brainhance (0.0.1), crystal4d (>=0.0.4, <=0.1.2) +4 more potentially affected by CVE-2021-37659 via tensorflow-gpu (>=2.4.0, <=2.4.2)

tensorflow-gpu PYPI version =2.4.0, =0.0.4, =1.1.1, =0.1.0.dev98, =1.0.0, =1.0.1 - tf-yarn-gpu 0.6.3 Source cves: CVE-2021-37659 Source advisory: MEND:CVE-2021-37659...

brainhance (0.0.1), crystal4d (>=0.0.4, <=0.1.2) +4 more potentially affected by CVE-2021-37649 via tensorflow-gpu (>=2.4.0, <=2.4.2)

tensorflow-gpu PYPI version =2.4.0, =0.0.4, =1.1.1, =0.1.0.dev98, =1.0.0, =1.0.1 - tf-yarn-gpu 0.6.3 Source cves: CVE-2021-37649 Source advisory: MEND:CVE-2021-37649...

brainhance (0.0.1), crystal4d (>=0.0.4, <=0.1.2) +4 more potentially affected by CVE-2021-37660 via tensorflow-gpu (>=2.4.0, <=2.4.2)

tensorflow-gpu PYPI version =2.4.0, =0.0.4, =1.1.1, =0.1.0.dev98, =1.0.0, =1.0.1 - tf-yarn-gpu 0.6.3 Source cves: CVE-2021-37660 Source advisory: MEND:CVE-2021-37660...

brainhance (0.0.1), crystal4d (>=0.0.4, <=0.1.2) +4 more potentially affected by CVE-2021-37636 via tensorflow-gpu (>=2.4.0, <=2.4.2)

tensorflow-gpu PYPI version =2.4.0, =0.0.4, =1.1.1, =0.1.0.dev98, =1.0.0, =1.0.1 - tf-yarn-gpu 0.6.3 Source cves: CVE-2021-37636 Source advisory: MEND:CVE-2021-37636...

This Week in Security News - July 30, 2021

Threat Actors Exploit Apache Hadoop YARN and BlackMatter Ransomware Claims to Be Best of REvil, Darkside...

Threat Actors Exploit Misconfigured Apache Hadoop YARN

We look into how threat actors are exploiting Apache Hadoop YARN, a part of the Hadoop framework that is responsible for executing tasks on the cluster. This analysis covers the payloads deployed, the tactics used in the attacks, and basic recommendations for strengthening cloud security...

animalai-train (>=0.6.0, <=1.0.3), coach-cli (0.91.0) +3 more potentially affected by CVE-2021-29618 via tensorflow (1.12.2)

tensorflow PYPI version 1.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - animalai-train =0.6.0, =0.10.0, =0.3.2, =0.4.3 Source cves: CVE-2021-29618 Source advisory: OSV:GHSA-XQFJ-CR6Q-PC8W...

brainhance (0.0.1), crystal4d (>=0.0.4, <=0.1.2) +3 more potentially affected by CVE-2021-29618 via tensorflow-gpu (>=2.4.0, <=2.4.1)

tensorflow-gpu PYPI version =2.4.0, =0.0.4, =1.1.1, =1.0.0, =1.0.1 - tf-yarn-gpu 0.6.3 Source cves: CVE-2021-29618 Source advisory: OSV:GHSA-XQFJ-CR6Q-PC8W...

animalai-train (>=0.6.0, <=1.0.3), coach-cli (0.91.0) +3 more potentially affected by CVE-2021-29613 via tensorflow (1.12.2)

tensorflow PYPI version 1.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - animalai-train =0.6.0, =0.10.0, =0.3.2, =0.4.3 Source cves: CVE-2021-29613 Source advisory: OSV:GHSA-VVG4-VGRV-XFR7...

brainhance (0.0.1), crystal4d (>=0.0.4, <=0.1.2) +3 more potentially affected by CVE-2021-29613 via tensorflow-gpu (>=2.4.0, <=2.4.1)

tensorflow-gpu PYPI version =2.4.0, =0.0.4, =1.1.1, =1.0.0, =1.0.1 - tf-yarn-gpu 0.6.3 Source cves: CVE-2021-29613 Source advisory: GHSA-VVG4-VGRV-XFR7...

