PT-2023-36254 · Google +1 · Go +1

Name of the Vulnerable Software and Affected Versions: amazon-ecs-init affected versions not specified Description: The issue is related to a security release in the Go programming language, version 1.21. The update of amazon-ecs-init is intended to address this issue by rebuilding the package wi...

PT-2023-36256 · Go +1 · Go +1

Name of the Vulnerable Software and Affected Versions: kubernetes1.18 version 1.18 Description: The issue is related to a security release in the go 1.21 package, which is used by kubernetes1.18. The package has been rebuilt with the go 1.21 security release to address the issue. Recommendations:...

PT-2023-36257 · Amazon · Amazon-Ssm-Agent

Name of the Vulnerable Software and Affected Versions: amazon-ssm-agent affected versions not specified Description: The issue is related to a security release in the go 1.21 package, which is used by the amazon-ssm-agent. The package has been rebuilt with the go 1.21 security release to address...

SUSE-SU-2023:3508-1 Security update for terraform-provider-helm

This update of terraform-provider-helm fixes the following issues: - rebuild the package with the go 1.21 security release bsc1212475...

PT-2023-36247 · Suse · Container-Suseconnect

Name of the Vulnerable Software and Affected Versions: container-suseconnect affected versions not specified Description: The issue is related to a security release in the go 1.20 package. The container-suseconnect package has been rebuilt with this security release to address the issue. There is...

SUSE-SU-2023:3010-1 Security update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer

This update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer fixes the following issues: This update rebuilds containerized-data-importer...

CVE-2023-3603

A missing allocation check in sftp server processing read requests may cause a NULL dereference on low-memory conditions. The malicious client can request up to 4GB SFTP reads, causing allocation of up to 4GB buffers, which was not being checked for failure. This will likely crash the authenticat...

CVE-2023-3603

A missing allocation check in sftp server processing read requests may cause a NULL dereference on low-memory conditions. The malicious client can request up to 4GB SFTP reads, causing allocation of up to 4GB buffers, which was not being checked for failure. This will likely crash the authenticat...

Samba Spotlight mdssvc RPC Request Type

Description When parsing Spotlight mdssvc RPC packets, one encoded data structure is a key-value style dictionary where the keys are character strings and the values can be any of the supported types in the mdssvc protocol. Due to a lack of type checking in callers of the function...

Adobe Releases Security Updates for ColdFusion

Adobe has released security updates to address a critical vulnerability CVE-2023-38203 affecting ColdFusionlink is external. An attacker can exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the Adobe security release...

SUSE-SU-2023:2868-1 Security update for cni

This update of cni fixes the following issues: - rebuild the package with the go 1.20 security release bsc1206346...

PT-2023-36231 · Unknown · Cni-Plugins

Name of the Vulnerable Software and Affected Versions: cni-plugins affected versions not specified Description: The issue is related to the rebuild of the cni-plugins package with the go 1.20 security release. Recommendations: At the moment, there is no information about a newer version that...

PT-2023-36221 · Unknown · Geoipupdate

Name of the Vulnerable Software and Affected Versions: geoipupdate affected versions not specified Description: The issue is related to the geoipupdate package, which has been rebuilt with the go 1.20 security release. Recommendations: At the moment, there is no information about a newer version...

About the security content of Rapid Security Responses for macOS Ventura 13.4.1

About the security content of Rapid Security Responses for macOS Ventura 13.4.1 This document describes the content of Rapid Security Responses. About Rapid Security Responses Rapid Security Responses deliver important security improvements between software updates and are available only for the...

PT-2023-36219 · Unknown · Prometheus-Sap Host Exporter

Name of the Vulnerable Software and Affected Versions: prometheus-sap host exporter affected versions not specified Description: The issue is related to the prometheus-sap host exporter package, which has been rebuilt with the go 1.20 security release. Additionally, the exporter package descripti...

Virtual Classroom, , SQL Injection

Developer release blog https://blog.braincert.com/virtual-classroom-security-release-elevate-your-online-learning-on-wordpress-and-joomla/...

CVE-2023-30665

Improper input validation vulnerability in OnOemServiceMode in libsec-ril prior to SMR Jul-2023 Release 1 allows local attackers to cause an Out-Of-Bounds read...

GitLab 12.8.x < 15.11.11, 16.0.x < 16.0.7, 16.1.x < 16.1.2 Path Traversal Vulnerability

GitLab is prone to a path traversal vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gitlab:gitlab"; if description...

SUSE-SU-2023:2757-1 Security update for prometheus-sap_host_exporter

This update for prometheus-saphostexporter fixes the following issues: - rebuild the package with the go 1.20 security release bsc1208270. - fixed exporter package description bsc1211311...

PT-2023-36211 · Hashicorp · Terraform-Provider-Aws

Name of the Vulnerable Software and Affected Versions: terraform-provider-aws affected versions not specified Description: The issue is related to a security release in the Go programming language, version 1.20. The terraform-provider-aws package has been rebuilt to incorporate this security...