homeassistant-stubs (2022.3.1), pytest-homeassistant-custom-component (0.7.0) potentially affected by CVE-2023-41893 via homeassistant (2022.3.1)

homeassistant PYPI version 2022.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.3.1 - pytest-homeassistant-custom-component 0.7.0 Source cves: CVE-2023-41893 Source advisory:...

homeassistant-stubs (2022.3.7), pytest-homeassistant-custom-component (0.7.6) potentially affected by CVE-2023-41893 via homeassistant (2022.3.7)

homeassistant PYPI version 2022.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.3.7 - pytest-homeassistant-custom-component 0.7.6 Source cves: CVE-2023-41893 Source advisory:...

homeassistant-stubs (2022.9.0b1), pytest-homeassistant-custom-component (0.11.13) potentially affected by CVE-2023-41893 via homeassistant (2022.9.0b1)

homeassistant PYPI version 2022.9.0b1 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.9.0b1 - pytest-homeassistant-custom-component 0.11.13 Source cves: CVE-2023-41893 Source advisory:...

homeassistant-stubs (2022.9.0b5), pytest-homeassistant-custom-component (0.11.17) potentially affected by CVE-2023-41893 via homeassistant (2022.9.0b5)

homeassistant PYPI version 2022.9.0b5 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.9.0b5 - pytest-homeassistant-custom-component 0.11.17 Source cves: CVE-2023-41893 Source advisory:...

homeassistant-stubs (2022.6.3), pytest-homeassistant-custom-component (0.9.13) potentially affected by CVE-2023-41893 via homeassistant (2022.6.3)

homeassistant PYPI version 2022.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.6.3 - pytest-homeassistant-custom-component 0.9.13 Source cves: CVE-2023-41893 Source advisory:...

homeassistant-stubs (2022.8.5), pytest-homeassistant-custom-component (0.11.10) potentially affected by CVE-2023-41893 via homeassistant (2022.8.5)

homeassistant PYPI version 2022.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.8.5 - pytest-homeassistant-custom-component 0.11.10 Source cves: CVE-2023-41893 Source advisory:...

homeassistant-stubs (2022.9.0b4), pytest-homeassistant-custom-component (0.11.16) potentially affected by CVE-2023-41893 via homeassistant (2022.9.0b4)

homeassistant PYPI version 2022.9.0b4 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.9.0b4 - pytest-homeassistant-custom-component 0.11.16 Source cves: CVE-2023-41893 Source advisory:...

homeassistant-stubs (2022.9.3), pytest-homeassistant-custom-component (0.11.22) potentially affected by CVE-2023-41893 via homeassistant (2022.9.3)

homeassistant PYPI version 2022.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.9.3 - pytest-homeassistant-custom-component 0.11.22 Source cves: CVE-2023-41893 Source advisory:...

homeassistant-stubs (2022.10.0), pytest-homeassistant-custom-component (0.12.5) potentially affected by CVE-2023-41893 via homeassistant (2022.10.0)

homeassistant PYPI version 2022.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.10.0 - pytest-homeassistant-custom-component 0.12.5 Source cves: CVE-2023-41893 Source advisory:...

homeassistant-stubs (2022.10.0b2), pytest-homeassistant-custom-component (0.12.0) potentially affected by CVE-2023-41893 via homeassistant (2022.10.0b2)

homeassistant PYPI version 2022.10.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.10.0b2 - pytest-homeassistant-custom-component 0.12.0 Source cves: CVE-2023-41893 Source advisory:...

homeassistant-stubs (2022.10.0b3), pytest-homeassistant-custom-component (0.12.1) potentially affected by CVE-2023-41893 via homeassistant (2022.10.0b3)

homeassistant PYPI version 2022.10.0b3 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.10.0b3 - pytest-homeassistant-custom-component 0.12.1 Source cves: CVE-2023-41893 Source advisory:...

CLSA-2023-1697481097 Update of alt-php

Bump epoch Disable ESM notification after installation: - remove ESM hook for apt-system - remove ESM infra/apps repositories from apt sources list Automatically mark some pytest to skip if FIPS kernel is running in a disabled state they always fail in this mode...

PT-2023-36874

Bump epoch Disable ESM notification after installation: - remove ESM hook for apt-system - remove ESM infra/apps repositories from apt sources list Automatically mark some pytest to skip if FIPS kernel is running in a disabled state they always fail in this mode...

cloudfeaster (>=0.9.33, <=0.9.45), pytest-zafira (>=1.0.0, <=1.0.3) +1 more potentially affected by CVE-2023-5590 via selenium (3.14.0)

selenium PYPI version 3.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on selenium and may be impacted: - cloudfeaster =0.9.33, =1.0.0, =1.14.6, =1.15.10 Source cves: CVE-2023-5590 Source advisory: OSV:PYSEC-2023-206...

SUSE SLES15: libprotobuf-lite20 / python2-cryptography / python2-psutil / etc (SUSE-SU-2023:2783-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2783-1 advisory. grpc: - Update in SLE-15 bsc1197726, bsc1144068 protobuf: - Fix a potential DoS issue in protobuf-cpp and protobuf-python, CVE-2022-1941,...

RHEL 8 : python27:2.7 (RHSA-2023:3780)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3780 advisory. Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types...

Security Bulletin: IBM Spectrum Discover is vulnerable to multiple vulnerabilities

Summary IBM has addressed multiple vulnerabilities in IBM Spectrum Discover. Webpack loader-utils CVE-2022-37601 is vulnerable to execute arbitrary code on the system caused by a pollution flaw in parseQuery function. OpenStack Keystone CVE-2021-3563 is vulnerable to bypass security restriction...

MAL-2023-1371 Malicious code in install-pytest (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c354c0f5dc76b96d0db0745a885c308a97e8edfa82d219fda8c353dd567b43d6 The OpenSSF Package Analysis project identified 'install-pytest' @ 1.12.7 pypi as malicious. It is considered malicious because: - The package...

Malicious code in install-pytest (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c354c0f5dc76b96d0db0745a885c308a97e8edfa82d219fda8c353dd567b43d6 The OpenSSF Package Analysis project identified 'install-pytest' @ 1.12.7 pypi as malicious. It is considered malicious because: - The package...

RHEL 8 : python38:3.8 and python38-devel:3.8 (RHSA-2022:7581)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:7581 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic dat...