Moderate: Red Hat Security Advisory: python-wheel security update

An update for python-wheel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

CVE-2023-45805

pdm is a Python package and dependency manager supporting the latest PEP standards. It's possible to craft a malicious pdm.lock file that could allow e.g. an insider or a malicious open source project to appear to depend on a trusted PyPI project, but actually install another project. A project f...

CVE-2023-45805

pdm is a Python package and dependency manager supporting the latest PEP standards. It's possible to craft a malicious pdm.lock file that could allow e.g. an insider or a malicious open source project to appear to depend on a trusted PyPI project, but actually install another project. A project f...

Design/Logic Flaw

pdm is a Python package and dependency manager supporting the latest PEP standards. It's possible to craft a malicious pdm.lock file that could allow e.g. an insider or a malicious open source project to appear to depend on a trusted PyPI project, but actually install another project. A project f...

CVE-2023-45805

CVE-2023-45805 affects the Python tool PDM (dependency manager). A crafted pawns-style lockfile in which a project like foo is targeted with foo-2 and a file foo-2-2.tar.gz can mislead PyPI and PDM into installing a different project than what appears in pyproject.toml, potentially allowing arbit...

CVE-2023-45805 Trojan Lockfilein pdm

pdm is a Python package and dependency manager supporting the latest PEP standards. It's possible to craft a malicious pdm.lock file that could allow e.g. an insider or a malicious open source project to appear to depend on a trusted PyPI project, but actually install another project. A project f...

CVE-2023-45805

pdm is a Python package and dependency manager supporting the latest PEP standards. It's possible to craft a malicious pdm.lock file that could allow e.g. an insider or a malicious open source project to appear to depend on a trusted PyPI project, but actually install another project. A project f...

SUSE CVE-2021-45095

pepsockaccept in net/phonet/pep.c in the Linux kernel through 5.15.8 has a refcount leak...

GHSA-4G62-MFWX-4Q48 slixmpp Incorrect Access Control

slixmpp version before commit 7cd73b594e8122dddf847953fcfc85ab4d316416 contains an incorrect Access Control vulnerability in XEP-0223 plugin Persistent Storage of Private Data via PubSub options profile, used for the configuration of default access model that can result in all of the contacts of...

SUSE SLES15: kernel-azure / kernel-azure-devel / kernel-devel-azure / etc (SUSE-SU-2022:0363-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0363-1 advisory. The SUSE Linux Enterprise 15 SP3 Azure kernel was updated to receive various security and bugfixes. The following security bugs wer...

The vulnerability of the pep_sock_accept function in the Linux operating system’s net/phonet/pep.c file, which allows a hacker to gain unauthorized access to protected information.

The vulnerability of the pepsockaccept function in the net/phonet/pep.c file of the Linux operating system kernel is related to insufficient protection for service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

GSD-2021-1002802 phonet/pep: refuse to enable an unbound pipe

phonet/pep: refuse to enable an unbound pipe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.169 by commit...

GSD-2021-1002791 phonet/pep: refuse to enable an unbound pipe

phonet/pep: refuse to enable an unbound pipe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.223 by commit...

GSD-2021-1002784 phonet/pep: refuse to enable an unbound pipe

phonet/pep: refuse to enable an unbound pipe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.260 by commit...

PT-2021-27284

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.10.89 Description The issue is related to the phonet/pep, which refuses to enable an unbound pipe. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2021-27259

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.223 Description The issue is related to the phonet/pep, which refuses to enable an unbound pipe. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2021-27247

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 4.9.295 Description The issue is related to the phonet/pep, which refuses to enable an unbound pipe. This is an automated ID intended to aid in discovery of potential security vulnerabilities, and the actual impa...

PT-2021-27243

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 4.4.297 Description The issue is related to the phonet/pep, which refuses to enable an unbound pipe. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2021-27270

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.169 Description The issue is related to the phonet/pep, which refuses to enable an unbound pipe. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2021-27252

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.260 Description The issue is related to the phonet/pep, which refuses to enable an unbound pipe. This is an automated ID intended to aid in discovery of potential security vulnerabilities, and the actual...