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-619 Malicious code in @t15-ui-kit/enums (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 685b27cb36fa8e419b3fa2de15e0a9513372b1a662cc2f443a92caa0ae1eb500 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-69FV-GW6G-8CCG Potential memory corruption in arrayfire

The attribute repr added to enums to be compatible with C-FFI caused memory corruption on MSVC toolchain. arrayfire crates = version 3.5.0 do not have this issue when used with Rust versions 1.27 or earlier. The issue only started to appear since Rust version 1.28. The issue seems to be interlink...

Potential memory corruption in arrayfire

The attribute repr added to enums to be compatible with C-FFI caused memory corruption on MSVC toolchain. arrayfire crates = version 3.5.0 do not have this issue when used with Rust versions 1.27 or earlier. The issue only started to appear since Rust version 1.28. The issue seems to be interlink...

Security update for java-1_8_0-openjdk (important)

openSUSE Security Update: Security update for java-180-openjdk Announcement ID: openSUSE-SU-2020:0800-1 Rating: important References: 1160398 1169511 1171352 Cross-References: CVE-2020-2754 CVE-2020-2755 CVE-2020-2756 CVE-2020-2757 CVE-2020-2773 CVE-2020-2781 CVE-2020-2800 CVE-2020-2803...

Fedora 31 : 1:java-1.8.0-openjdk (2020-a60ad9d4ec)

Update to OpenJDK 8u252 April Critical Patch Update - JDK-8223898, CVE-2020-2754: Forward references to Nashorn - JDK-8223904, CVE-2020-2755: Improve Nashorn matching - JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs - JDK-8224549, CVE-2020-2757: Less Blocking Array Queues - JDK-822560...

Sandbox bypass through type casts in script-security

Sandbox protection in script-security could be circumvented by casting crafted objects to other types. This allowed attackers able to specify sandboxed scripts to invoke constructors that weren't approved. Additionally, this could be used to read arbitrary files on the Jenkins controller. Casting...