Fedora: Security Advisory for wangle (FEDORA-2023-7934802344)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 38 Update: wangle-2023.10.16.00-1.fc38

Wangle is a library that makes it easy to build protocols, application client s, and application servers. It's like Netty + Finagle smooshed together, but in C++...

com.foursquare:foursquare-fhttp_2.10 (>=0.1.12, <=0.1.14), com.foursquare:foursquare-fhttp_2.9.2 (0.1.12) +86 more potentially affected by CVE-2021-43797 via io.netty:netty (3.9.1.final)

io.netty:netty MAVEN version 3.9.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - com.foursquare:foursquare-fhttp2.10 =0.1.12, =2.0.0-m11-followup, =2.0.0-m11-followup, =2.0.0-m11-followup, =1.4.1, =0.1.0,...

com.github.agmenc:ecstatic_2.10 (0.0.2), com.github.agmenc:trivial-rest_2.10 (>=0.0.1, <=0.1.1) +57 more potentially affected by CVE-2021-43797 via io.netty:netty (3.9.1.1.final)

io.netty:netty MAVEN version 3.9.1.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - com.github.agmenc:ecstatic2.10 0.0.2 - com.github.agmenc:trivial-rest2.10 =0.0.1, =0.2.0, =0.5.1 -...

com.github.agmenc:ecstatic_2.10 (0.0.2), com.github.agmenc:trivial-rest_2.10 (>=0.0.1, <=0.1.1) +57 more potentially affected by CVE-2021-37137 via io.netty:netty (3.9.1.1.final)

io.netty:netty MAVEN version 3.9.1.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - com.github.agmenc:ecstatic2.10 0.0.2 - com.github.agmenc:trivial-rest2.10 =0.0.1, =0.2.0, =0.5.1 -...

Denial Of Service (DoS)

finagle-core is vulnerable to denial of service DoS attacks. If a client establishes a connection to finagle servers and then quickly hangs up, it will cause other requests to be less successful. Malicious clients can exploit it to perform denial of service attacks...