257 matches found
obs-scm-bridge-0.5.4-1.1 on GA media (moderate)
obs-scm-bridge-0.5.4-1.1 on GA media Announcement ID: openSUSE-SU-2024:14543-1 Rating: moderate Cross-References: CVE-2024-22038 CVSS scores: CVE-2024-22038 SUSE : 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:H CVE-2024-22038 SUSE : 6.8...
OPENSUSE-SU-2024:14543-1 obs-scm-bridge-0.5.4-1.1 on GA media
These are all security issues fixed in the obs-scm-bridge-0.5.4-1.1 package on the GA media of openSUSE Tumbleweed...
CVE-2024-22038
Various problems in obs-scm-bridge allows attackers that create specially crafted git repositories to leak information of cause denial of service...
CVE-2024-22038 DoS attacks, information leaks etc. with crafted Git repositories in obs-scm-bridge
Various problems in obs-scm-bridge allows attackers that create specially crafted git repositories to leak information of cause denial of service...
CVE-2024-22038 DoS attacks, information leaks etc. with crafted Git repositories in obs-scm-bridge
Various problems in obs-scm-bridge allows attackers that create specially crafted git repositories to leak information of cause denial of service...
CVE-2024-22038
CVE-2024-22038 is addressed in SUSE advisories for obs-scm-bridge. The affected component is obs-scm-bridge, updated to version 0.5.4 which fixes DoS attacks and information leaks when Git repositories are crafted. Public references in SUSE/SUSE-SU-2024:4212-1 and SUSE-SU-2025:0857-1 indicate the...
PT-2024-19171
Name of the Vulnerable Software and Affected Versions obs-scm-bridge affected versions not specified Description The issue allows attackers to create specially crafted git repositories, potentially leading to information leakage or denial of service. Recommendations At the moment, there is no...
SUSE CVE-2024-22038
Various problems in obs-scm-bridge allows attackers that create specially crafted git repositories to leak information of cause denial of service...
CVE-2024-22033
The OBS service obs-service-downloadurl was vulnerable to a command injection vulnerability. The attacker could provide a configuration to the service that allowed to execute command in later steps...
CVE-2024-22033 obs-service-download_url is vulnerable to argument injection
The OBS service obs-service-downloadurl was vulnerable to a command injection vulnerability. The attacker could provide a configuration to the service that allowed to execute command in later steps...
CVE-2024-22033
CVE-2024-22033 affects the OBS service obs-service-download_url. The flaw is a command injection vulnerability where a configuration passed to the service can lead to command execution in subsequent steps. Public references confirm this impact and the vulnerable component is the obs-service-downl...
CVE-2024-22033 obs-service-download_url is vulnerable to argument injection
The OBS service obs-service-downloadurl was vulnerable to a command injection vulnerability. The attacker could provide a configuration to the service that allowed to execute command in later steps...
obs-service-cargo-1.3.6-5.1 on GA media (moderate)
obs-service-cargo-1.3.6-5.1 on GA media Announcement ID: openSUSE-SU-2024:14364-1 Rating: moderate Cross-References: CVE-2024-45405 CVSS scores: CVE-2024-45405 SUSE : 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2024-45405 SUSE : 7...
OPENSUSE-SU-2024:14364-1 obs-service-cargo-1.3.6-5.1 on GA media
These are all security issues fixed in the obs-service-cargo-1.3.6-5.1 package on the GA media of openSUSE Tumbleweed...
Fedora: Security Advisory for obs-cef (FEDORA-2024-47dbf2a4de)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 40 Update: obs-cef-5060^cr103.0.5060.134~git20231010.17f8588-6.fc40
CEF is an embeddable build of Chromium, powered by WebKit Blink. This version is a fork by the OBS project designed to be used as part of the OBS Browser Source plugin...
Fedora 40 : obs-cef (2024-47dbf2a4de)
The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-47dbf2a4de advisory. Security fix for CVE-2023-6349 & FTBFS fixes Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...
SUSE-SU-2024:2495-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52846: hsr: Prevent use after free in prpcreatetaggedframe bsc1225098. - CVE-2024-36904: tcp: Use refcountincnotzero in tcptwskunique bsc1225732. -...