grafana security update

7.5.15-4 - resolve CVE-2022-39229 grafana: using email as a username can block other users from signing in - resolve CVE-2022-27664 golang: net/http: handle server errors after sending GOAWAY - resolve CVE-2022-41715 golang: regexp/syntax: limit memory used by parsing regexps - resolve...

SUSE-SU-2022:3896-1 Security update for conmon

This update for conmon fixes the following issues: conmon was updated to 2.1.3: Stop using gunixsignaladd to avoid threads Rename CLI optionlog-size-global-max to log-global-size-max Update to version 2.1.2: add log-global-size-max option to limit the total output conmon processes CVE-2022-1708...

MAL-2022-6221 Malicious code in sovryn-node-integration-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0d8a316d21d24dc79e10223d3c0b2e58efb32ba31dc62b9d09efedcc39a14d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Machine Learning Testing for Data Scientists

In one software development project after another, it has been proven that testing saves time. Does this hold true for machine learning projects? Should data scientists write tests? Will it make their work better and/or faster? We believe the answer is YES! In this post we describe a full...

com.datastax.oss.quarkus:cassandra-quarkus-integration-tests-application (>=1.1.0-rc1, <=1.1.0-rc2), com.datastax.oss.quarkus:cassandra-quarkus-integration-tests-main (>=1.1.0-rc1, <=1.1.0-rc2) +449 more potentially affected by CVE-2021-20289 via org.jboss.resteasy:resteasy-core (>=4.6.0.final, <=4.6.1.beta9)

org.jboss.resteasy:resteasy-core MAVEN version =4.6.0.final, =1.1.0-rc1, =1.1.0-rc1, =1.1.0-rc1, =1.1.0-rc1, =1.1.0-rc1, =1.1, =6.4.0-cr-1, =6.4.0-cr-1, =6.4.0-cr-1, =6.4.0-cr-1, =6.4.0-cr-1, =6.4.0-cr-1, =6.4.0-cr-1, =6.4.0-cr-1, =6.4.1...

GHSA-3GW4-M5W7-V89C Uncontrolled Resource Consumption in Indy Node

Summary Indy Node has a bug in TAA handling code. The current primary can be crashed with a malformed transaction from a client, which leads to a view change. Repeated rapid view changes have the potential of bringing down the network. Discovery On May 18, Evernym's monitoring of Sovrin StagingNe...

Aircrack-ng 1.6 - Complete Suite Of Tools To Assess WiFi Network Security

Aircrack-ng is a complete suite of tools to assess WiFi network security. It focuses on different areas of WiFi security: Monitoring: Packet capture and export of data to text files for further processing by third party tools. Attacking: Replay attacks, deauthentication, fake access points and...

openSUSE Security Update : nextcloud (openSUSE-2019-640)

This update for nextcloud to version 13.0.5 fixes the following issues : Security issues fixed : - CVE-2018-3780: Fixed a missing sanitization of search results for an autocomplete field that could lead to a stored XSS requiring user-interaction. The missing sanitization only affected user names,...