com.datastax.spark:spark-cassandra-connector-demos_2.10 (>=1.0.0-rc3, <=1.0.6), com.datastax.spark:spark-cassandra-connector-java_2.10 (>=1.0.0-rc3, <=1.0.6) +26 more potentially affected by CVE-2019-0204 via org.apache.mesos:mesos (0.13.0)

org.apache.mesos:mesos MAVEN version 0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - com.datastax.spark:spark-cassandra-connector-demos2.10 =1.0.0-rc3, =1.0.0-rc3, =1.0.0-beta1, =0.2.2, =0.2.2, =0.2....

org.jenkins-ci.plugins:mesos (0.4.0) potentially affected by CVE-2019-0204 via org.apache.mesos:mesos (0.19.0)

org.apache.mesos:mesos MAVEN version 0.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.jenkins-ci.plugins:mesos 0.4.0 Source cves: CVE-2019-0204 Source advisory: OSV:GHSA-32W9-2QPC-5F9V...

org.apache.reef:reef-examples (0.16.0), org.apache.reef:reef-examples-clr (>=0.14.0, <=0.16.0) +3 more potentially affected by CVE-2019-0204 via org.apache.mesos:mesos (0.25.0)

org.apache.mesos:mesos MAVEN version 0.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.apache.reef:reef-examples 0.16.0 - org.apache.reef:reef-examples-clr =0.14.0, =0.14.0, =0.14.0, =0.16.0 Source...

com.dangdang:elastic-job-cloud-executor (>=2.0.3, <=2.1.1), com.dangdang:elastic-job-cloud-scheduler (>=2.0.3, <=2.1.1) +17 more potentially affected by CVE-2019-0204 via org.apache.mesos:mesos (0.28.2)

org.apache.mesos:mesos MAVEN version 0.28.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - com.dangdang:elastic-job-cloud-executor =2.0.3, =2.0.3, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.9.0,...

cn.fossc.com.dangdang:elastic-job-cloud-executor (>=2.1.7, <=2.2.1), cn.fossc.com.dangdang:elastic-job-cloud-scheduler (>=2.1.7, <=2.2.1) +35 more potentially affected by CVE-2019-0204 via org.apache.mesos:mesos (>=1.0.0, <=1.4.2)

org.apache.mesos:mesos MAVEN version =1.0.0, =2.1.7, =2.1.7, =2.2.0, =2.2.0, =0.0.3, =2.1.2, =2.1.2, =0.18.0, =0.18.0, =0.18.0, =0.18.0, =0.1.0, =0.1.0, =0.3.0, =0.4.1 and more Source cves: CVE-2019-0204 Source advisory: OSV:GHSA-32W9-2QPC-5F9V...

org.apache.beam:beam-runners-twister2 (>=2.23.0, <=2.77.0), org.apache.ignite:ignite-mesos (>=2.7.0, <=2.12.0) +5 more potentially affected by CVE-2019-0204 via org.apache.mesos:mesos (1.5.0)

org.apache.mesos:mesos MAVEN version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.apache.beam:beam-runners-twister2 =2.23.0, =2.7.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.8.0 Source cves:...

Docker image code execution with Apache Mesos

A specifically crafted Docker image running under the root user can overwrite the init helper binary of the container runtime and/or the command executor in Apache Mesos versions pre-1.4.x, 1.4.0 to 1.4.2, 1.5.0 to 1.5.2, 1.6.0 to 1.6.1, and 1.7.0 to 1.7.1. A malicious actor can therefore gain...

