Moderate: Red Hat Security Advisory: pki-core:10.6 and pki-deps:10.6 security update

An update for the pki-core:10.6 and pki-deps:10.6 modules is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Moderate: pki-core:10.6 and pki-deps:10.6 security update

The Public Key Infrastructure PKI Core contains fundamental packages required by AlmaLinux Certificate System. Security Fixes: jackson-databind: denial of service via a large depth of nested objects CVE-2020-36518 For more details about the security issues, including the impact, a CVSS score,...

CVE-2023-31654

Redis raft master-1b8bd86 to master-7b46079 was discovered to contain an ODR violation via the component hiredisAllocFns at /opt/fs/redisraft/deps/hiredis/alloc.c...

MAL-2023-8721 Malicious code in jupyter-notebook-deps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 149056bec7a565568bd2ddea92746e800266ecb291da0df46551b2d1766551bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jupyter-notebook-deps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 149056bec7a565568bd2ddea92746e800266ecb291da0df46551b2d1766551bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-54170

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the multipath target when the retrieve deps function runs concurrently with multipath message. This occurs because retrieve deps iterates through a list of ope...

SUSE: Security Advisory (SUSE-SU-2022:4084-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

pki-core:10.6 and pki-deps:10.6 security and bug fix update

apache-commons-collections apache-commons-net 3.6-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora28MassRebuild 3.6-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora27MassRebuild 3.6-1 - Update to upstream version 3.6 jss 4.9.4-1 - Rebase to JSS 4.9.4 - Bug 2013674 - JSS cannot be proper...

Oracle Linux 8 : pki-core:10.6 / and / pki-deps:10.6 (ELSA-2022-7470)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-7470 advisory. - Bug 2107334 - CVE-2022-2414 access to external entities when parsing XML can lead to XXE - CVE-2020-1695: Improper validation of response header in...

AlmaLinux 8 : pki-core:10.6 and pki-deps:10.6 (ALSA-2022:7470)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:7470 advisory. pki-core: access to external entities when parsing XML can lead to XXE CVE-2022-2414 Tenable has extracted the preceding description block directly from the...

CentOS 8 : pki-core:10.6 and pki-deps:10.6 (CESA-2022:7470)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2022:7470 advisory. - pki-core: access to external entities when parsing XML can lead to XXE CVE-2022-2414 Note that Nessus has not tested for this issue but has instead relied onl...

Important: Red Hat Security Advisory: pki-core:10.6 and pki-deps:10.6 security and bug fix update

An update for the pki-core:10.6 and pki-deps:10.6 modules is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

RHEL 8 : pki-core:10.6 and pki-deps:10.6 (RHSA-2022:7470)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:7470 advisory. The Public Key Infrastructure PKI Core contains fundamental packages required by Red Hat Certificate System. Security Fixes: pki-core: access to...

ALSA-2022:7470 Important: pki-core:10.6 and pki-deps:10.6 security and bug fix update

The Public Key Infrastructure PKI Core contains fundamental packages required by AlmaLinux Certificate System. Security Fixes: pki-core: access to external entities when parsing XML can lead to XXE CVE-2022-2414 For more details about the security issues, including the impact, a CVSS score,...

MAL-2022-3 Malicious code in --legacy-peer-deps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9016f41e70e542399b68b5d9e362563751dedbff976a3bd66808702c420f35f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4126 Malicious code in kbn-ui-shared-deps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc6b0d5dfca20db7b9fd6ac54d1eab136ac7e7d2e1e37e33820f03b7a07761bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kbn-ui-shared-deps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc6b0d5dfca20db7b9fd6ac54d1eab136ac7e7d2e1e37e33820f03b7a07761bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @bugbounty-automation/deps-json-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cc3cb3b06f569513ecf3acdd6f2dde149853d34f3ea68ada80288bfb074e9b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2444 Malicious code in deps-json-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f503791c8f572fb50134eb9d7bb40c61cc0a42fdb6c4e9a389396c1b072f25e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-157 Malicious code in @bugbounty-automation/deps-json-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cc3cb3b06f569513ecf3acdd6f2dde149853d34f3ea68ada80288bfb074e9b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...