SUSE: Security Advisory (SUSE-SU-2023:4287-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Exploit for OS Command Injection in Opentsdb

opentsdbkeycmdinjection An exploit for OpenTSDB -l -p -...

Intel® oneAPI Toolkit and Component Software Installers Advisory

Summary: A potential security vulnerability in some Intel® oneAPI Toolkit and component software installers may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-22355 Description: Uncontrolled searc...

CVE-2022-38136

Uncontrolled search path in the IntelR oneAPI DPC++/C++ Compiler for Windows and Intel Fortran Compiler for Windows before version 2022.2.1 for some IntelR oneAPI Toolkits before version 2022.3.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-38136

CVE-2022-38136 concerns the Intel® oneAPI toolchain: an uncontrolled search path in the Intel® oneAPI DPC++/C++ Compiler for Windows and Intel® Fortran Compiler for Windows prior to 2022.2.1, affecting some toolkits before 2022.3.1. Root cause is an uncontrolled search path that could allow an au...

CVE-2022-38136: Uncontrolled Search Path Element

Uncontrolled search path in the IntelR oneAPI DPC++/C++ Compiler for Windows and Intel Fortran Compiler for Windows before version 2022.2.1 for some IntelR oneAPI Toolkits before version 2022.3.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

gcc-toolset-12-gcc bug fix update

An update is available for gcc-toolset-12-gcc. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GCC Toolset 12 is a compiler toolset that provides recent versions...

gcc bug fix and enhancement update

An update is available for gcc. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ad...

PT-2023-1615 · Intel · Intel Oneapi Dpc++/C++ Compiler +2

Name of the Vulnerable Software and Affected Versions: IntelR oneAPI DPC++/C++ Compiler for Windows versions prior to 2022.2.1 IntelR oneAPI Toolkits versions prior to 2022.3.1 Intel Fortran Compiler for Windows versions prior to 2022.2.1 Description: The issue is related to an uncontrolled searc...

Low: mingw-gcc security and bug fix update

The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ada 95 GNU, as well as related support libraries. Security Fixes: gcc: uncontrolled recursion in libiberty/rust-demangle.c CVE-2021-46195 For more details about the security issues, including the impact, a CVSS score,...

python39:3.9 and python39-devel:3.9 security update

Cython 0.29.21-5 - Convert from Fedora to the python39 module in RHEL8 - Resolves: rhbz1877430 0.29.21-4 - Drop build dependency on coverage 0.29.21-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora33MassRebuild 0.29.21-2 - Re-enable tests. 0.29.21-1 - 0.29.21 scipy 1.5.4-3 - Specify LDFLAGS...

Fedora: Security Advisory for libdwarf (FEDORA-2022-273a86adf0)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

gcc bug fix and enhancement update

An update is available for gcc. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ad...

com.noveria.assertion:wait-until-asserter (>=1.0.0, <=1.0.1), com.noveria.assertion:wait-until-asserter-acceptance-test (>=1.0.0, <=1.0.1) +17 more potentially affected by CVE-2019-7722 via net.sourceforge.pmd:pmd-core (5.2.1)

net.sourceforge.pmd:pmd-core MAVEN version 5.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.sourceforge.pmd:pmd-core and may be impacted: - com.noveria.assertion:wait-until-asserter =1.0.0, =1.0.0, =1.0.1 - net.sourceforge.pmd:pmd-cpp 5.2.1 -...

net.sourceforge.pmd:pmd-cpp (5.4.2), net.sourceforge.pmd:pmd-cs (5.4.2) +20 more potentially affected by CVE-2019-7722 via net.sourceforge.pmd:pmd-core (5.4.2)

net.sourceforge.pmd:pmd-core MAVEN version 5.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on net.sourceforge.pmd:pmd-core and may be impacted: - net.sourceforge.pmd:pmd-cpp 5.4.2 - net.sourceforge.pmd:pmd-cs 5.4.2 - net.sourceforge.pmd:pmd-dist 5.4...

net.sourceforge.pmd:pmd-cpp (5.3.0), net.sourceforge.pmd:pmd-cs (5.3.0) +17 more potentially affected by CVE-2019-7722 via net.sourceforge.pmd:pmd-core (5.3.0)

net.sourceforge.pmd:pmd-core MAVEN version 5.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.sourceforge.pmd:pmd-core and may be impacted: - net.sourceforge.pmd:pmd-cpp 5.3.0 - net.sourceforge.pmd:pmd-cs 5.3.0 - net.sourceforge.pmd:pmd-dist 5.3...

com.github.albfernandez:pmd-gds (2.16.1), com.github.albfernandez:pmd-java-safenames (1.0.0) +34 more potentially affected by CVE-2019-7722 via net.sourceforge.pmd:pmd-core (5.8.1)

net.sourceforge.pmd:pmd-core MAVEN version 5.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.sourceforge.pmd:pmd-core and may be impacted: - com.github.albfernandez:pmd-gds 2.16.1 - com.github.albfernandez:pmd-java-safenames 1.0.0 -...

OESA-2022-1485 numpy security update

A fast multidimensional array facility for Python. Security Fixes: Buffer overflow in the arrayfrompyobj function of fortranobject.c in NumPy 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values.CVE-2021-41496...

CVE-2021-41496

Buffer overflow in the arrayfrompyobj function of fortranobject.c in NumPy 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values. NOTE: The vendor does not agree this is a vulnerability; the negative dimensions can only be...

DEBIAN-CVE-2021-41496

Buffer overflow in the arrayfrompyobj function of fortranobject.c in NumPy 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values. NOTE: The vendor does not agree this is a vulnerability; the negative dimensions can only be...