Fedora: Security Advisory for rust-nettle-sys (FEDORA-2023-1d0d71b6aa)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Design/Logic Flaw

ntpd-rs is an NTP implementation written in Rust. ntpd-rs does not validate the length of NTS cookies in received NTP packets to the server. An attacker can crash the server by sending a specially crafted NTP packet containing a cookie shorter than what the server expects. The server also crashes...

CVE-2023-33192 Improper handling of NTS cookie length that could crash the ntpd-rs server

ntpd-rs is an NTP implementation written in Rust. ntpd-rs does not validate the length of NTS cookies in received NTP packets to the server. An attacker can crash the server by sending a specially crafted NTP packet containing a cookie shorter than what the server expects. The server also crashes...

CVE-2023-33192 Improper handling of NTS cookie length that could crash the ntpd-rs server

ntpd-rs is an NTP implementation written in Rust. ntpd-rs does not validate the length of NTS cookies in received NTP packets to the server. An attacker can crash the server by sending a specially crafted NTP packet containing a cookie shorter than what the server expects. The server also crashes...

CVE-2023-33192 Improper handling of NTS cookie length that could crash the ntpd-rs server

ntpd-rs is an NTP implementation written in Rust. ntpd-rs does not validate the length of NTS cookies in received NTP packets to the server. An attacker can crash the server by sending a specially crafted NTP packet containing a cookie shorter than what the server expects. The server also crashes...

[SECURITY] Fedora 37 Update: rust-nettle-sys-2.2.0-1.fc37

Low-level Rust bindings for the Nettle cryptographic library...

[SECURITY] Fedora 37 Update: rust-sequoia-octopus-librnp-1.5.0-2.fc37

Reimplementation of RNP's interface using Sequoia for use with Thunderbird...

[SECURITY] Fedora 37 Update: rust-sequoia-openpgp-1.16.0-1.fc37

OpenPGP data types and associated machinery...

[SECURITY] Fedora 37 Update: rust-sequoia-sop-0.28.0-2.fc37

An implementation of the Stateless OpenPGP Interface using Sequoia...

[SECURITY] Fedora 37 Update: rust-sequoia-sq-0.26.0-8.fc37

Command-line frontends for Sequoia...

[SECURITY] Fedora 37 Update: rust-sequoia-sqv-1.1.0-5.fc37

Simple OpenPGP signature verification program...

[SECURITY] Fedora 37 Update: rust-sequoia-policy-config-0.6.0-4.fc37

Configure Sequoia using a configuration file...

[SECURITY] Fedora 37 Update: rust-buffered-reader-1.2.0-1.fc37

A super-powered Reader...

[SECURITY] Fedora 37 Update: rust-nettle-7.3.0-1.fc37

Rust bindings for the Nettle cryptographic library...

AZL-26810 CVE-2023-28319 affecting package rust for versions less than 1.72.0-2

A use after free vulnerability exists in curl v8.1.0 in the way libcurl offers a feature to verify an SSH server's public key using a SHA 256 hash. When this check fails, libcurl would free the memory for the fingerprint before it returns an error message containing the now freed hash. This flaw...

Fedora 37 : rust-buffered-reader / rust-nettle / rust-nettle-sys / etc (2023-1d0d71b6aa)

The remote Fedora 37 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2023-1d0d71b6aa advisory. - Update the sequoia-openpgp crate to version 1.16.0. - Update the nettle crate to version 7.3.0. - Update the nettle-sys crate to version 2.2.0. - Update th...

netavark bug fix and enhancement update

An update is available for netavark. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Netavark is a rust based network stack for containers. Bug Fixes and...

CVE-2023-27477 affecting package rust for versions less than 1.68.2-2

CVE-2023-27477 affecting package rust for versions less than 1.68.2-2. A patched version of the package is available...

A week in security (May 15-21)

Last week on Malwarebytes Labs: Why we should be more open about ransomware attacks Windows 11 is showing its first signs of Rust Update now! Ruckus vulnerability added to CISAs list of actively exploited bugs 3 reasons to use a VPN PharMerica breach impacts almost 6 million people Leaked Babuk...

Fedora: Security Advisory for rust-ybaas (FEDORA-2023-80ab942675)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...