cloud-init bug fix and enhancement update

The cloud-init packages provide a set of init scripts for cloud instances. Cloud instances need special scripts to run during initialization to retrieve and install SSH keys, and to let the user run various scripts. Bug Fixes and Enhancements: cloud-init writes route6-$DEVICE config with a HEX...

Mageia: Security Advisory (MGASA-2021-0375)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

kexec-tools security, bug fix, and enhancement update

2.0.20-57.0.3 - Merge 8.4 extra patches for SB boot environment Orabug: 33512440 2.0.20-57.0.2 - Merge SRPM/ol8-u4 orabug patches into SRPM/ol8-u5 Orabug: 33471981 2.0.20-57.0.1 - makedumpfile: Add support for newer kernels up to v5.12 Orabug: 33250117 2.0.20-57 - kdumpctl: enable secure boot on...

Updated perl-Net-Netmask package fixes a security vulnerability

The Net::Netmask module before 2.0000 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, which in some situations allows attackers to bypass access control that is based on IP addresses CVE-2021-29424...

MGASA-2021-0375 Updated perl-Net-Netmask package fixes a security vulnerability

The Net::Netmask module before 2.0000 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, which in some situations allows attackers to bypass access control that is based on IP addresses CVE-2021-29424...

Security Bulletin: A security vulnerability in Node.js netmask module affects IBM Cloud Automation Manager

Summary A security vulnerability in Node.js netmask module affects IBM Cloud Automation Manager. Vulnerability Details CVEID: CVE-2021-28918 DESCRIPTION: Node.js netmask module is vulnerable to server-side request forgery, caused by the improper handling of mixed-format IP addresses. By using a...

Security Bulletin: A security vulnerability in Node.js netmask module affects IBM Cloud Pak for Multicloud Management Managed Service

Summary A security vulnerability in Node.js netmask module affects IBM Cloud Pak for Multicloud Management Managed Service. Vulnerability Details CVEID: CVE-2021-28918 DESCRIPTION: Node.js netmask module is vulnerable to server-side request forgery, caused by the improper handling of mixed-format...

Moderate: Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.2.3 security and bug fix update

Red Hat Advanced Cluster Management for Kubernetes 2.2.3 General Availability release images, which fix several bugs and security issues. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a...

Fedora 32 : perl-Net-Netmask (2021-c314017fcc)

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-c314017fcc advisory. - The Net::Netmask module before 2.0000 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, whi...

Fedora 33 : perl-Net-Netmask (2021-be62be8c7c)

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-be62be8c7c advisory. - The Net::Netmask module before 2.0000 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, whi...

7ghost (>=4.11.0, <=4.11.46), @0x18b2ee/parse-server (>=3.10.1, <=3.11.0) +2857 more potentially affected by CVE-2021-28918 +1 more via netmask (>=1.0.4, <=1.0.6)

netmask NPM version =1.0.4, =4.11.0, =3.10.1, =0.1.0, =0.1.0, =1.6.1, =0.0.1, =2.0.0, =0.0.9, =0.0.175, =0.0.81, =2.0.0, =0.9.17-pre.6, =1.0.5 and more Source cves: CVE-2021-28918, CVE-2021-29418 Source advisory: OSV:GHSA-4C7M-WXVM-R7GC...

Improper parsing of octal bytes in netmask

Improper input validation of octal strings in netmask npm package v1.0.6 and below allows unauthenticated remote attackers to perform indeterminate SSRF, RFI, and LFI attacks on many of the dependent packages. A remote unauthenticated attacker can bypass packages relying on netmask to filter IPs...

GHSA-4C7M-WXVM-R7GC Improper parsing of octal bytes in netmask

Improper input validation of octal strings in netmask npm package v1.0.6 and below allows unauthenticated remote attackers to perform indeterminate SSRF, RFI, and LFI attacks on many of the dependent packages. A remote unauthenticated attacker can bypass packages relying on netmask to filter IPs...

Privilege Escalation

libnet-netmask-perl is vulnerable to privilege escalation. The vulnerability exists due to extra zero characters at the begining of an IP address string not validated properly giving attackers bypass access control that is based on IP addresses...

Fedora: Security Advisory for perl-Net-Netmask (FEDORA-2021-be62be8c7c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for perl-Net-Netmask (FEDORA-2021-c314017fcc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for perl-Net-Netmask (FEDORA-2021-be62be8c7c)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for perl-Net-Netmask (FEDORA-2021-c314017fcc)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 33 Update: perl-Net-Netmask-2.0001-1.fc33

Net::Netmask parses and understands IPv4 and IPv6 CIDR blocks see for more information on CIDR blocks. There are also functions to insert a network block into a table and then later look up network blocks by an IP address using that table...

[SECURITY] Fedora 32 Update: perl-Net-Netmask-2.0001-1.fc32

Net::Netmask parses and understands IPv4 and IPv6 CIDR blocks see for more information on CIDR blocks. There are also functions to insert a network block into a table and then later look up network blocks by an IP address using that table...