Researchers Find New Malware Attacks Targeting Russian Government Entities

An unknown advanced persistent threat APT group has been linked to a series of spear-phishing attacks targeting Russian government entities since the onset of the Russo-Ukrainian war in late February 2022. "The campaigns ... are designed to implant a Remote Access Trojan RAT that can be used to...

RHEL 7 : kernel-rt (RHSA-2022:4644)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:4644 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Securi...

Important Photon OS Security Update - PHSA-2022-0395

Updates of 'linux', 'linux-secure', 'linux-rt', 'linux-aws', 'linux-esx' packages of Photon OS have been released...

Rocky Linux 8 : kernel-rt (RLSA-2022:1975)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:1975 advisory. - An out-of-bounds memory write flaw was found in the Linux kernel's joystick devices subsystem in versions before 5.9-rc1, in the way the user calls...

Important Photon OS Security Update - PHSA-2022-0183

Updates of 'redis', 'linux', 'linux-rt', 'linux-secure', 'linux-aws' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2022-0393

Updates of 'ncurses', 'linux', 'linux-aws', 'redis', 'linux-secure', 'linux-esx', 'linux-rt' packages of Photon OS have been released...

org.apache.camel:camel-cxf (2.0-m1), org.apache.camel:camel-example-cxf (2.0-m1) +10 more potentially affected by CVE-2010-2076 via org.apache.cxf:cxf-rt-frontend-jaxrs (>=2.1, <=2.1.9)

org.apache.cxf:cxf-rt-frontend-jaxrs MAVEN version =2.1, =2.1.7, =2.1.7, =2.1.7, =2.1.7, =2.1, =2.1, =2.1, =2.1.6 Source cves: CVE-2010-2076 Source advisory: OSV:GHSA-V8Q2-94F6-6XQ2...

org.apache.camel:camel-cxf (2.0-m1), org.apache.camel:camel-example-cxf (2.0-m1) +10 more potentially affected by CVE-2010-2076 via org.apache.cxf:cxf-rt-frontend-jaxrs (>=2.1, <=2.1.9)

org.apache.cxf:cxf-rt-frontend-jaxrs MAVEN version =2.1, =2.1.7, =2.1.7, =2.1.7, =2.1.7, =2.1, =2.1, =2.1, =2.1.6 Source cves: CVE-2010-2076 Source advisory: GHSA-V8Q2-94F6-6XQ2...

com.custardsource.parfait:parfait-cxf (>=0.2.0, <=0.3.9), com.redhat.rhevm.api:rhevm-api-cli-actions (>=0.9-milestone1, <=0.9-milestone6.6) +55 more potentially affected by CVE-2010-2076 via org.apache.cxf:cxf-rt-frontend-jaxrs (>=2.2, <=2.2.8)

org.apache.cxf:cxf-rt-frontend-jaxrs MAVEN version =2.2, =0.2.0, =0.9-milestone1, =0.1-milestone, =0.1-milestone, =0.9-milestone1, =0.1-milestone, =0.1-milestone, =0.9-milestone1, =0.9-milestone3, =0.9-milestone1, =0.9-milestone1, =0.9-milestone3, =0.9-milestone1, =0.1-milestone, =0.9-milestone6....

com.custardsource.parfait:parfait-cxf (>=0.2.0, <=0.3.9), com.redhat.rhevm.api:rhevm-api-cli-actions (>=0.9-milestone1, <=0.9-milestone6.6) +55 more potentially affected by CVE-2010-2076 via org.apache.cxf:cxf-rt-frontend-jaxrs (>=2.2, <=2.2.8)

org.apache.cxf:cxf-rt-frontend-jaxrs MAVEN version =2.2, =0.2.0, =0.9-milestone1, =0.1-milestone, =0.1-milestone, =0.9-milestone1, =0.1-milestone, =0.1-milestone, =0.9-milestone1, =0.9-milestone3, =0.9-milestone1, =0.9-milestone1, =0.9-milestone3, =0.9-milestone1, =0.1-milestone, =0.9-milestone6....

br.com.esec.icpm:certillion-client-library (>=1.1.7, <=1.2.0), br.com.esec.icpm:certillion-client-library-resteasy-plugin (>=1.1.9, <=1.1.10) +121 more potentially affected by CVE-2012-5575 via org.apache.cxf:cxf-rt-transports-http (>=2.7.0, <=2.7.3)

org.apache.cxf:cxf-rt-transports-http MAVEN version =2.7.0, =1.1.7, =1.1.9, =1.2.5, =0.4.0, =0.4.1, =1.3.1, =1.2.3, =1.2.3, =1.4.0, =1.4.0, =1.4.0, =1.5.0 and more Source cves: CVE-2012-5575 Source advisory: GHSA-7V5V-9V8R-W864...

ai.mattmann.mnemosyne:pcs-services (1.11.0), com.alibaba:dubbo (>=2.3.0, <=2.5.3) +153 more potentially affected by CVE-2012-5575 via org.apache.cxf:cxf-rt-transports-http (>=2.6.0, <=2.6.6)

org.apache.cxf:cxf-rt-transports-http MAVEN version =2.6.0, =2.3.0, =1.0.3, =1.0.m1, =1.0.m1, =1.0.m2, =1.0.0, =1.0.0, =1.0.0, =1.0.6 and more Source cves: CVE-2012-5575 Source advisory: GHSA-7V5V-9V8R-W864...

