Security Bulletin: IBM Cloud Pak for Network Automation 2.6.5 fixes multiple security vulnerabilities

Summary IBM Cloud Pak for Network Automation 2.6.5 fixes multiple security vulnerabilities, listed in the CVEs below. Vulnerability Details CVEID:CVE-2002-0080 DESCRIPTION: rsync could allow a remote attacker to gain elevated privileges on the system. rsync fails to drop privileges for...

afex-devtools (>=0.1.0, <=0.32.0), alastria-auth (>=0.0.3, <=0.0.17) +57 more potentially affected by CVE-2023-46695 via django (>=4.1.0a1, <=4.1.12)

django PYPI version =4.1.0a1, =0.1.0, =0.0.3, =4.1.6.0, =0.6.3, =1.0.0, =0.1.1, =0.0.3, =0.1.0, =1.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.2 and more Source cves: CVE-2023-46695 Source advisory: OSV:GHSA-QMF9-6JQF-J8FQ...

afex-devtools (>=0.1.0, <=0.32.0), alastria-auth (>=0.0.3, <=0.0.17) +57 more potentially affected by CVE-2023-46695 via django (>=4.1.0a1, <=4.1.12)

django PYPI version =4.1.0a1, =0.1.0, =0.0.3, =4.1.6.0, =0.6.3, =1.0.0, =0.1.1, =0.0.3, =0.1.0, =1.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.2 and more Source cves: CVE-2023-46695 Source advisory: GHSA-QMF9-6JQF-J8FQ...

admin-auth0 (>=0.1.1, <=0.1.5), alcali (3006.3.0) +77 more potentially affected by CVE-2023-46695 via django (>=4.2.0a1, <=4.2.6)

django PYPI version =4.2.0a1, =0.1.1, =7.5.0a0, =0.0.1, =0.4.0, =0.0.4.dev0, =5.2.0, =0.9.0, =26.3.0, =3.1.0, =7.2.2, =39.1.0, =23.1.0, =23.1.2 - directory-sso-api-client 7.2.1 and more Source cves: CVE-2023-46695 Source advisory: GHSA-QMF9-6JQF-J8FQ...

admin-tool-button (>=1.0.1a0, <=1.0.5a0), aedttest (>=0.0.1.dev1, <=0.0.2) +166 more potentially affected by CVE-2023-46695 via django (>=3.2.0rc1, <=3.2.22)

django PYPI version =3.2.0rc1, =1.0.1a0, =0.0.1.dev1, =2.0.0, =0.0.1, =1.0.0, =3.2.17.0, =0.0.1, =6.2.0, =0.2.0, =1.0.0b6, =0.1.0, =21.1.1, =22.0.0.dev11 and more Source cves: CVE-2023-46695 Source advisory: OSV:GHSA-QMF9-6JQF-J8FQ...

admin-tool-button (>=1.0.1a0, <=1.0.5a0), aedttest (>=0.0.1.dev1, <=0.0.2) +166 more potentially affected by CVE-2023-46695 via django (>=3.2.0rc1, <=3.2.22)

django PYPI version =3.2.0rc1, =1.0.1a0, =0.0.1.dev1, =2.0.0, =0.0.1, =1.0.0, =3.2.17.0, =0.0.1, =6.2.0, =0.2.0, =1.0.0b6, =0.1.0, =21.1.1, =22.0.0.dev11 and more Source cves: CVE-2023-46695 Source advisory: GHSA-QMF9-6JQF-J8FQ...

admin-auth0 (>=0.1.1, <=0.1.5), alcali (3006.3.0) +77 more potentially affected by CVE-2023-46695 via django (>=4.2.0a1, <=4.2.6)

django PYPI version =4.2.0a1, =0.1.1, =7.5.0a0, =0.0.1, =0.4.0, =0.0.4.dev0, =5.2.0, =0.9.0, =26.3.0, =3.1.0, =7.2.2, =39.1.0, =23.1.0, =23.1.2 - directory-sso-api-client 7.2.1 and more Source cves: CVE-2023-46695 Source advisory: OSV:GHSA-QMF9-6JQF-J8FQ...

