UBUNTU-CVE-2023-32681

Requests is a HTTP library. Since Requests 2.3.0, Requests has been leaking Proxy-Authorization headers to destination servers when redirected to an HTTPS endpoint. This is a product of how we use rebuildproxies to reattach the Proxy-Authorization header to requests. For HTTP connections sent...

CLSA-2023-1684759167 Update of file

rebuild to rebrand to TuxCare ELS...

SUSE-SU-2023:2253-1 Security update for terraform-provider-aws

This update of terraform-provider-aws fixes the following issues: - rebuild the package with the go 1.19 security release bsc1200441 bsc1209658...

apr-util security update

1.5.2-6.0.1.1 - Rebuild bumping release 1.5.2-6.1 - Resolves: 2196120 - CVE-2022-25147 apr-util: out-of-bounds writes in the aprbase64...

Moderate: Red Hat Security Advisory: Red Hat build of Cryostat 2.3.0: new RHEL 8 container images

New Red Hat build of Cryostat 2.3.0 on RHEL 8 container images are now available New Red Hat build of Cryostat 2.3.0 on RHEL 8 container images have been released, adding a variety of features and bug fixes. Users of the Red Hat build of Cryostat 2.2.1 on RHEL 8 container images are advised to...

SUSE-SU-2023:2213-1 Security update for prometheus-sap_host_exporter

This update of prometheus-saphostexporter fixes the following issues: - rebuild the package with the go 1.19 security release bsc1200441 bsc1209658...

SUSE-SU-2023:2177-1 Security update for buildah

This update of buildah fixes the following issues: - rebuild the package with the go 19.9 secure release bsc1200441...

SUSE-SU-2023:2157-1 Security update for conmon

This update of conmon fixes the following issues: - rebuild the package with the go 19.9 secure release bsc1200441...

SUSE-SU-2023:2139-1 Security update for ignition

This update of ignition fixes the following issues: - rebuild the package with the go 19.9 secure release bsc1200441...

PT-2023-36160 · Ignition · Ignition

Name of the Vulnerable Software and Affected Versions: ignition affected versions not specified Description: The issue is related to a security concern that has been addressed by rebuilding the package with the go 19.9 secure release. Recommendations: At the moment, there is no information about ...

PT-2023-36161 · Amazon · Amazon-Ssm-Agent

Name of the Vulnerable Software and Affected Versions: amazon-ssm-agent affected versions not specified Description: The issue is related to a security concern that has been addressed by rebuilding the package with the go 19.9 secure release. Recommendations: At the moment, there is no informatio...

CVE-2023-2474

A vulnerability has been found in Rebuild 3.2 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to chan...

Cross site request forgery (csrf)

A vulnerability has been found in Rebuild 3.2 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to chan...

CVE-2023-2474 Rebuild cross-site request forgery

A vulnerability has been found in Rebuild 3.2 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to chan...

CVE-2023-2474 Rebuild cross-site request forgery

A vulnerability has been found in Rebuild 3.2 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to chan...

CVE-2023-2474

CVE-2023-2474 concerns Rebuild 3.2, where a cross-site request forgery (CSRF) vulnerability is present in unknown code. The issue allows remote initiation and, per multiple sources, the exploit has been disclosed publicly, with guidance to adjust configuration settings as a mitigation. The docume...

SUSE-SU-2023:2082-1 Security update for installation-images

This update of installation-images fixes the following issues: - rebuild the package with the new secure boot key bsc1209188...

PT-2023-19762 · Rebuild · Rebuild

Name of the Vulnerable Software and Affected Versions: Rebuild version 3.2 Description: A vulnerability has been found and classified as problematic, affecting unknown code and leading to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the publi...

Rebuild 跨站请求伪造漏洞

Rebuild is a highly customizable enterprise management system. A cross-site request forgery vulnerability exists in Rebuild version 3.2. An attacker could exploit this vulnerability to perform a cross-site request forgery attack...

WordPress AJAX Thumbnail Rebuild Plugin <= 1.13 is vulnerable to Broken Access Control

Software AJAX Thumbnail Rebuild Type Plugin Vulnerable versions = 1.13 Fixed in 1.14 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2022-47604 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID b90f03667897 Credits Justiice Required...