osbuild-composer bug fix update

Osbuild-composer provides an image-building service based on osbuild. Bug fixes: RHEL for Edge Container Commit fails silently when Repo URL doesn't have a trailing slash. BZ1951192 Unstable ordering of results from osbuild v2 causes test failures. BZ1955094...

Unchecked token transfers

Handle Lucius Vulnerability details Impact The functions transerFrom/transer do not revert on failure and instead simply return false. Without checks on the return values, the transfers could potentially fail silently allowing unexpected issues with certain token pools. E.G. If a user calls depos...

The vulnerability of the VMware Tools driver for the VM3DMP set of utilities on Windows operating systems allows a hacker to cause a service failure.

The vulnerability of the VMware Tools utility driver for Windows operating systems exists due to insufficient testing of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the CODESYS Control V2 Linux SysFile software suite for industrial automation systems allows a intruder to trigger a service failure.

The vulnerability of the CODESYS Control V2 Linux SysFile software suite for industrial automation exists due to the reading of data beyond the specified buffer. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of MicroDigital camera software of the N series, related to the execution of operations outside the buffer in memory, allows a intruder to cause a service failure.

The vulnerability of MicroDigital camera software of the N series lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause malfunctions by using a specially crafted file...

The vulnerability of the podman package in the Red Hat Enterprise Linux operating system and the Red Hat OpenShift Container Platform corporate platform, related to uncontrolled resource consumption, allows a perpetrator to trigger a service failure.

The vulnerability of the podman package in the Red Hat Enterprise Linux operating system and the Red Hat OpenShift Container Platform corporate platform is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of Remote Desktop Services (RDS) for Windows operating systems allows a hacker to carry out an attack using a spoofing technique.

The vulnerability of Remote Desktop Services RDS for Windows operating systems is related to resource release errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of Mac OS operating systems, related to the execution of operations beyond the buffer in memory, allows attackers to trigger system failures or gain unauthorized access to protected information.

The vulnerability of Mac OS operating systems lies in the fact that operations are performed outside of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause system failures or gain unauthorized access to protected information...

The vulnerability of the TCP/IP driver for Windows operating systems allows a hacker to trigger a service failure.

The vulnerability of the TCP/IP driver for Windows operating systems is related to resource release errors. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the implementation of functions LoadFromFile, LoadFromString, LoadFromStream, DAOpenFile, or DAOpenFileReadOnly in the PDF handling library “Quick PDF Library” allows a perpetrator to gain unauthorized access to protected information or cause service failures.

The vulnerability of the implementations of the LoadFromFile, LoadFromString, LoadFromStream, DAOpenFile, or DAOpenFileReadOnly functions in the PDF handling library is related to the occurrence of operations outside the buffer in memory when processing xref entries. Exploitation of this...

The vulnerability of the IBM DB2 database management system arises from the improper assignment of permissions for critical resources. This allows a perpetrator to gain unauthorized access to protected information or cause service failures.

The vulnerability of the IBM DB2 database management system is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failures by sending specially crafted...

The vulnerability of the Aurora Center’s application software library, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the Aurora Center’s application software library, related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Vulnerabilities of operating systems such as macOS, watchOS, iOS, iPadOS, tvOS, and the iCloud for Windows service, related to resource release errors, allow a perpetrator to trigger a service failure.

The vulnerabilities of operating systems such as macOS, watchOS, iOS, iPadOS, tvOS, and the iCloud for Windows service are related to resource release errors. Exploiting these vulnerabilities can allow a malicious actor to cause service failures remotely...

The vulnerability of the Apache Thrift application programming library at Aurora Center, related to insufficient input data validation, allows attackers to trigger service failures.

The vulnerability of the Apache Thrift application programming interface at Aurora Center is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the GJSON library in Aurora Application Software, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of the GJSON library in Aurora software applications is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures through a specially crafted GET request...

The vulnerability of the Apex One and OfficeScan antivirus software lies in the insufficient checking of privilege assignments for critical resources, allowing a hacker to trigger a service failure.

The vulnerability of the anti-virus software programs Apex One and OfficeScan is related to insufficient checking of permission assignment for critical resources. Exploiting this vulnerability can allow a hacker to cause service failures...

The vulnerability of the clean-css application software library at Avora Center, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of the clean-css application software of Aurora Center relates to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures by using a specially crafted regular expression...

The vulnerability of the kind-of application software library “Aurora Center” is related to insufficient validation of input data, allowing attackers to trigger service failures.

The vulnerability of the kind-of application software library Aurora Center is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the GoLang development tool for application software “Aurora Center” relates to the execution of a loop with an unavailable exit condition, allowing attackers to cause service failures.

The vulnerability of the GoLang development tool used by Aurora Application Software involves executing a loop with an exit condition that is not met. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the PostCSS library in Aurora Application Software, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of the PostCSS application library in Aurora Software Center, related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...