CVE-2023-46695

An issue was discovered in Django 3.2 before 3.2.23, 4.1 before 4.1.13, and 4.2 before 4.2.7. The NFKC normalization is slow on Windows. As a consequence, django.contrib.auth.forms.UsernameField is subject to a potential DoS denial of service attack via certain inputs with a very large number of...

afex-devtools (>=0.1.0, <=0.32.0), alastria-auth (>=0.0.3, <=0.0.17) +57 more potentially affected by CVE-2023-46695 via django (>=4.1.0, <=4.1.12)

django PYPI version =4.1.0, =0.1.0, =0.0.3, =4.1.6.0, =0.6.3, =1.0.0, =0.1.1, =0.0.3, =0.1.0, =1.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.2 and more Source cves: CVE-2023-46695 Source advisory: OSV:PYSEC-2023-222...

admin-auth0 (>=0.1.1, <=0.1.5), alcali (3006.3.0) +77 more potentially affected by CVE-2023-46695 via django (>=4.2.0, <=4.2.6)

django PYPI version =4.2.0, =0.1.1, =7.5.0a0, =0.0.1, =0.4.0, =0.0.4.dev0, =5.2.0, =0.9.0, =26.3.0, =3.1.0, =7.2.2, =39.1.0, =23.1.0, =23.1.2 - directory-sso-api-client 7.2.1 and more Source cves: CVE-2023-46695 Source advisory: OSV:PYSEC-2023-222...

CVE-2023-46695

CVE-2023-46695 affects Django 3.2 &lt; 3.2.23, 4.1 &lt; 4.1.13, and 4.2

admin-auth0 (>=0.1.1, <=0.1.5), alcali (3006.3.0) +77 more potentially affected by CVE-2023-46695 via django (>=4.2.0a1, <=4.2.6)

django PYPI version =4.2.0a1, =0.1.1, =7.5.0a0, =0.0.1, =0.4.0, =0.0.4.dev0, =5.2.0, =0.9.0, =26.3.0, =3.1.0, =7.2.2, =39.1.0, =23.1.0, =23.1.2 - directory-sso-api-client 7.2.1 and more Source cves: CVE-2023-46695 Source advisory: MEND:CVE-2023-46695...

admin-tool-button (>=1.0.1a0, <=1.0.5a0), aedttest (>=0.0.1.dev1, <=0.0.2) +166 more potentially affected by CVE-2023-46695 via django (>=3.2.0rc1, <=3.2.22)

django PYPI version =3.2.0rc1, =1.0.1a0, =0.0.1.dev1, =2.0.0, =0.0.1, =1.0.0, =3.2.17.0, =0.0.1, =6.2.0, =0.2.0, =1.0.0b6, =0.1.0, =21.1.1, =22.0.0.dev11 and more Source cves: CVE-2023-46695 Source advisory: MEND:CVE-2023-46695...

afex-devtools (>=0.1.0, <=0.32.0), alastria-auth (>=0.0.3, <=0.0.17) +57 more potentially affected by CVE-2023-46695 via django (>=4.1.0a1, <=4.1.12)

django PYPI version =4.1.0a1, =0.1.0, =0.0.3, =4.1.6.0, =0.6.3, =1.0.0, =0.1.1, =0.0.3, =0.1.0, =1.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.2 and more Source cves: CVE-2023-46695 Source advisory: MEND:CVE-2023-46695...

CVE-2023-46695

An issue was discovered in Django 3.2 before 3.2.23, 4.1 before 4.1.13, and 4.2 before 4.2.7. The NFKC normalization is slow on Windows. As a consequence, django.contrib.auth.forms.UsernameField is subject to a potential DoS denial of service attack via certain inputs with a very large number of...

CVE-2023-46695

An issue was discovered in Django 3.2 before 3.2.23, 4.1 before 4.1.13, and 4.2 before 4.2.7. The NFKC normalization is slow on Windows. As a consequence, django.contrib.auth.forms.UsernameField is subject to a potential DoS denial of service attack via certain inputs with a very large number of...

CVE-2023-46695

An issue was discovered in Django 3.2 before 3.2.23, 4.1 before 4.1.13, and 4.2 before 4.2.7. The NFKC normalization is slow on Windows. As a consequence, django.contrib.auth.forms.UsernameField is subject to a potential DoS denial of service attack via certain inputs with a very large number of...