SUSE CVE-2021-29617

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a denial of service via CHECK-fail in tf.strings.substr with invalid arguments. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFlow 2.3.3,...

CVE-2023-23914

A cleartext transmission of sensitive information vulnerability exists in curl v7.88.0 that could cause HSTS functionality fail when multiple URLs are requested serially. Using its HSTS support, curl can be instructed to use HTTPS instead of usingan insecure clear-text HTTP step even when HTTP is...

CVE-2023-25561: Improper Handling of Exceptional Conditions

DataHub is an open-source metadata platform. In the event a system is using Java Authentication and Authorization Service JAAS authentication and that system is given a configuration which contains an error, the authentication for the system will fail open and allow an attacker to login using any...

CVE-2023-25586

A flaw was found in Binutils. A logic fail in the bfdinitsectiondecompressstatus function may lead to the use of an uninitialized variable that can cause a crash and local denial of service...

Malicious code in kroniko (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 18a9b552a1b7e50a200f529bf10d7d4c5ce398815449a7e53be0bbb54bcc2b4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pdb-extensions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f01d39a5912b29ddba1313f299abcf80c8aca983b9d61a8f6580726c7e1a6e77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in divcard2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ab92058cce0d8f23d8944eead7f0dca4d61592d1e0031fe150778d29d076586 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yandex-text-processing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dad3121cecef8dbde04c26103711664c19d881b92cc44b9ba2e1bc590c21b771 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

libtiff security update

An update is available for libtiff. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libtiff packages contain a library of functions for manipulating Tagged...

Yul 'staticcall' return value not checked

Lines of code Vulnerability details Impact Unexpected behavior if call fail. --- The text was updated successfully, but these errors were encountered: All reactions...

RHEL 9 : libtiff (RHSA-2023:0302)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0302 advisory. The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: LibTiff: DoS from...

GSD-2023-1000554 usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq

usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

AlmaLinux 8 : libtiff (ALSA-2023:0095)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:0095 advisory. - Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff...

RHEL 8 : libtiff (RHSA-2023:0095)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0095 advisory. The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: LibTiff: DoS from...

Oracle Linux 8 : libtiff (ELSA-2023-0095)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-0095 advisory. - Resolves: CVE-2022-2519 CVE-2022-2520 CVE-2022-2521 CVE-2022-2953 - Fix CVE-2022-2867 2118857 - Fix CVE-2022-2868 2118882 - Fix CVE-2022-2869 2118878...

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2023-1163)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious code in coolblue-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fac07d2b71de3ca79060d86a07a3e16c83b66f3560e38a3be6457b24a4b0afb1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shared-gatsby-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa6f8aa17394b241ea554a9745b4c06f2e6a9c3e00a5c14094b7bf4ec1b8de12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test-guro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ffa60c52921ed8c52fded56d2ff3c60935dd07f786cdfe7226d4eaf4873c4de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2023-1028)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...