OESA-2023-1663 skopeo security update

A command line utility that performs various operations on container images and image repositories Security Fixes: Calling any of the Parse functions on Go source code which contains //line directives with very large line numbers can cause an infinite loop due to integer overflow.CVE-2023-24537...

Fedora: Security Advisory for golang-gopkg-alecthomas-kingpin-2 (FEDORA-2023-cf176d02d8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Arbitrary Argument Injection

blamer is vulnerable to Arbitrary Argument Injection. The vulnerability is due to blameByFile API not properly sanitizing the user input and validating the give file path. This can be exploited by the attacker by using he double-dash POSIX character -- to pass malicious command line arguments to...

[SECURITY] Fedora 38 Update: golang-gopkg-alecthomas-kingpin-2-2.3.2-1.fc38

Kingpin is a fluent-style, type-safe command-line parser. It supports flags, nested commands, and positional arguments...

[SECURITY] Fedora 37 Update: golang-gopkg-alecthomas-kingpin-2-2.3.2-1.fc37

Kingpin is a fluent-style, type-safe command-line parser. It supports flags, nested commands, and positional arguments...

SUSE CVE-2023-43621

An issue was discovered in Croc through 9.6.5. The shared secret, located on a command line, can be read by local users who list all processes and their arguments...

Information disclosure

An information leak in kokoroemembers card Line 13.6.1 allows attackers to obtain the channel access token and send crafted messages...

CVE-2023-39041

An information leak in KUKURUDELI Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

CVE-2023-39041

An information leak in KUKURUDELI Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

CVE-2023-39041

An information leak in KUKURUDELI Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

CVE-2023-40368

IBM Storage Protect 8.1.0.0 through 8.1.19.0 could allow a privileged user to obtain sensitive information from the administrative command line client. IBM X-Force ID: 263456...

Information disclosure

IBM Storage Protect 8.1.0.0 through 8.1.19.0 could allow a privileged user to obtain sensitive information from the administrative command line client. IBM X-Force ID: 263456...

Information disclosure

An information leak in KUKURUDELI Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

CVE-2023-40368 IBM Storage Protect information disclosure

IBM Storage Protect 8.1.0.0 through 8.1.19.0 could allow a privileged user to obtain sensitive information from the administrative command line client. IBM X-Force ID: 263456...

CVE-2023-39044

An information leak in ajino-Shiretoko Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

CVE-2023-39044

An information leak in ajino-Shiretoko Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

CVE-2023-39044

An information leak in ajino-Shiretoko Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

Information disclosure

An information leak in ajino-Shiretoko Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

SUSE-SU-2023:3695-1 Security update for binutils

This update for binutils fixes the following issues: Update to version 2.41 jscPED-5778: The MIPS port now supports the Sony Interactive Entertainment Allegrex processor, used with the PlayStation Portable, which implements the MIPS II ISA along with a single-precision FPU and a few...

Croc may expose secret to local users

An issue was discovered in Croc before 9.6.16. The shared secret, located on a command line, can be read by local users who list all processes and their arguments...