867 matches found
Linux kernel buffer error vulnerability
Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel that originates in the implementation of the exFAT driver's filename rebuild function, where filename characters are copied to a stack variable, which...
SUSE-SU-2023:2869-1 Security update for cni-plugins
This update of cni-plugins fixes the following issues: - rebuild the package with the go 1.20 security release bsc1206346...
Important: Red Hat Security Advisory: kernel security and bug fix update
An update for kernel is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
com.groupon.jenkins-ci.plugins:DotCi (>=2.8.9 <=2.40.00), com.groupon.jenkins-ci.plugins:DotCi-Fig-template (=1.1.0) +5 more potentially affected by CVE-2023-37954 via com.sonyericsson.hudson.plugins.rebuild:rebuild (>=1.16 <=1.25)
com.sonyericsson.hudson.plugins.rebuild:rebuild MAVEN version =1.16, =2.8.9, =1.1.3, =1.7.2, =1.1.2, =1.0.0, =1.1.2 - hudson.plugins:project-inheritance =2.0.0 Source cves: CVE-2023-37954 Source advisory: OSV:GHSA-5R5C-7RM4-MP4R...
GHSA-5R5C-7RM4-MP4R Jenkins Rebuilder Plugin vulnerable to Cross Site Request Forgery
Jenkins Rebuilder Plugin 320.v5a0933ae7d61 and earlier does not require POST requests for an HTTP endpoint, resulting in a cross-site request forgery CSRF vulnerability. This vulnerability allows attackers to rebuild a previous build...
Cross site request forgery (csrf)
A cross-site request forgery CSRF vulnerability in Jenkins Rebuilder Plugin 320.v5a0933ae7d61 and earlier allows attackers to rebuild a previous build...
SUSE-SU-2023:2813-1 Security update for skopeo
This update of skopeo fixes the following issues: - rebuild the package with the go 1.20 security release bsc1206346...
SUSE-SU-2023:2812-1 Security update for geoipupdate
This update of geoipupdate fixes the following issues: - rebuild the package with the go 1.20 security release bsc1206346...
CVE-2023-29406
The HTTP/1 client does not fully validate the contents of the Host header. A maliciously crafted Host header can inject additional headers or entire requests. With fix, the HTTP/1 client now refuses to send requests containing an invalid Request.Host or Request.URL.Host value...
SUSE-SU-2023:2798-1 Security update for prometheus-sap_host_exporter
This update for prometheus-saphostexporter fixes the following issues: - rebuild the package with the go 1.20 security release bsc1208270. - fixed exporter package description bsc1211311...
SUSE-SU-2023:2773-1 Security update for kubernetes1.18
This update of kubernetes1.18 fixes the following issues: - rebuild the package with the go 1.20 security release bsc1206346...
SUSE-SU-2023:2756-1 Security update for prometheus-sap_host_exporter
This update for prometheus-saphostexporter fixes the following issues: - rebuild the package with the go 1.20 security release bsc1208270. - fixed exporter package description bsc1211311...
SUSE-SU-2023:2744-1 Security update for rekor
This update of rekor fixes the following issues: - rebuild the package with the go 1.20 security release bsc1206346...
PT-2023-36207 · Rekor · Rekor
Name of the Vulnerable Software and Affected Versions: rekor affected versions not specified Description: The issue is related to a security release in the Go programming language, specifically version 1.20. The problem is addressed by rebuilding the rekor package with this security release...
SUSE-SU-2023:2717-1 Security update for buildah
This update of buildah fixes the following issues: - rebuild the package with the go 1.20 security release bsc1206346...
SUSE-SU-2023:2716-1 Security update for buildah
This update of buildah fixes the following issues: - rebuild the package with the go 1.20 security release bsc1206346...
SUSE-SU-2023:2617-1 Security update for google-cloud-sap-agent
This update of google-cloud-sap-agent fixes the following issues: - rebuild the package with the go 1.20 security release bsc1206346...
PT-2023-36191 · Amazon · Amazon-Ssm-Agent
Name of the Vulnerable Software and Affected Versions: amazon-ssm-agent affected versions not specified Description: The issue is related to a security concern addressed by rebuilding the package with the go 1.19 security release. Recommendations: At the moment, there is no information about a...