PT-2021-23332

Name of the Vulnerable Software and Affected Versions set user extension module versions prior to 3.0.0 for PostgreSQL Description The issue allows ProcessUtility hook bypass via set config. Recommendations For versions prior to 3.0.0, update to version 3.0.0 or later to resolve the issue...

PostgreSQL 处理逻辑错误漏洞

PostgreSQL is a free object-relational database management system organized by Postgresql. The system supports most of the SQL standards and provides many other features such as foreign keys, triggers, views, and more. A Processing Logic Error vulnerability exists in PostgreSQL, which stems from ...

Git LFS Clone Command Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Git LFS Clone Command Exec', 'Description' = %q Git clients that support delay-capable clean / smudge filters and symbolic links on...

Git LFS Clone Command Execution Exploit

Git clients that support delay-capable clean / smudge filters and symbolic links on case-insensitive file systems are vulnerable to remote code execution while cloning a repository. Usage of clean / smudge filters through Git LFS and a case-insensitive file system changes the checkout order of...

container-tools:rhel8 security, bug fix, and enhancement update

An update is available for fuse-overlayfs, container-selinux, udica, runc, toolbox, podman, conmon, skopeo, crun, libslirp, oci-seccomp-bpf-hook, slirp4netns, containernetworking-plugins, buildah, criu, cockpit-podman. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS...

OPENSUSE-SU-2021:1070-1 Security update for fossil

This update for fossil fixes the following issues: - fossil 2.12.1: CVE-2020-24614: Remote authenticated users with check-in or administrative privileges could have executed arbitrary code boo1175760 Security fix in the 'fossil git export' command. New 'safety-net' features were added to prevent...

PT-2021-23591 · Unknown · Github.Com/Ecnepsnai/Web

Name of the Vulnerable Software and Affected Versions: github.com/ecnepsnai/web package versions prior to 1.5.2 Description: The issue arises when Web Sockets do not execute any AuthenticateMethod methods, potentially leading to a nil pointer dereference or authentication bypass. This problem...

container-tools:3.0 security update

buildah 1.19.7-1.0.1 - Handling redirect from the docker registry Orabug: 29874238 Nikita Gerasimov 1.19.7-1 - update to the latest content of https://github.com/containers/buildah/tree/release-1.19 https://github.com/containers/buildah/commit/a2854ed - Resolves: 1935376 cockpit-podman 29-2 - fix...

CVE-2021-32550

It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-14 package apport hooks, it could expose private data to other local users...

container-tools:rhel8 security update

An update is available for fuse-overlayfs, container-selinux, udica, runc, toolbox, podman, conmon, skopeo, crun, libslirp, oci-seccomp-bpf-hook, slirp4netns, containernetworking-plugins, buildah, criu, cockpit-podman. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS...

GSD-2021-1000416 ARM: 9064/1: hw_breakpoint: Do not directly check the event's overflow_handler hook

ARM: 9064/1: hwbreakpoint: Do not directly check the event's overflowhandler hook This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.120 by...

PT-2021-28933

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.233 Description The issue is related to the hw breakpoint mechanism in the Linux Kernel. It has been identified that directly checking the event's overflow handler hook may pose a potential security risk...

PT-2021-28915

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.191 Description The issue is related to the hw breakpoint mechanism in the Linux Kernel. It has been identified that directly checking the event's overflow handler hook may pose a potential security risk...

PT-2021-28881

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.120 Description The issue is related to the hw breakpoint mechanism in the Linux Kernel. It has been identified that directly checking the event's overflow handler hook may pose a potential security risk...

PT-2021-24921

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.191 Description: The issue is related to the hw breakpoint mechanism in the Linux Kernel. It has been identified that directly checking the event's overflow handler hook may pose a potential security risk...

PT-2021-24939

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.233 Description: The issue is related to the hw breakpoint mechanism in the Linux Kernel. It has been identified that directly checking the event's overflow handler hook may pose a potential security risk...

PT-2021-24951

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.269 Description: The issue is related to the hw breakpoint mechanism in the Linux Kernel. It has been identified that directly checking the event's overflow handler hook may pose a potential security risk...

PT-2021-24692

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.5 Description The issue is related to the hw breakpoint mechanism in the Linux Kernel. It has been noted that the event's overflow handler hook should not be directly checked. The actual impact and potentia...

container-tools:ol8 security, bug fix, and enhancement update

cockpit-podman 29-2 - fix gating test failure for cockpit-podman - Related: 1914884 29-1 - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/29 - Related: 1883490 conmon 2:2.0.26-1 - update to https://github.com/containers/conmon/releases/tag/v2.0.26 - Related: 1883490...

new module: container-tools:3.0

An update is available for fuse-overlayfs, container-selinux, udica, toolbox, podman, conmon, skopeo, crun, libslirp, oci-seccomp-bpf-hook, slirp4netns, containernetworking-plugins, buildah, criu, cockpit-podman. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base...