103 matches found
CVE-2024-23850 affecting package kernel for versions less than 5.15.153.1-1
CVE-2024-23850 affecting package kernel for versions less than 5.15.153.1-1. A patched version of the package is available...
CVE-2008-2149 affecting package wordnet for versions less than 3.0-43
CVE-2008-2149 affecting package wordnet for versions less than 3.0-43. A patched version of the package is available...
GHSA-F3JH-QVM4-MG39 vulnerabilities
Vulnerabilities for packages: jenkins...
CVE-2021-22931 affecting package python-gevent for versions less than 21.1.2-3
CVE-2021-22931 affecting package python-gevent for versions less than 21.1.2-3. A patched version of the package is available...
GHSA-JW7R-RXFF-GV24 vulnerabilities
Vulnerabilities for packages: opensearch, keycloak...
Moderate: Red Hat Security Advisory: python-requests security update
An update for python-requests is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
ipa: Invalid CSRF protection
A Cross-site request forgery vulnerability exists in ipa/session/loginpassword in all supported versions of IPA. This flaw allows an attacker to trick the user into submitting a request that could perform actions as the user, resulting in a loss of confidentiality and system integrity. During...
CVE-2023-40791 affecting package kernel for versions less than 5.15.135.1-2
CVE-2023-40791 affecting package kernel for versions less than 5.15.135.1-2. A patched version of the package is available...
CVE-2023-44487 affecting package local-path-provisioner for versions less than 0.0.21-12
CVE-2023-44487 affecting package local-path-provisioner for versions less than 0.0.21-12. A patched version of the package is available...
CVE-2023-31555
podofoinfo 0.10.0 was discovered to contain a segmentation violation via the function PoDoFo::PdfObject::DelayedLoad...
CVE-2023-23931 affecting package python-cryptography 3.3.2-1
CVE-2023-23931 affecting package python-cryptography 3.3.2-1. A patched version of the package is available...
dotnet7.0 security, bug fix, and enhancement update
7.0.100-0.5.rc2.0.1 - Set TargetRid based on os release major version, add OL arm64 RuntimeIdentifier Orabug: 34671152 7.0.100-0.5.rc2 - Add lldb as a build dependency - Related: RHBZ2134641 7.0.100-0.4.rc2 - Enable ppc64le builds - Related: RHBZ2134641 7.0.100-0.3.rc2 - Update to .NET 7 RC 2 -...
flac security update
1.3.3-10 - handle end-of-stream when encoding with verification CVE-2021-0561...
expat: Fix of CVE-2022-43680
CVE-2022-43680: Fix overeager DTD destruction...
CVE-2022-39371
GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk features, licenses tracking and software auditing. Script related HTML tags in assets inventory information are not properly neutralized. This issue has...
device-mapper-multipath security update
0.8.7-7.1 - Add 0044-multipathd-ignore-duplicated-multipathd-command-keys.patch - Resolves: bz 2133997...
rsync security update
3.1.3-14.2 - Related: 2074783 - Needed to bump this to rebuild correctly 3.1.3-14.1 - Resolves: 2074783 - A flaw in zlib-1.2.11 when compressing not decompressing! certain inputs...
maven:3.5 security update
...