Fedora 38 : stargz-snapshotter (2023-62ce942e75)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-62ce942e75 advisory. Release of stargz snapshotter v0.14.2 https://github.com/containerd/stargz- snapshotter/releases/tag/v0.14.2 This release uses containerd v1.7.0-rc....

CVE-2023-23911

An improper access control vulnerability exists prior to v6 that could allow an attacker to break the E2E encryption of a chat room by a user changing the group key of a chat room...

Design/Logic Flaw

An issue has been discovered in GitLab EE affecting all versions starting from 15.1 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. If a group with SAML SSO enabled is transferred to a new namespace as a child group, it's possible...

CLSA-2023-1678396066 systemd: Fix of CVE-2022-4415

CVE-2022-4415: coredump: do not allow user to access coredumps with changed uid/gid/capabilities...

MAL-2023-7133 Malicious code in tphydratoolsplit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 0b83ac2b575decdf8cd7ea3be0d7a2c8073ceb3b113d3a756fcb0b189605a718 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqcvinfogrand (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c820bd971cc018caa572c8d3e5fbc4c800609499f10309c461ecf7dbc6d3f315 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-2825 Malicious code in esqcvinfogrand (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c820bd971cc018caa572c8d3e5fbc4c800609499f10309c461ecf7dbc6d3f315 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-6233 Malicious code in selfintstringpong (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7ae3da8a16e34517abe55eadd3d1cc135e5474877de7bbe3d6d9873c23108496 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5030 Malicious code in py-controlguipost (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 480e1dc18ed2f651bc3cd4dfddefc30c94cf887485d83b3d88432c7a9384cb42 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-7553 Malicious code in tprepaypalpull (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 073711ceb7a99f98c10bccd7d9314c23a103ae5c53fbb0be7fe5339ada0228d8 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5722 Malicious code in py-urlhttphttp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6e1a76dead03b03b5b1a66c3ac3c2845b95ccf2e6762f24639b562bc76e8e7a7 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in selfinfoponged (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 04ac261aa352ac2d7834c9f0783bec5a7f6936cd81ac4ffa923993351d85657d EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

CVE-2022-4289

An issue has been discovered in GitLab affecting all versions starting from 15.3 before 15.7.8, versions of 15.8 before 15.8.4, and version 15.9 before 15.9.2. Google IAP details in Prometheus integration were not hidden, could be leaked from instance, group, or project settings to other users...

PT-2023-14190 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab EE versions 15.1 through 15.7.7 GitLab EE versions 15.8 through 15.8.3 GitLab EE versions 15.9 through 15.9.1 Description: An issue has been discovered in GitLab EE. If a group with SAML SSO enabled is transferred to a new namespace as...

CVE-2022-4331

Removed by vendor...

PT-2023-14158 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions 15.3 through 15.7.7 GitLab versions 15.8.0 through 15.8.3 GitLab versions 15.9.0 through 15.9.1 Description: An issue has been discovered in GitLab where Google IAP details in Prometheus integration were not hidden and could b...

CVE-2022-4331

An issue has been discovered in GitLab EE affecting all versions starting from 15.1 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. If a group with SAML SSO enabled is transferred to a new namespace as a child group, it's possible...

CVE-2022-4331

An issue has been discovered in GitLab EE affecting all versions starting from 15.1 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. If a group with SAML SSO enabled is transferred to a new namespace as a child group, it's possible...

PVS server lost the connection to vDisk after storage failover.

vDisks are located in NAS storage which is created as failover group. After storage failover occurs, PVS server loses the connection to the vDisks and does not automatically recover it. Target devices freeze during that time since the vDisk I/O to NAS storage stops...

CVE-2022-4331

CVE-2022-4331 (GitLab EE) : Affects GitLab EE versions 15.1 up to but not including 15.7.8; 15.8 up to but not including 15.8.4; and 15.9 up to but not including 15.9.2. If a SAML SSO-enabled group is moved to a new namespace as a child group, a previously removed malicious maintainer/owner could...