brainhance (0.0.1), crystal4d (>=0.0.4, <=0.1.2) +3 more potentially affected by CVE-2021-29611 via tensorflow-gpu (>=2.4.0, <=2.4.1)

tensorflow-gpu PYPI version =2.4.0, =0.0.4, =1.1.1, =1.0.0, =1.0.1 - tf-yarn-gpu 0.6.3 Source cves: CVE-2021-29611 Source advisory: OSV:GHSA-9RPC-5V9Q-5R7F...

brainhance (0.0.1), crystal4d (>=0.0.4, <=0.1.2) +3 more potentially affected by CVE-2021-29610 via tensorflow-gpu (>=2.4.0, <=2.4.1)

tensorflow-gpu PYPI version =2.4.0, =0.0.4, =1.1.1, =1.0.0, =1.0.1 - tf-yarn-gpu 0.6.3 Source cves: CVE-2021-29610 Source advisory: GHSA-MQ5C-PRH3-3F3H...

brainhance (0.0.1), crystal4d (>=0.0.4, <=0.1.2) +3 more potentially affected by CVE-2021-29610 via tensorflow-gpu (>=2.4.0, <=2.4.1)

tensorflow-gpu PYPI version =2.4.0, =0.0.4, =1.1.1, =1.0.0, =1.0.1 - tf-yarn-gpu 0.6.3 Source cves: CVE-2021-29610 Source advisory: OSV:GHSA-MQ5C-PRH3-3F3H...

brainhance (0.0.1), crystal4d (>=0.0.4, <=0.1.2) +3 more potentially affected by CVE-2021-29608 via tensorflow-gpu (>=2.4.0, <=2.4.1)

tensorflow-gpu PYPI version =2.4.0, =0.0.4, =1.1.1, =1.0.0, =1.0.1 - tf-yarn-gpu 0.6.3 Source cves: CVE-2021-29608 Source advisory: GHSA-RGVQ-PCVF-HX75...

animalai-train (>=0.6.0, <=1.0.3), coach-cli (0.91.0) +3 more potentially affected by CVE-2021-29608 via tensorflow (1.12.2)

tensorflow PYPI version 1.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - animalai-train =0.6.0, =0.10.0, =0.3.2, =0.4.3 Source cves: CVE-2021-29608 Source advisory: OSV:GHSA-RGVQ-PCVF-HX75...

animalai-train (>=0.6.0, <=1.0.3), coach-cli (0.91.0) +3 more potentially affected by CVE-2021-29602 via tensorflow (1.12.2)

tensorflow PYPI version 1.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - animalai-train =0.6.0, =0.10.0, =0.3.2, =0.4.3 Source cves: CVE-2021-29602 Source advisory: OSV:GHSA-RF3H-XGV5-2Q39...

brainhance (0.0.1), crystal4d (>=0.0.4, <=0.1.2) +3 more potentially affected by CVE-2021-29602 via tensorflow-gpu (>=2.4.0, <=2.4.1)

tensorflow-gpu PYPI version =2.4.0, =0.0.4, =1.1.1, =1.0.0, =1.0.1 - tf-yarn-gpu 0.6.3 Source cves: CVE-2021-29602 Source advisory: OSV:GHSA-RF3H-XGV5-2Q39...

brainhance (0.0.1), crystal4d (>=0.0.4, <=0.1.2) +3 more potentially affected by CVE-2021-29602 via tensorflow-gpu (>=2.4.0, <=2.4.1)

tensorflow-gpu PYPI version =2.4.0, =0.0.4, =1.1.1, =1.0.0, =1.0.1 - tf-yarn-gpu 0.6.3 Source cves: CVE-2021-29602 Source advisory: GHSA-RF3H-XGV5-2Q39...

brainhance (0.0.1), crystal4d (>=0.0.4, <=0.1.2) +3 more potentially affected by CVE-2021-29600 via tensorflow-gpu (>=2.4.0, <=2.4.1)

tensorflow-gpu PYPI version =2.4.0, =0.0.4, =1.1.1, =1.0.0, =1.0.1 - tf-yarn-gpu 0.6.3 Source cves: CVE-2021-29600 Source advisory: OSV:GHSA-J8QH-3XRQ-C825...

animalai-train (>=0.6.0, <=1.0.3), coach-cli (0.91.0) +3 more potentially affected by CVE-2021-29598 via tensorflow (1.12.2)

tensorflow PYPI version 1.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - animalai-train =0.6.0, =0.10.0, =0.3.2, =0.4.3 Source cves: CVE-2021-29598 Source advisory: OSV:GHSA-PMPR-55FJ-R229...