Fedora: Security Advisory for golang-github-multiformats-multihash (FEDORA-2022-37aef44d1e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for golang-gopkg-src-d-git-4 (FEDORA-2022-37aef44d1e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2022-32613

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.58 Description The issue concerns a data-race condition around the sysctl tcp min snd mss setting in the TCP implementation. The actual impact and potential for attack have not been fully determined...

PT-2022-33032

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.254 Description The issue concerns a data-race condition around the sysctl tcp slow start after idle setting in the TCP implementation. This condition may potentially lead to security vulnerabilities,...

[SECURITY] Fedora 36 Update: golang-k8s-pod-security-admission-1.22.0-4.fc36

Kubernetes Pod Security Standards implementation...

[SECURITY] Fedora 36 Update: golang-github-tscholl2-siec-0-4.20211128git9bdfc48.fc36

Super-Isolated Elliptic Curve Implementation in Go...

[SECURITY] Fedora 36 Update: golang-github-shurcool-vfsgen-0-0.12.20210113git0d455de.fc36

Package Vfsgen takes an http.FileSystem likely at go generate time and generates Go code that statically implements the provided http.FileSystem...

[SECURITY] Fedora 36 Update: golang-github-multiformats-multihash-0.1.0-3.fc36

Multihash implementation in Go...

[SECURITY] Fedora 36 Update: golang-github-krishicks-yaml-patch-0.0.10-9.20200307git05b3177.fc36

Yaml-patch is a version of Evan Phoenix's json-patch, which is an implementat ion of JavaScript Object Notation JSON Patch, directly transposed to YAML...

[SECURITY] Fedora 36 Update: golang-github-jmespath-0.4.0-6.fc36

A JMESPath implementation in Go...

[SECURITY] Fedora 36 Update: golang-github-jwt-3.2.2-4.fc36

A go implementation of JSON Web Tokens. Supports the parsing and verification, as well as the generation and signing of JWTs...

[SECURITY] Fedora 36 Update: golang-github-google-dap-0.6.0-6.fc36

Go implementation of the Debug Adapter Protocol...

[SECURITY] Fedora 36 Update: golang-github-google-jsonnet-0.17.0-6.fc36

This an implementation of Jsonnet in pure Go. It is feature complete but is n ot as heavily exercised as the Jsonnet C++ implementation. Please try it out and give feedback...

[SECURITY] Fedora 36 Update: golang-github-dustinkirkland-petname-0-0.7.20200605git8e5a1ed.fc36

An RFC1178 implementation...

[SECURITY] Fedora 36 Update: golang-github-bifurcation-mint-0-0.10.20200724git93c820e.fc36

A Minimal TLS 1.3 Implementation in Go...

[SECURITY] Fedora 36 Update: gojq-0.12.8-4.fc36

Pure Go implementation of jq...

[SECURITY] Fedora 36 Update: act-1.6.0-7.fc36

The Automatic Component Toolkit ACT is a code generator that takes an instance of an Interface Description Language file and generates a thin C89-API, implementation stubs and language bindings of your desired software component...

Updated python-ujson packages fix security vulnerability

Add support for arbitrary size integers. Replace 'wchart' string decoding implementation with a 'uint32t'-based one; fix handling of surrogates on decoding CVE-2022-31116 Potential double free of buffer during string decoding - Fix memory leak on encoding errors when the buffer was resized -...

KEMs and Post-Quantum age

Theyre here! NIST selected a first batch of post-quantum cryptographic key exchange and signature algorithms. The report is a nice read that explains a lot of the goals, candidates, selections, and rationales. I recommend Sections 2, 3.3, and 4.1. For key exchange, NIST selected only...

Upgraded Q -> M from 333 [1659114494203]

Judge has assessed an item in Issue 333 as Medium risk. The relevant finding follows: 2. Marketplace assumes tokens are already sent Description: The Marketplace looks like a convienance router contract for the lenders to easily interact with Illuminate on chain. However, in methods...