ai.mattmann.mnemosyne:pcs-services (1.11.0), com.alibaba:dubbo (>=2.3.0, <=2.5.3) +153 more potentially affected by CVE-2012-5575 via org.apache.cxf:cxf-rt-transports-http (>=2.6.0, <=2.6.6)

org.apache.cxf:cxf-rt-transports-http MAVEN version =2.6.0, =2.3.0, =1.0.3, =1.0.m1, =1.0.m1, =1.0.m2, =1.0.0, =1.0.0, =1.0.0, =1.0.6 and more Source cves: CVE-2012-5575 Source advisory: OSV:GHSA-7V5V-9V8R-W864...

ai.platon.pulsar:pulsar-persist (>=1.9.0, <=1.10.23), com.argonio.gora:gora-accumulo (>=0.5, <=0.5.1) +167 more potentially affected by CVE-2012-5575 via org.apache.cxf:cxf-rt-transports-http (>=2.5.0, <=2.5.9)

org.apache.cxf:cxf-rt-transports-http MAVEN version =2.5.0, =1.9.0, =0.5, =0.5, =0.5, =0.5, =0.5, =0.5, =0.5, =0.6.1, =1.0.0, =1.0.5 - net.stickycode.composite:sticky-composite-cxf-soap-http 1.1 - net.stickycode.ws:sticky-ws-cxf-guice3 2.2 - net.stickycode.ws:sticky-ws-cxf-spring30 2.1 and more...

br.com.esec.icpm:certillion-client-library (>=1.1.7, <=1.2.0), br.com.esec.icpm:certillion-client-library-resteasy-plugin (>=1.1.9, <=1.1.10) +121 more potentially affected by CVE-2012-5575 via org.apache.cxf:cxf-rt-transports-http (>=2.7.0, <=2.7.3)

org.apache.cxf:cxf-rt-transports-http MAVEN version =2.7.0, =1.1.7, =1.1.9, =1.2.5, =0.4.0, =0.4.1, =1.3.1, =1.2.3, =1.2.3, =1.4.0, =1.4.0, =1.4.0, =1.5.0 and more Source cves: CVE-2012-5575 Source advisory: OSV:GHSA-7V5V-9V8R-W864...

ai.platon.pulsar:pulsar-persist (>=1.9.0, <=1.10.23), com.argonio.gora:gora-accumulo (>=0.5, <=0.5.1) +167 more potentially affected by CVE-2012-5575 via org.apache.cxf:cxf-rt-transports-http (>=2.5.0, <=2.5.9)

org.apache.cxf:cxf-rt-transports-http MAVEN version =2.5.0, =1.9.0, =0.5, =0.5, =0.5, =0.5, =0.5, =0.5, =0.5, =0.6.1, =1.0.0, =1.0.5 - net.stickycode.composite:sticky-composite-cxf-soap-http 1.1 - net.stickycode.ws:sticky-ws-cxf-guice3 2.2 - net.stickycode.ws:sticky-ws-cxf-spring30 2.1 and more...

com.fluxcorp.plugins:webservice-trigger (>=1.0.2, <=1.0.4), com.github.mkluas:web-admin (>=1.0.0, <=1.1.0) +76 more potentially affected by CVE-2014-0034 via org.apache.cxf:cxf-rt-ws-security (>=2.0.6, <=2.6.11)

org.apache.cxf:cxf-rt-ws-security MAVEN version =2.0.6, =1.0.2, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =4.0.3, =2.5.0, =1.0.1, =1.0.1, =1.0.0, =1.0.0, =1.0.3 and more Source cves: CVE-2014-0034 Source advisory: OSV:GHSA-38X2-FP9M-87MX...

com.fluxcorp.plugins:webservice-trigger (>=1.0.2, <=1.0.4), com.github.mkluas:web-admin (>=1.0.0, <=1.1.0) +76 more potentially affected by CVE-2014-0034 via org.apache.cxf:cxf-rt-ws-security (>=2.0.6, <=2.6.11)

org.apache.cxf:cxf-rt-ws-security MAVEN version =2.0.6, =1.0.2, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =4.0.3, =2.5.0, =1.0.1, =1.0.1, =1.0.0, =1.0.0, =1.0.3 and more Source cves: CVE-2014-0034 Source advisory: GHSA-38X2-FP9M-87MX...

br.com.esec.icpm:certillion-client-library (>=1.1.7, <=1.2.0), br.com.esec.icpm:certillion-client-library-resteasy-plugin (>=1.1.9, <=1.1.10) +38 more potentially affected by CVE-2014-0034 via org.apache.cxf:cxf-rt-ws-security (>=2.7.0, <=2.7.8)

org.apache.cxf:cxf-rt-ws-security MAVEN version =2.7.0, =1.1.7, =1.1.9, =1.2.5, =ec2-2013-02-01, =1.0.1, =1.0.0, =1.0.0, =1.1, =2.11.0, =2.12.2 - org.apache.cxf.fediz.examples.wsclientwebapp.webservice:fedizservice 1.1.0 - org.apache.cxf.fediz.examples.wsclientwebapp:webapp 1.1.0 -...

br.com.esec.icpm:certillion-client-library (>=1.1.7, <=1.2.0), br.com.esec.icpm:certillion-client-library-resteasy-plugin (>=1.1.9, <=1.1.10) +38 more potentially affected by CVE-2014-0034 via org.apache.cxf:cxf-rt-ws-security (>=2.7.0, <=2.7.8)

org.apache.cxf:cxf-rt-ws-security MAVEN version =2.7.0, =1.1.7, =1.1.9, =1.2.5, =ec2-2013-02-01, =1.0.1, =1.0.0, =1.0.0, =1.1, =2.11.0, =2.12.2 - org.apache.cxf.fediz.examples.wsclientwebapp.webservice:fedizservice 1.1.0 - org.apache.cxf.fediz.examples.wsclientwebapp:webapp 1.1.0 -...