Google Using Clang Sanitizers to Protect Android Against Cellular Baseband Vulnerabilities

Google is highlighting the role played by Clang sanitizers in hardening the security of the cellular baseband in the Android operating system and preventing specific kinds of vulnerabilities. This comprises Integer Overflow Sanitizer IntSan and BoundsSanitizer BoundSan, both of which are part of...

SUSE-SU-2023:4709-1 Security update for go1.21

This update for go1.21 fixes the following issues: Update to go1.21.5: - CVE-2023-45285: cmd/go: git VCS qualifier in module path uses git:// scheme bsc1217834. - CVE-2023-45284: path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4 bsc1216943. - CVE-2023-39326: net/http:...

SUSE-SU-2023:4708-1 Security update for go1.20

This update for go1.20 fixes the following issues: Update to go1.20.12: - CVE-2023-45285: cmd/go: git VCS qualifier in module path uses git:// scheme bsc1217834. - CVE-2023-45284: path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4 bsc1216943. - CVE-2023-39326: net/http:...

Unrestricted Unwrap Fee Changes: Instability, Market Disruption, and Loss of Trust

Lines of code Vulnerability details Impact The current changeUnwrapFee function in the Ocean smart contract allows the owner to change the unwrap fee divisor with no restrictions, leading to several negative impacts: 1. Unstable Unwrap Fees: Frequent changes in the divisor can cause instability a...

Security Bulletin: IBM Cloud Pak for Data Scheduling binaries were built with a go compiler with vulnerabilities( CVE-2023-39318, CVE-2023-39319, CVE-2023-39533 )

Summary Golang compiler is used to build the binaries of IBM Cloud Pak for Data Scheduling. Vulnerability Details CVEID:CVE-2023-39318 DESCRIPTION: Golang Go is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the html/template package. A remote attacker...

Interface improperly implemented

Lines of code 34, 34, 34, 34, 30, 31, 32, 34, 35, 38https://github.com/Tapioca-DAO/tapioca-yieldbox-strategies-audi...

Fedora 37 : golang (2023-7e185b8c12)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-7e185b8c12 advisory. Includes security fixes to the path/filepath package, as well as bug fixes to the linker, the runtime, the compiler, and the go/types, net/http, and...

SUSE: Security Advisory (SUSE-SU-2023:4480-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2023:4480-1 Security update for gcc13

This update for gcc13 fixes the following issues: This update ship the GCC 13.2 compiler suite and its base libraries. The compiler base libraries are provided for all SUSE Linux Enterprise 15 versions and replace the same named GCC 12 ones. The new compilers for C, C++, and Fortran are provided...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : go1.20-openssl (SUSE-SU-2023:4472-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4472-1 advisory. - Line directives //line can be used to bypass the restrictions on //go:cgo directives, allowing...

SUSE-SU-2023:4416-1 Security update for containerized-data-importer

This update for containerized-data-importer fixes the following issue: - rebuild with current go compiler...

SUSE-RU-2023:4416-1 Security update for containerized-data-importer

This update for containerized-data-importer fixes the following issue: - rebuild with current go compiler...

PT-2023-36102 · Unknown · Containerized-Data-Importer

Name of the Vulnerable Software and Affected Versions: containerized-data-importer affected versions not specified Description: The issue is related to the containerized-data-importer, which has been rebuilt with the current Go compiler to fix a problem. No specific details about the issue,...

CVE-2021-41411

A flaw was found in the XML external entity injection vulnerability in the KieModuleMarshaller.java module of drools-compiler. This issue may lead to the disclosure of sensitive information...

The vulnerability of the Marked compiler/analyzer, related to incorrect processing of regular expressions, allows a hacker to trigger a service failure.

The vulnerability of the marking analyzer and compiler is related to the incorrect processing of the regular expression block.def. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the Marked compiler/analyzer, related to incorrect processing of regular expressions, allows a hacker to trigger a service failure.

The vulnerability of the Marked compiler and analyzer is related to the incorrect processing of the regular expression inline.reflinkSearch. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Moderate: ncurses security and bug fix update

The ncurses new curses library routines are a terminal-independent method of updating character screens with reasonable optimization. The ncurses packages contain support utilities including a terminfo compiler tic, a decompiler infocmp, clear, tput, tset, and a termcap conversion tool captoinfo...

Fedora 39 : clang / compiler-rt / flang / libclc / libcxx / libomp / lld / lldb / etc (2023-67f0f8d186)

The remote Fedora 39 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2023-67f0f8d186 advisory. Update to LLVM 17.0.2 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

Rocky Linux 8 : rust-toolset:rhel8 (RLSA-2021:4590)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:4590 advisory. - DISPUTED An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via...

Rocky Linux 8 : libsepol (RLSA-2021:4513)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:4513 advisory. - The CIL compiler in SELinux 3.2 has a use-after-free in cilverifyclassperms called from cilverifyclasspermission and cilpreverifyhelper. CVE-2021-3608...