PT-2022-32178

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.246 Description The issue concerns the dm crypt feature, where the printing of the key is not constant-time. This could potentially lead to security vulnerabilities, although the actual impact and attack...

PT-2022-31909

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.120 Description The issue concerns the dm crypt feature, where the printing of the key is not constant-time. This could potentially lead to security vulnerabilities, although the actual impact and attack...

PT-2022-32045

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.197 Description The issue concerns the dm crypt feature, where the printing of the key is not constant-time. This could potentially lead to security vulnerabilities, although the actual impact and attack...

PT-2022-31428

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.13 Description The issue concerns the dm crypt feature, where the printing of the key is not constant-time, potentially leading to security vulnerabilities. The actual impact and attack plausibility have no...

PT-2022-31694

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.45 Description The issue concerns the dm crypt feature, where the printing of the key is not constant-time, potentially leading to security vulnerabilities. The actual impact and attack plausibility have no...

PT-2022-31114

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.2 Description The issue concerns the dm crypt feature in the Linux Kernel, where the printing of the key is not constant-time. This could potentially lead to security vulnerabilities, although the actual...

PT-2022-32269

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.282 Description The issue concerns the dm crypt feature, where the printing of the key is not constant-time. This could potentially lead to security vulnerabilities, although the actual impact and attack...

PT-2022-32351

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.317 Description The issue concerns the dm crypt feature, where the printing of the key is not constant-time. This could potentially lead to security vulnerabilities, although the actual impact and attack...

Malware in ps-crypt

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in ps-crypt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a3344ece704cd154a5d31406e030fcde233dcb88e1b8c72f5790bb4e9d1aa65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5501 Malicious code in ps-crypt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a3344ece704cd154a5d31406e030fcde233dcb88e1b8c72f5790bb4e9d1aa65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2020-28924

An issue was discovered in Rclone before 1.53.3. Due to the use of a weak random number generator, the password generator has been producing weak passwords with much less entropy than advertised. The suggested passwords depend deterministically on the time the second rclone was started. This limi...

new packages: perl-Crypt-OpenSSL-RSA

An update is available for perl-Crypt-OpenSSL-RSA. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the...

new packages: perl-Crypt-OpenSSL-Bignum

An update is available for perl-Crypt-OpenSSL-Bignum. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see th...

[SECURITY] Fedora 36 Update: golang-github-xordataexchange-crypt-0.0.2-11.20190412gitb2862e3.fc36

Store and retrieve encrypted configs from etcd or consul...

Fedora: Security Advisory for golang-github-xordataexchange-crypt (FEDORA-2022-3a63897745)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for golang-github-xordataexchange-crypt (FEDORA-2022-5cbd6de569)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 34 Update: golang-github-xordataexchange-crypt-0.0.2-11.20190412gitb2862e3.fc34

Store and retrieve encrypted configs from etcd or consul...

[SECURITY] Fedora 35 Update: golang-github-xordataexchange-crypt-0.0.2-11.20190412gitb2862e3.fc35

Store and retrieve encrypted configs from etcd or consul...

PT-2022-29556

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue is related to the removal of a check for CONFIG DM CRYPT in the crypto module for octeontx2. The actual impact and attack plausibility have not yet been proven. Recommendations For...