org.infinispan:infinispan-as-modules (5.2.4.final), org.infinispan:infinispan-cachestore-bdbje (5.2.4.final) +23 more potentially affected by CVE-2016-0750 via org.infinispan:infinispan-core (5.2.4.final)

org.infinispan:infinispan-core MAVEN version 5.2.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.infinispan:infinispan-as-modules 5.2.4.final - org.infinispan:infinispan-cachestore-bdbje...

org.hibernate:hibernate-search-infinispan (>=4.3.0.alpha1, <=4.3.0.final), org.hibernate:hibernate-search-modules (>=4.3.0.alpha1, <=4.3.0.final) +36 more potentially affected by CVE-2016-0750 via org.infinispan:infinispan-core (5.2.5.final)

org.infinispan:infinispan-core MAVEN version 5.2.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.hibernate:hibernate-search-infinispan =4.3.0.alpha1, =4.3.0.alpha1, =4.3.0.final -...

org.hibernate.ogm:hibernate-ogm-infinispan (>=4.0.0.beta3, <=4.0.0.beta4), org.infinispan:infinispan-as-modules (5.3.0.cr1) +22 more potentially affected by CVE-2016-0750 via org.infinispan:infinispan-core (5.3.0.cr1)

org.infinispan:infinispan-core MAVEN version 5.3.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.hibernate.ogm:hibernate-ogm-infinispan =4.0.0.beta3, =4.0.0.beta4 -...

org.keycloak:keycloak-saml-as7-adapter-dist (>=4.0.0.beta1, <=4.3.0.final), org.keycloak:keycloak-saml-as7-modules (>=4.0.0.beta1, <=4.3.0.final) +24 more potentially affected by CVE-2018-10894 via org.keycloak:keycloak-saml-adapter-core (>=4.0.0.beta1, <=4.3.0.final)

org.keycloak:keycloak-saml-adapter-core MAVEN version =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.3.0.final and mo...

org.keycloak:keycloak-saml-as7-adapter-dist (>=4.0.0.beta1, <=4.3.0.final), org.keycloak:keycloak-saml-as7-modules (>=4.0.0.beta1, <=4.3.0.final) +24 more potentially affected by CVE-2018-10894 via org.keycloak:keycloak-saml-adapter-core (>=4.0.0.beta1, <=4.3.0.final)

org.keycloak:keycloak-saml-adapter-core MAVEN version =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.3.0.final and mo...

org.jboss.resteasy:resteasy-jaxrs-war (2.3.4.final), org.jboss.resteasy:resteasy-jboss-modules (2.3.4.final) potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (2.3.4.final)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version 2.3.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-yaml-provider and may be impacted: - org.jboss.resteasy:resteasy-jaxrs-war 2.3.4.final -...

io.takari:appserver (0.0.7), org.jboss.resteasy:resteasy-jboss-modules (>=3.0-beta-1, <=3.0.24.final) potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (>=3.0-beta-1, <=3.0.24.final)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version =3.0-beta-1, =3.0-beta-1, =3.0.24.final Source cves: CVE-2018-1051 Source advisory: OSV:GHSA-M2FV-3RQM-G7P5...

io.takari:appserver (0.0.7), org.jboss.resteasy:resteasy-jboss-modules (>=3.0-beta-1, <=3.0.24.final) potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (>=3.0-beta-1, <=3.0.24.final)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version =3.0-beta-1, =3.0-beta-1, =3.0.24.final Source cves: CVE-2018-1051 Source advisory: GHSA-M2FV-3RQM-G7P5...

org.jboss.resteasy:resteasy-jaxrs-war (2.3.5.final), org.jboss.resteasy:resteasy-jboss-modules (2.3.5.final) potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (2.3.5.final)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version 2.3.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-yaml-provider and may be impacted: - org.jboss.resteasy:resteasy-jaxrs-war 2.3.5.final -...

