CVE-2023-27535 affecting package cmake for versions less than 3.28.2-1

CVE-2023-27535 affecting package cmake for versions less than 3.28.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-38546 affecting package cmake for versions less than 3.21.4-10

CVE-2023-38546 affecting package cmake for versions less than 3.21.4-10. A patched version of the package is available...

CVE-2023-27533 affecting package cmake for versions less than 3.28.2-1

CVE-2023-27533 affecting package cmake for versions less than 3.28.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-27538 affecting package cmake for versions less than 3.28.2-1

CVE-2023-27538 affecting package cmake for versions less than 3.28.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-38545 affecting package cmake for versions less than 3.21.4-10

CVE-2023-38545 affecting package cmake for versions less than 3.21.4-10. A patched version of the package is available...

CVE-2023-27536 affecting package cmake for versions less than 3.28.2-1

CVE-2023-27536 affecting package cmake for versions less than 3.28.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-28320 affecting package cmake for versions less than 3.28.2-1

CVE-2023-28320 affecting package cmake for versions less than 3.28.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-23914 affecting package cmake for versions less than 3.21.4-10

CVE-2023-23914 affecting package cmake for versions less than 3.21.4-10. A patched version of the package is available...

CVE-2023-27534 affecting package cmake for versions less than 3.28.2-1

CVE-2023-27534 affecting package cmake for versions less than 3.28.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-23916 affecting package cmake for versions less than 3.28.2-1

CVE-2023-23916 affecting package cmake for versions less than 3.28.2-1. An upgraded version of the package is available that resolves this issue...

AZL-35782 CVE-2024-24806 affecting package cmake for versions less than 3.28.2-6

libuv is a multi-platform support library with a focus on asynchronous I/O. The uvgetaddrinfo function in src/unix/getaddrinfo.c and its windows counterpart src/win/getaddrinfo.c, truncates hostnames to 256 characters before calling getaddrinfo. This behavior can be exploited to create addresses...

CVE-2023-52426

libexpat through 2.5.0 allows recursive XML Entity Expansion if XMLDTD is undefined at compile time...

CVE-2023-52425

libexpat through 2.5.0 allows a denial of service resource consumption because many full reparsings are required in the case of a large token for which multiple buffer fills are needed...

AZL-35781 CVE-2023-46219 affecting package cmake for versions less than 3.29.6-1

When saving HSTS data to an excessively long file name, curl could end up removing all contents, making subsequent requests using that file unaware of the HSTS status they should otherwise use...

AZL-34618 CVE-2023-46218 affecting package cmake for versions less than 3.29.6-1

This flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back to more origins than what is otherwise allowed or possible. This allows a site to set cookies that then would get sent to different and unrelated sites and domains. It could do this by exploiting a...

AZL-32119 CVE-2023-46218 affecting package cmake for versions less than 3.21.4-13

This flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back to more origins than what is otherwise allowed or possible. This allows a site to set cookies that then would get sent to different and unrelated sites and domains. It could do this by exploiting a...

Fedora 38 : mlpack (2023-23c0bd9a45)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-23c0bd9a45 advisory. Use RPM macros for python and cmake build directory ---- Ensure stbimage contains the latest CVE patches Tenable has extracted the preceding description bloc...

Fedora 39 : mlpack (2023-862bb40df5)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-862bb40df5 advisory. Use RPM macros for python and cmake build directory ---- Ensure stbimage contains the latest CVE patches Tenable has extracted the preceding description bloc...

CBL Mariner 2.0 Security Update: cmake (CVE-2023-38546)

The version of cmake installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-38546 advisory. - CVE-2023-38546 is a cookie injection vulnerability in the curleasyduphandle, a function in libcurl that...

SUSE-RU-2023:4192-1 Recommended update for libssh2_org

This update for libssh2org fixes the following issues: - Upgrade to version 1.11.0 in SLE-15: jscPED-7040 Update to 1.11.0: Enhancements and bugfixes - Adds support for encrypt-then-mac ETM MACs - Adds support for AES-GCM crypto protocols - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed255...