org.infinispan:infinispan-as-modules (5.2.0.cr3), org.infinispan:infinispan-cachestore-bdbje (5.2.0.cr3) +23 more potentially affected by CVE-2017-15089 via org.infinispan:infinispan-core (5.2.0.cr3)

org.infinispan:infinispan-core MAVEN version 5.2.0.cr3 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.infinispan:infinispan-as-modules 5.2.0.cr3 - org.infinispan:infinispan-cachestore-bdbje...

org.infinispan.server:example-configuration-tests (5.3.0.cr2), org.infinispan:infinispan-as-modules (5.3.0.cr2) +30 more potentially affected by CVE-2017-15089 via org.infinispan:infinispan-core (5.3.0.cr2)

org.infinispan:infinispan-core MAVEN version 5.3.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.infinispan.server:example-configuration-tests 5.3.0.cr2 -...

org.hibernate:hibernate-search-infinispan (>=4.3.0.alpha1, <=4.3.0.final), org.hibernate:hibernate-search-modules (>=4.3.0.alpha1, <=4.3.0.final) +36 more potentially affected by CVE-2017-15089 via org.infinispan:infinispan-core (5.2.5.final)

org.infinispan:infinispan-core MAVEN version 5.2.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.hibernate:hibernate-search-infinispan =4.3.0.alpha1, =4.3.0.alpha1, =4.3.0.final -...

org.infinispan:infinispan-as-modules (5.2.8.final), org.infinispan:infinispan-cachestore-bdbje (5.2.8.final) +24 more potentially affected by CVE-2017-15089 via org.infinispan:infinispan-core (5.2.8.final)

org.infinispan:infinispan-core MAVEN version 5.2.8.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.infinispan:infinispan-as-modules 5.2.8.final - org.infinispan:infinispan-cachestore-bdbje...

GHSA-HX44-C87V-P6XG Opencast has Incorrect Permission Assignment

In Opencast 2.2.3 and older if user names overlap, the Opencast search service used for publication to the media modules and players will handle the access control incorrectly so that users only need to match part of the user name used for the access restriction. For example, a user with the role...

Opencast has Incorrect Permission Assignment

In Opencast 2.2.3 and older if user names overlap, the Opencast search service used for publication to the media modules and players will handle the access control incorrectly so that users only need to match part of the user name used for the access restriction. For example, a user with the role...

org.keycloak:keycloak-saml-as7-adapter-dist (>=4.0.0.beta1, <=4.3.0.final), org.keycloak:keycloak-saml-as7-modules (>=4.0.0.beta1, <=4.3.0.final) +24 more potentially affected by CVE-2018-10894 via org.keycloak:keycloak-saml-adapter-core (>=4.0.0.beta1, <=4.3.0.final)

org.keycloak:keycloak-saml-adapter-core MAVEN version =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.3.0.final and mo...

org.jboss.resteasy:resteasy-jaxrs-war (2.3.7.final), org.jboss.resteasy:resteasy-jboss-modules (2.3.7.final) potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (2.3.7.final)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version 2.3.7.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-yaml-provider and may be impacted: - org.jboss.resteasy:resteasy-jaxrs-war 2.3.7.final -...

io.takari:appserver (0.0.7), org.jboss.resteasy:resteasy-jboss-modules (>=3.0-beta-1, <=3.0.24.final) potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (>=3.0-beta-1, <=3.0.24.final)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version =3.0-beta-1, =3.0-beta-1, =3.0.24.final Source cves: CVE-2018-1051 Source advisory: GHSA-M2FV-3RQM-G7P5...

org.jboss.resteasy:resteasy-jaxrs-war (2.3.6.final), org.jboss.resteasy:resteasy-jboss-modules (2.3.6.final) potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (2.3.6.final)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version 2.3.6.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-yaml-provider and may be impacted: - org.jboss.resteasy:resteasy-jaxrs-war 2.3.6.final -...

org.jboss.resteasy:resteasy-jaxrs-war (2.3.5.final), org.jboss.resteasy:resteasy-jboss-modules (2.3.5.final) potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (2.3.5.final)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version 2.3.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-yaml-provider and may be impacted: - org.jboss.resteasy:resteasy-jaxrs-war 2.3.5.final -...

io.takari:appserver (0.0.7), org.jboss.resteasy:resteasy-jboss-modules (>=3.0-beta-1, <=3.0.24.final) potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (>=3.0-beta-1, <=3.0.24.final)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version =3.0-beta-1, =3.0-beta-1, =3.0.24.final Source cves: CVE-2018-1051 Source advisory: OSV:GHSA-M2FV-3RQM-G7P5...

org.jboss.resteasy:resteasy-jaxrs-war (2.3.4.final), org.jboss.resteasy:resteasy-jboss-modules (2.3.4.final) potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (2.3.4.final)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version 2.3.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-yaml-provider and may be impacted: - org.jboss.resteasy:resteasy-jaxrs-war 2.3.4.final -...

org.springmodules:spring-modules-jakarta-commons (>=0.8, <=0.8a), org.springmodules:spring-modules-osworkflow (>=0.8, <=0.8a) potentially affected by CVE-2014-0054 via org.springframework:spring-webmvc (2.0.3)

org.springframework:spring-webmvc MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.springmodules:spring-modules-jakarta-commons =0.8, =0.8, =0.8a Source cves: CVE-2014-0054...

Rocky Linux-system-roles bug fix and enhancement update

An update is available for rhel-system-roles. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Rocky Linux-system-roles package includes a collection of Ansib...

5.32 metadata for the Rocky Linux 8 module matrix (2/4)

An update is available for perl-DBD-Pg, perl-DBI, perl-IO-HTML, perl-LWP-MediaTypes, perl-Data-Dump, perl-FCGI, perl-HTTP-Message, perl-Net-HTTP, perl-File-pushd, perl-Try-Tiny, perl-Digest-HMAC, perl-HTML-Parser, perl-NTLM, perl-Mozilla-CA, perl-IO-Socket-SSL, perl-libwww-perl, perl-Encode-Local...

5.32 metadata for the Rocky Linux 8 module matrix (3/4)

An update is available for perl-DBD-Pg, perl-Parse-PMFile, perl-DBI, perl-DBD-SQLite, perl-YAML, perl-CPAN-DistnameInfo, perl-CPAN-Meta-Check, perl-FCGI, perl-DBD-MySQL, perl-App-cpanminus, perl-File-pushd, perl-String-ShellQuote, perl-Module-CPANfile. This update affects Rocky Linux 8. A Common...

5.32 metadata for the Rocky Linux 8 module matrix (1/4)

An update is available for perl-DBD-Pg, perl-Parse-PMFile, perl-DBI, perl-DBD-SQLite, perl-YAML, perl-CPAN-DistnameInfo, perl-CPAN-Meta-Check, perl-FCGI, perl-DBD-MySQL, perl-App-cpanminus, perl-File-pushd, perl-String-ShellQuote, perl-Module-CPANfile. This update affects Rocky Linux 8. A Common...

DEBIAN-CVE-2022-24903

Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buffer overflow when octet-counted framing is used. This can result in a segfault or some other malfunction. As of our understanding, this vulnerability can not be used for remote code...

CVE-2022-24903

Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buffer overflow when octet-counted framing is used. This can result in a segfault or some other malfunction. As of our understanding, this vulnerability can not be used for remote code...