SUSE SLES12 Security Update : python-requests (SUSE-SU-2024:2068-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2068-1 advisory. - CVE-2024-35195: Fixed cert verification regardless of changes to the value of verify bsc1224788. Tenable has extracted the preceding...

CVE-2024-0397 Memory race condition in ssl.SSLContext certificate store methods

A defect was discovered in the Python “ssl” module where there is a memory race condition with the ssl.SSLContext methods “certstorestats” and “getcacerts”. The race condition can be triggered if the methods are called at the same time as certificates are loaded into the SSLContext, such as durin...

CVE-2024-26147 affecting package cert-manager for versions less than 1.11.2-10

CVE-2024-26147 affecting package cert-manager for versions less than 1.11.2-10. A patched version of the package is available...

CVE-2023-45288 affecting package cert-manager for versions less than 1.11.2-9

CVE-2023-45288 affecting package cert-manager for versions less than 1.11.2-9. A patched version of the package is available...

Siemens Teamcenter Visualization and JT2Go

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Kiuwan Local Analyzer / SAST / SaaS XML Injection / XSS / IDOR

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple critical vulnerabilities product: Kiuwan SAST on-premise KOP & cloud/SaaS Kiuwan Local Analyzer KLA vulnerable version: Kiuwan SAST 2.8.2402.3 Kiuwan Local...

SUSE-SU-2024:1946-1 Security update for python-requests

This update for python-requests fixes the following issues: - CVE-2024-35195: Fixed cert verification regardless of changes to the value of verify bsc1224788...

SPECTR Malware Targets Ukraine Defense Forces in SickSync Campaign

The Computer Emergency Response Team of Ukraine CERT-UA has warned of cyber attacks targeting defense forces in the country with a malware called SPECTR as part of an espionage campaign dubbed SickSync. The agency attributed the attacks to a threat actor it tracks under the moniker UAC-0020, whic...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: trivy, wgcf, kafkaexporter, flux-kustomize-controller, docker, cue-fips, scorecard, prometheus-redis-exporter, pulumi-language-dotnet, doppler-kubernetes-operator, rabbitmq-cluster-operator, grpcurl, velero-plugin-for-aws-fips, gostatsd, slsa-verifier, gitness,...

Mageia: Security Advisory (MGASA-2024-0210)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated python-requests packages fix security vulnerability

CVE-2024-35195: Fixed cert verification regardless of changes to the value of verify bsc1224788...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python-requests (SUSE-SU-2024:1880-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:1880-1 advisory. - CVE-2024-35195: Fixed cert verification regardless of changes to the value of verify bsc1224788. Tenabl...

SUSE-SU-2024:1880-1 Security update for python-requests

This update for python-requests fixes the following issues: - CVE-2024-35195: Fixed cert verification regardless of changes to the value of verify bsc1224788...

SUSE-SU-2024:1857-1 Security update for python-requests

This update for python-requests fixes the following issues: - CVE-2024-35195: Fixed cert verification regardless of changes to the value of verify bsc1224788...

CVE-2024-35195

An incorrect control flow implementation vulnerability was found in Requests. If the first request in a session is made with verify=False, all subsequent requests to the same host will continue to ignore cert verification...

AZL-42145 CVE-2024-35195 affecting package python-requests for versions less than 2.27.1-7

Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests Session, if the first request is made with verify=False to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of verif...

AZL-42106 CVE-2024-35195 affecting package tensorflow for versions less than 2.16.1-8

Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests Session, if the first request is made with verify=False to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of verif...

CVE-2024-35195

Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests Session, if the first request is made with verify=False to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of verif...

AZL-42127 CVE-2024-35195 affecting package python-requests for versions less than 2.31.0-2

Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests Session, if the first request is made with verify=False to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of verif...

CVE-2024-35195

Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests Session, if the first request is made with verify=False to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of verif...