75 matches found
OPENSUSE-SU-2026:21424-1 Security update for apache-ivy
This update for apache-ivy fixes the following issue: - CVE-2026-26032: directory traversal sequences in module coordinates can allow overwriting arbitrary files outside the configured "buildRoot" directory bsc1271727. Changes for apache-ivy: - Upgrade to 2.6.0: + the ivy:retrieve task failed whe...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal via the PackagerResolver process. An attacker can overwrite files outside the intended buildRoot directory by supplying specially crafted module coordinates containing directory traversal sequences. This is only...
CVE-2026-26032: Improper Limitation of a Pathname to a Restricted Directory
The PackagerResolver of Apache Ivy is able to download online artifacts and to repackage them in a format defined by a packager.xml file. This repackaging is done by an Ant script, which is stored in a subdirectory of the configured "buildRoot" directory. This subdirectory is calculated based on...
[SECURITY] Fedora 42 Update: rust-add-determinism-0.6.0-3.fc42
RPM buildroot helper to strip nondeterministic bits in files...
CVE-2024-34455
Buildroot before 0b2967e lacks the sticky bit for the /dev/shm directory. A fix was released in 2024.02.2...
CVE-2023-45841
Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulnerability is related to the...
CVE-2023-45842
Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulnerability is related to the mxsldr...
CVE-2023-45840
Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulnerability is related to the...
EUVD-2023-50112
Malicious code in bioql PyPI...
EUVD-2023-48014
Malicious code in bioql PyPI...
EUVD-2023-50108
Malicious code in bioql PyPI...
EUVD-2023-50110
Malicious code in bioql PyPI...
EUVD-2023-50109
Malicious code in bioql PyPI...
EUVD-2023-50111
Malicious code in bioql PyPI...
CVE-2023-43608
A data integrity vulnerability exists in the BRNOCHECKHASHFOR functionality of Buildroot 2023.08.1 and dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder...
CVE-2023-45838
Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulnerability is related to the aufs packa...
CVE-2023-45839
Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulnerability is related to the aufs-util...
CVE-2024-34455
Buildroot before 0b2967e lacks the sticky bit for the /dev/shm directory. A fix was released in 2024.02.2...
PT-2024-25909 · Buildroot · Buildroot
Name of the Vulnerable Software and Affected Versions: Buildroot versions prior to 0b2967e Buildroot version 2024.02.2 and later are not affected, but all versions before 0b2967e are vulnerable. Since 2024.02.2 is the fixed version, we list all versions prior to 0b2967e as vulnerable. Description...
