SUSE-SU-2023:4116-1 Security update for slurm

This update for slurm fixes the following issues: - CVE-2023-41914: Fixed several filesystem handling race conditions that could lead to an attacker taking control of an arbitrary file bsc1216207. Non-security fixes: - Fixed dependency issues that could arise during an upgrade bsc1208810...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via the theProcess functionality due to improper user-input sanitization. PoC js var root = require"exec-local-bin" root"& touch JHU", Remediation Upgrade exec-local-bin to version 1.2.0 or higher. References - GitHub...

Information Disclosure

django-anymail is vulnerable to information disclosure. When an error occurs, the value of the WEBHOOKAUTHORIZATION setting is printed in the Django error reports. This may allow anyone with access to the logs to discover the webhook shared secret and send inbound/tracking events to your...

Fedora 17 : qemu-1.0.1-1.fc17 (2012-11302)

Fix systemtap tapsets bz 831763 - Fix VNC audio tunnelling bz 840653 - CVE-2012-2652: Possible symlink attacks with -snapshot bz 825697, bz 824919 - Don't renable ksm on update bz 815156 - Bump usbredir dep bz 812097 - Fix RPM install error on non-virt machines bz 660629 - Obsolete openbios to...