Important: Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.16.0 release

Red Hat OpenShift Dev Spaces 3.16 has been released. All containers have been updated to include feature enhancements, bug fixes and CVE fixes. Following the Red Hat Product Security standards this update is rated as having a security impact of Important. The Common Vulnerability Scoring System...

Rust 安全漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation in the United States. A security vulnerability exists in versions of Rust prior to 1.81.0 that stems from a fix that can be bypassed when a batch file name has trailing spaces or periods...

June 11, 2024—KB5039227 (OS Build 20348.2527)

None None...

June 11, 2024—KB5039236 (OS Build 25398.950)

None None...

June 11, 2024—KB5039213 (OS Build 22000.3019)

None None...

Important: Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.15.0 release

Red Hat OpenShift Dev Spaces 3.15 has been released. All containers have been updated to include feature enhancements, bug fixes and CVE fixes. Following the Red Hat Product Security standards this update is rated as having a security impact of Important. The Common Vulnerability Scoring System...

Microsoft Windows Storage Backlink Vulnerability

Microsoft Windows Storage Spaces Controller is an essential driver for providing storage space functionality from Microsoft Corporation USA. A backlink vulnerability exists in Microsoft Windows Storage. The following products and editions are affected:Windows 10 Version 1809 for x64-based...

python-pydantic: regular expression denial of service via crafted email string

A flaw was found in Pydantic, where it did not properly validate regular expressions containing white spaces. This flaw allows remote users to cause a denial of service attack via a crafted email string...

AZL-42439 CVE-2024-5585 affecting package php for versions less than 8.3.8-1

In PHP versions 8.1. before 8.1.29, 8.2. before 8.2.20, 8.3. before 8.3.8, the fix for CVE-2024-1874 does not work if the command name includes trailing spaces. Original issue: when using procopen command with array syntax, due to insufficient escaping, if the arguments of the executed command ar...

[SECURITY] Fedora 39 Update: rust-uu_unexpand-0.0.23-3.fc39

unexpand uutils convert input spaces to tabs...

[SECURITY] Fedora 39 Update: rust-uu_expand-0.0.23-3.fc39

expand uutils convert input tabs to spaces...

Fedora: Security Advisory for rust-uu_unexpand (FEDORA-2024-ce2936b568)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 40 Update: rust-uu_unexpand-0.0.23-3.fc40

unexpand uutils convert input spaces to tabs...

[SECURITY] Fedora 40 Update: rust-uu_expand-0.0.23-3.fc40

expand uutils convert input tabs to spaces...

The vulnerability of the PHP programming language interpreter, related to incorrect handling of cookie files, allows attackers to intercept sessions and gain unauthorized access to protected information.

The vulnerability of the PHP programming language interpreter relates to the incorrect processing of cookie files, resulting from replacing spaces, periods, and open parentheses with underscores. Exploiting this vulnerability can allow an attacker to intercept sessions and gain unauthorized acces...

CVE-2024-34527

spacesplugin/app.py in SolidUI 0.4.0 has an unnecessary print statement for an OpenAI key. The printed string might be logged...

PT-2024-25949 · Solidui · Solidui

Name of the Vulnerable Software and Affected Versions: SolidUI version 0.4.0 Description: The issue concerns an unnecessary print statement in the spaces plugin/app.py file for an OpenAI key. This printed string might be logged, potentially exposing sensitive information. Recommendations: For...

jinja2: HTML attribute injection when passing user input as keys to xmlattr filter

A cross-site scripting XSS flaw was found in Jinja2 due to the xmlattr filter allowing keys with spaces, contrary to XML/HTML attribute standards. If an application accepts user-input keys and renders them for other users, attackers can inject additional attributes, potentially leading to XSS. Th...

PHP 安全漏洞

PHP is a scripting language for PHP that executes on the server side. A security vulnerability exists in PHP versions 8.3. through prior to 8.3.5, which stems from the function mbencodemimeheader running indefinitely for certain inputs containing long strings of non-space characters followed by...

Microsoft Windows Storage 安全漏洞

Microsoft Windows Storage Spaces Controller is a necessary driver for providing storage space functionality from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Storage. The following products and versions are affected: Windows Server 2022,Windows Server 2022 Serve...