org.jboss.resteasy:resteasy-jaxrs-war (2.3.6.final), org.jboss.resteasy:resteasy-jboss-modules (2.3.6.final) potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (2.3.6.final)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version 2.3.6.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-yaml-provider and may be impacted: - org.jboss.resteasy:resteasy-jaxrs-war 2.3.6.final -...

org.jboss.resteasy:resteasy-jaxrs-war (2.3.7.final), org.jboss.resteasy:resteasy-jboss-modules (2.3.7.final) potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (2.3.7.final)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version 2.3.7.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-yaml-provider and may be impacted: - org.jboss.resteasy:resteasy-jaxrs-war 2.3.7.final -...

com.nimbusds:oauth2-oidc-sdk (>=3.0.2, <=3.2), com.nimbusds:oidc-claims-source-ldap (>=1.2.4, <=1.2.5) +3 more potentially affected by CVE-2017-12974 via com.nimbusds:nimbus-jose-jwt (2.25)

com.nimbusds:nimbus-jose-jwt MAVEN version 2.25 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.nimbusds:oauth2-oidc-sdk =3.0.2, =1.2.4, =1.2.4, =1.4-release, =1.4-release, =1.5.4-release Source...

org.springframework:spring-portlet (2.0.3), org.springframework:spring-remoting (2.0.3) +4 more potentially affected by CVE-2013-6429 via org.springframework:spring-web (2.0.3)

org.springframework:spring-web MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.springframework:spring-portlet 2.0.3 - org.springframework:spring-remoting 2.0.3 -...

org.springmodules:spring-modules-jakarta-commons (>=0.8, <=0.8a), org.springmodules:spring-modules-osworkflow (>=0.8, <=0.8a) potentially affected by CVE-2014-0054 via org.springframework:spring-webmvc (2.0.3)

org.springframework:spring-webmvc MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.springmodules:spring-modules-jakarta-commons =0.8, =0.8, =0.8a Source cves: CVE-2014-0054...

org.springmodules:spring-modules-jakarta-commons (0.7), org.springmodules:spring-modules-osworkflow (0.7) potentially affected by CVE-2014-0054 via org.springframework:spring-webmvc (2.0.1)

org.springframework:spring-webmvc MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.springmodules:spring-modules-jakarta-commons 0.7 -...

Rocky Linux-system-roles bug fix and enhancement update

An update is available for rhel-system-roles. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Rocky Linux-system-roles package includes a collection of Ansib...

5.32 metadata for the Rocky Linux 8 module matrix (2/4)

An update is available for perl-DBD-Pg, perl-DBI, perl-IO-HTML, perl-LWP-MediaTypes, perl-Data-Dump, perl-FCGI, perl-HTTP-Message, perl-Net-HTTP, perl-File-pushd, perl-Try-Tiny, perl-Digest-HMAC, perl-HTML-Parser, perl-NTLM, perl-Mozilla-CA, perl-IO-Socket-SSL, perl-libwww-perl, perl-Encode-Local...

5.32 metadata for the Rocky Linux 8 module matrix (3/4)

An update is available for perl-DBD-Pg, perl-Parse-PMFile, perl-DBI, perl-DBD-SQLite, perl-YAML, perl-CPAN-DistnameInfo, perl-CPAN-Meta-Check, perl-FCGI, perl-DBD-MySQL, perl-App-cpanminus, perl-File-pushd, perl-String-ShellQuote, perl-Module-CPANfile. This update affects Rocky Linux 8. A Common...

5.32 metadata for the Rocky Linux 8 module matrix (1/4)

An update is available for perl-DBD-Pg, perl-Parse-PMFile, perl-DBI, perl-DBD-SQLite, perl-YAML, perl-CPAN-DistnameInfo, perl-CPAN-Meta-Check, perl-FCGI, perl-DBD-MySQL, perl-App-cpanminus, perl-File-pushd, perl-String-ShellQuote, perl-Module-CPANfile. This update affects Rocky Linux 8. A Common...

CVE-2022-24903

Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buffer overflow when octet-counted framing is used. This can result in a segfault or some other malfunction. As of our understanding, this vulnerability can not be used for remote code...