353 matches found
Fedora 39 : mlpack (2023-862bb40df5)
The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-862bb40df5 advisory. Use RPM macros for python and cmake build directory ---- Ensure stbimage contains the latest CVE patches Tenable has extracted the preceding description bloc...
Fedora 38 : mlpack (2023-23c0bd9a45)
The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-23c0bd9a45 advisory. Use RPM macros for python and cmake build directory ---- Ensure stbimage contains the latest CVE patches Tenable has extracted the preceding description bloc...
CBL Mariner 2.0 Security Update: cmake (CVE-2023-38546)
The version of cmake installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-38546 advisory. - CVE-2023-38546 is a cookie injection vulnerability in the curleasyduphandle, a function in libcurl that...
SUSE-RU-2023:4192-1 Recommended update for libssh2_org
This update for libssh2org fixes the following issues: - Upgrade to version 1.11.0 in SLE-15: jscPED-7040 Update to 1.11.0: Enhancements and bugfixes - Adds support for encrypt-then-mac ETM MACs - Adds support for AES-GCM crypto protocols - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed255...
CVE-2023-44487 affecting package cmake for versions less than 3.21.4-10
CVE-2023-44487 affecting package cmake for versions less than 3.21.4-10. A patched version of the package is available...
CVE-2023-38546 affecting package cmake for versions less than 3.21.4-10
CVE-2023-38546 affecting package cmake for versions less than 3.21.4-10. A patched version of the package is available...
CVE-2023-38545 affecting package cmake for versions less than 3.21.4-10
CVE-2023-38545 affecting package cmake for versions less than 3.21.4-10. A patched version of the package is available...
AZL-34612 CVE-2023-38545 affecting package cmake for versions less than 3.21.4-10
This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is asked to pass along the host name to the SOCKS5 proxy to allow that to resolve the address instead of it getting done by curl itself, the maximum length that host name can be is 255 bytes. If the host na...
AZL-31501 CVE-2023-38545 affecting package cmake for versions less than 3.21.4-10
This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is asked to pass along the host name to the SOCKS5 proxy to allow that to resolve the address instead of it getting done by curl itself, the maximum length that host name can be is 255 bytes. If the host na...
AZL-34610 CVE-2023-38546 affecting package cmake for versions less than 3.21.4-10
This flaw allows an attacker to insert cookies at will into a running program using libcurl, if the specific series of conditions are met. libcurl performs transfers. In its API, an application creates "easy handles" that are the individual handles for single transfers. libcurl provides a functio...
AZL-31502 CVE-2023-38546 affecting package cmake for versions less than 3.21.4-10
This flaw allows an attacker to insert cookies at will into a running program using libcurl, if the specific series of conditions are met. libcurl performs transfers. In its API, an application creates "easy handles" that are the individual handles for single transfers. libcurl provides a functio...
SUSE-RU-2023:4066-1 Recommended update for libssh2_org
This update for libssh2org fixes the following issues: libssh2org was upgraded to version 1.11.0 in SUSE Linux Enterprise Server 12 SP5 jscPED-5721 Version update to 1.11.0: Enhancements and bugfixes: - Adds support for encrypt-then-mac ETM MACs - Adds support for AES-GCM crypto protocols - Adds...
AZL-31299 CVE-2023-44487 affecting package cmake for versions less than 3.21.4-10
The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...
AZL-34609 CVE-2023-44487 affecting package cmake for versions less than 3.21.4-10
The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...
CVE-2023-35945 affecting package cmake for versions less than 3.21.4-8
CVE-2023-35945 affecting package cmake for versions less than 3.21.4-8. A patched version of the package is available...
Critical Photon OS Security Update - PHSA-2023-4.0-0420
Updates of 'coredns', 'linux-aws', 'linux-secure', 'linux-rt', 'cmake', 'openssl' packages of Photon OS have been released...
Critical Photon OS Security Update - PHSA-2023-3.0-0603
Updates of 'go', 'bindutils', 'samba-client', 'etcd', 'cmake', 'calico' packages of Photon OS have been released...
Critical Photon OS Security Update - PHSA-2023-5.0-0035
Updates of 'cmake', 'cups', 'mozjs' packages of Photon OS have been released...