[SECURITY] Fedora 35 Update: vultr-cli-2.14.2-2.fc35

Official command line tool for Vultr services...

[SECURITY] Fedora 35 Update: tinygo-0.23.0-5.fc35

Go compiler for small places. Microcontrollers, WebAssembly, and command-line tools. Based on LLVM...

[SECURITY] Fedora 35 Update: reg-0.16.1-8.fc35

Docker registry v2 command line client and repo listing generator with securi ty checks...

[SECURITY] Fedora 35 Update: mqttcli-0.2.3-2.fc35

mqttcli provides two programs pub and sub that allow command-line access to an MQTT broker. sub subscribes to a topic and prints messages received to standard output. pub publishes the provided message to the provided topic. Both programs accept flags that can be provided as a config file...

[SECURITY] Fedora 35 Update: hcloud-1.29.5-2.fc35

A command-line interface for Hetzner Cloud...

[SECURITY] Fedora 35 Update: grpcurl-1.8.6-3.fc35

Like cURL, but for gRPC: Command-line tool for interacting with gRPC servers...

[SECURITY] Fedora 35 Update: golang-gopkg-neurosnap-sentences-1-1.0.6-14.fc35

This command line utility will convert a blob of text into a list of sentence s...

[SECURITY] Fedora 35 Update: golang-github-theoapp-theo-agent-0.14.0-4.fc35

theo-agent is the command line program used to fetch authorizedkeys from a Theo server...

[SECURITY] Fedora 35 Update: golang-github-posener-complete-1.2.3-8.fc35

Package Complete provides a tool for bash writing bash completion in go, and bash completion for the go command line. Writing bash completion scripts is a hard work. This package provides an easy way to create bash completion scripts for any command, and also an easy way to install/uninstall the...

[SECURITY] Fedora 35 Update: golang-github-hexdigest-gowrap-1.1.12-4.fc35

GoWrap is a command line tool that generates decorators for Go interface types using simple templates. With GoWrap you can easily add metrics, tracing, fallbacks, pools, and many other features into your existing code in a few seconds...

[SECURITY] Fedora 35 Update: golang-github-c-bata-prompt-0.2.6-4.fc35

A library for building powerful interactive prompts inspired by python-prompt-toolkit, making it easier to build cross-platform command line tools using Go...

[SECURITY] Fedora 35 Update: golang-github-appc-goaci-0.1.1-12.fc35

Goaci is a simple command-line tool to build Go projects into ACIs which conf orm to the app container specification...

[SECURITY] Fedora 35 Update: gh-2.13.0-3.fc35

GitHub=EF=BF=BD=EF=BF=BD=EF=BF=BDs official command line tool...

[SECURITY] Fedora 35 Update: asciigraph-0.5.5-2.fc35

Go package to make lightweight ASCII line graph =EF=BF=BD=EF=BF=BD=EF=BF=BD =EF=BF=BD=EF=BF=BD=EF=BF=BD=EF=BF=BD=EF=BF=BD=EF=BF=BD in command line apps w ith no other dependencies...

CVE-2022-31212

An issue was discovered in dbus-broker before 31. It depends on c-uitl/c-shquote to parse the DBus service's Exec line. c-shquote contains a stack-based buffer over-read if a malicious Exec line is supplied...

PT-2023-15909 · Facebook +10 · Zstd +9

Name of the Vulnerable Software and Affected Versions: zstd version 1.4.10 MySQL Server versions 8.0.33 and earlier Description: A vulnerability was found where an attacker can supply an empty string as an argument to the command line tool to cause buffer overrun. This issue can be exploited by a...

Kubeaudit - Tool To Audit Your Kubernetes Clusters Against Common Security Controls

kubeaudit is a command line tool and a Go package to audit Kubernetes clusters for various different security concerns, such as: run as non-root use a read-only root filesystem drop scary capabilities, don't add new ones don't run privileged and more! tldr.kubeaudit makes sure you deploy secure...

GHSA-JJC5-FP7P-6F8W Shescape prior to 1.5.8 vulnerable to insufficient escaping of line feeds for CMD

Impact This impacts users that use Shescape any API function to escape arguments for cmd.exe on Windows. An attacker can omit all arguments following their input by including a line feed character '\n' in the payload. Example: javascript import cp from "node:childprocess"; import as shescape from...

Shescape prior to 1.5.8 vulnerable to insufficient escaping of line feeds for CMD

Impact This impacts users that use Shescape any API function to escape arguments for cmd.exe on Windows. An attacker can omit all arguments following their input by including a line feed character '\n' in the payload. Example: javascript import cp from "node:childprocess"; import as shescape from...

Threat Source newsletter (July 14, 2022) — Are virtual IDs worth the security risk of saving a few seconds in the TSA line?

By Jon Munshaw. Welcome to this week’s edition of the Threat Source newsletter. I’ve started flying again on a somewhat regular basis now that work conferences and out-of-state vacations are becoming a thing again. I took about 18 months or so off flying during the peak of the pandemic, but now...