10800 matches found
Fedora 38 : firecracker / rust-aes-gcm (2023-98f44d1c4c)
The remote Fedora 38 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2023-98f44d1c4c advisory. - Update the aes-gcm crate to version 0.10.3. Addresses CVE-2023-42811. - Rebuild dependent packages firecracker for aes-gcm v0.10.3...
Fedora 38 : rust-axum / rust-tokio-tungstenite / rust-tungstenite / rust-warp (2023-9c4142423a)
The remote Fedora 38 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2023-9c4142423a advisory. - Update the axum crate to version 0.6.20. - Update the tokio-tungstenite crate to version 0.20.1. - Update the tungstenite crate to version 0.20.1. - Port...
Fedora 37 : firecracker / rust-aes-gcm (2023-bc40c7995e)
The remote Fedora 37 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2023-bc40c7995e advisory. - Update the aes-gcm crate to version 0.10.3. Addresses CVE-2023-42811. - Rebuild dependent packages firecracker for aes-gcm v0.10.3...
Fedora: Security Advisory for rust-axum (FEDORA-2023-91a66898d2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for virtiofsd (FEDORA-2023-c19aaa2283)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2023-91a66898d2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for rust-warp (FEDORA-2023-91a66898d2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 39 Update: rust-warp-0.3.5-6.fc39
Serve the web at warp speeds...
[SECURITY] Fedora 39 Update: rust-tungstenite-0.20.1-1.fc39
Lightweight stream-based WebSocket implementation...
[SECURITY] Fedora 39 Update: rust-tokio-tungstenite-0.20.1-1.fc39
Tokio binding for Tungstenite, the Lightweight stream-based WebSocket implementation...
[SECURITY] Fedora 39 Update: rust-axum-0.6.20-1.fc39
Web framework that focuses on ergonomics and modularity...
[SECURITY] Fedora 38 Update: virtiofsd-1.7.0-4.fc38
Virtio-fs vhost-user device daemon Rust version...
Fedora 37 : firecracker (2023-1db67725f2)
The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-1db67725f2 advisory. Rebuild dependent packages for vm-memory v0.12.2 to address CVE-2023-41051 / RUSTSEC-2023-0056. - https://vulners.com/cve/CVE-2023-41051 -...
New security features in Windows 11 protect users and empower IT
While attacks are getting more sophisticated, so are our defenses. With recent innovations like secured-core PCs that are 60 percent more resilient to malware than non-secured-core PCs,1 and the Microsoft Pluton Security Processor that adds more protection by isolating sensitive data like...
SUSE CVE-2023-42811
aes-gcm is a pure Rust implementation of the AES-GCM. Starting in version 0.10.0 and prior to version 0.10.3, in the AES GCM implementation of decryptinplacedetached, the decrypted ciphertext i.e. the correct plaintext is exposed even if tag verification fails. If a program using the aes-gcm...
ac-rumqttc (>=0.21.0-alpha.1, <=0.21.0-alpha.2), acme (0.1.40) +1106 more potentially affected by CVE-2023-43669 via tungstenite (>=0.5.4, <=0.19.0)
tungstenite CARGO version =0.5.4, =0.21.0-alpha.1, =0.1.41, =0.1.0, =0.0.4, =0.1.0, =0.10.0-alpha.1.6, =0.6.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0 and more Source cves: CVE-2023-43669 Source advisory: OSV:RUSTSEC-2023-0065...
Tungstenite allows remote attackers to cause a denial of service
The Tungstenite crate through 0.20.0 for Rust allows remote attackers to cause a denial of service minutes of CPU consumption via an excessive length of an HTTP header in a client handshake. The length affects both how many times a parse is attempted e.g., thousands of times and the average amoun...
RUSTSEC-2023-0065 Tungstenite allows remote attackers to cause a denial of service
The Tungstenite crate through 0.20.0 for Rust allows remote attackers to cause a denial of service minutes of CPU consumption via an excessive length of an HTTP header in a client handshake. The length affects both how many times a parse is attempted e.g., thousands of times and the average amoun...
Important: ecs-service-connect-agent
Issue Overview: Wasmtime is a standalone runtime for WebAssembly. Prior to versions 6.0.2, 7.0.1, and 8.0.1, Wasmtime's implementation of managing per-instance state, such as tables and memories, contains LLVM-level undefined behavior. This undefined behavior was found to cause runtime-level issu...