GHSA-32W9-2QPC-5F9V Docker image code execution with Apache Mesos

A specifically crafted Docker image running under the root user can overwrite the init helper binary of the container runtime and/or the command executor in Apache Mesos versions pre-1.4.x, 1.4.0 to 1.4.2, 1.5.0 to 1.5.2, 1.6.0 to 1.6.1, and 1.7.0 to 1.7.1. A malicious actor can therefore gain...

com.xti.jenkins.plugins:aws-lambda-jenkins-plugin (0.0.1), org.jenkins-ci.main:jenkins-test-harness (1.599) +7 more potentially affected by CVE-2017-2601 via org.jenkins-ci.main:jenkins-core (1.599)

org.jenkins-ci.main:jenkins-core MAVEN version 1.599 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.xti.jenkins.plugins:aws-lambda-jenkins-plugin 0.0.1 -...

com.xti.jenkins.plugins:aws-lambda-jenkins-plugin (0.0.1), org.jenkins-ci.main:jenkins-test-harness (1.599) +7 more potentially affected by CVE-2019-1003049 via org.jenkins-ci.main:jenkins-core (1.599)

org.jenkins-ci.main:jenkins-core MAVEN version 1.599 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.xti.jenkins.plugins:aws-lambda-jenkins-plugin 0.0.1 -...

com.xti.jenkins.plugins:aws-lambda-jenkins-plugin (0.0.1), org.jenkins-ci.main:jenkins-test-harness (1.599) +7 more potentially affected by CVE-2018-1999005 via org.jenkins-ci.main:jenkins-core (1.599)

org.jenkins-ci.main:jenkins-core MAVEN version 1.599 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.xti.jenkins.plugins:aws-lambda-jenkins-plugin 0.0.1 -...

com.xti.jenkins.plugins:aws-lambda-jenkins-plugin (0.0.1), org.jenkins-ci.main:jenkins-test-harness (1.599) +7 more potentially affected by CVE-2018-1999003 via org.jenkins-ci.main:jenkins-core (1.599)

org.jenkins-ci.main:jenkins-core MAVEN version 1.599 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.xti.jenkins.plugins:aws-lambda-jenkins-plugin 0.0.1 -...

mesos: docker image code execution

A flaw was found in Docker image running under root user, where it is possible to overwrite the init helper binary of the container runtime or the command executor in Apache Mesos. A malicious user could use this flaw to gain root-level code execution on the host...

Photon OS 1.0: Mesos PHSA-2019-1.0-0239

An update of the mesos package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0239. The text itself is copyright C VMware, Inc. include"compat.inc"; if description scriptid126188...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-1.0-0239

An update of 'krb5', 'elfutils', 'binutils', 'nss', 'mesos' packages of Photon OS has been released...

Important Photon OS Security Update - PHSA-2019-0239

Updates of 'elfutils', 'binutils', 'krb5', 'nss', 'go', 'kubernetes', 'mesos' packages of Photon OS have been released...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-2.0-0161

An update of 'libarchive', 'elfutils', 'wget', 'go', 'curl', 'linux-secure', 'python2', 'kubernetes', 'linux-esx', 'linux-aws', 'libtiff', 'mesos', 'glib', 'libsoup', 'libvirt', 'zookeeper', 'tar', 'linux', 'polkit', 'python3' packages of Photon OS has been released...

Critical Photon OS Security Update - PHSA-2019-0161

Updates of 'linux-aws', 'linux', 'kubernetes', 'polkit', 'wget', 'linux-secure', 'elfutils', 'python2', 'mesos', 'glib', 'python3', 'libsoup', 'linux-esx', 'libvirt', 'tar', 'curl', 'libtiff', 'libarchive', 'zookeeper' packages of Photon OS have been released...

CVE-2019-0204

A flaw was found in Docker image running under root user, where it is possible to overwrite the init helper binary of the container runtime or the command executor in Apache Mesos. A malicious user could use this flaw to gain root-level code execution on the host...

Apache Mesos Code Execution Vulnerability

Apache Mesos is the United States Apache Apache Software Foundation of a set of support for Hadoop, ElasticSearch and Spark and other application architecture of open source cluster management software. There is a security vulnerability in Apache Mesos. The vulnerability can be exploited by an...