java-17-openjdk security and bug fix update

1:17.0.5.0.8-2 - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv JDK-8293834 - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Related: rhbz2133695...

Malicious code in @nexthink/ea-widgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d60b0c697d1d8646d11b1ded36191c658ba88dbf0c8720c9588a866f0edc0ed6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-463 Malicious code in @nexthink/ea-widgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d60b0c697d1d8646d11b1ded36191c658ba88dbf0c8720c9588a866f0edc0ed6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

java-17-openjdk security, bug fix, and enhancement update

1:17.0.4.0.8-0.2.ea - Add rpminspect.yaml to turn off Java bytecode inspections - java-17-openjdk deliberately produces Java 17 bytecode, not the default Java 11 bytecode - Resolves: rhbz2109106 1:17.0.4.0.8-0.2.ea - Revert the following changes until copy-java-configs has adapted to relative...

CVE-2022-26147

The Quectel RG502Q-EA modem before 2022-02-23 allow OS Command Injection...

CVE-2022-26147

The Quectel RG502Q-EA modem before 2022-02-23 allow OS Command Injection...

CVE-2022-26147

The Quectel RG502Q-EA modem before 2022-02-23 allow OS Command Injection...

Command injection

The Quectel RG502Q-EA modem before 2022-02-23 allow OS Command Injection...

CVE-2022-26147

The Quectel RG502Q-EA modem before 2022-02-23 allow OS Command Injection...

CVE-2022-26147

CVE-2022-26147 affects the Quectel RG502Q-EA modem. The issue is OS command injection arising from the OTA download process, allowing an attacker to execute arbitrary commands with root privileges on the device. The public descriptions consistently note the vulnerability exists before 2022-02-23....

Quectel RG502Q-EA 操作系统命令注入漏洞

The Quectel RG502Q-EA is a 5G Sub-6 GHz LGA module from China Mobile Communications Quectel optimized for IoT and M2M applications. The Quectel RG502Q-EA suffers from a security vulnerability that stems from a security issue in the way the OTA download process operates, which can be exploited by ...

Malicious code in mock-ea-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d913b2fd6105fcbc7d3b383008930640e91dfe852de474a79c618e6aa1962d8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ea-test-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89163a7bdbf2f6e653e9dd91720264a796f81282412739eeb5070368696e1f68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ea-factories (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05d4e364be0cc8e615b27e0a04d2c1e4aa7798dee444377feadbc7313b0d698e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ea-reference-data-reader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b1df94f349ca2de08769e8ca17d6fb5dc0392f05cddfc38645de666a34b1b94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2644 Malicious code in ea-factories (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05d4e364be0cc8e615b27e0a04d2c1e4aa7798dee444377feadbc7313b0d698e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2646 Malicious code in ea-test-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89163a7bdbf2f6e653e9dd91720264a796f81282412739eeb5070368696e1f68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2645 Malicious code in ea-reference-data-reader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b1df94f349ca2de08769e8ca17d6fb5dc0392f05cddfc38645de666a34b1b94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

br.com.digisan:digisan-java (>=1.0.7 <=1.0.10), com.adaptrex:adaptrex-complete (>=0.9.1 <=0.9.10) +810 more potentially affected by CVE-2014-3643 via com.sun.jersey:jersey-core (>=0.9-ea <=1.12-b01)

com.sun.jersey:jersey-core MAVEN version =0.9-ea, =1.0.7, =0.9.1, =0.1.1, =0.9.1, =v0.27.12, =2.0.4, =1.0.2, =1.0.2, =1.0.1-3, =2.0, =2.0, =1.1.0.1, =1.1.0.1, =4.2.0, =4.2.0, =5.4.3 and more Source cves: CVE-2014-3643 Source advisory: OSV:GHSA-5M48-VR54-VMH3...

africa.absa:inception-reporting (>=1.0.0 <=1.2.0), africa.absa:inception-reporting-api (>=1.0.0 <=1.2.0) +1452 more potentially affected by CVE-2017-9096 via com.lowagie:itext (>=1.3 <=4.2.2)

com.lowagie:itext MAVEN version =1.3, =1.0.0, =1.0.0, =0.1.0, =2.0.7, =1.0.0, =1.0.7, =5.0.0, =1.0.0, =1.0, =1.0, =1.0, =0.0.1, =0.0.1, =1.1.8, =2.4.0 and more Source cves: CVE-2017-9096 Source advisory: OSV:GHSA-86P9-X5PW-94QX...