Amazon Linux 2023 : xorg-x11-server-common, xorg-x11-server-devel, xorg-x11-server-source (ALAS2023-2023-102)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-102 advisory. A flaw was found in the Xorg-x11-server. An out-of-bounds access issue can occur in the SProcRenderCompositeGlyphs function due to improper validation of the request length. CVE-2021-4008 A fla...

CentOS: Security Advisory for xorg-x11-server-common (CESA-2023:0675)

The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CentOS: Security Advisory for xorg-x11-server-common (CESA-2023:0046)

The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CentOS: Security Advisory for xorg-x11-server-common (CESA-2022:8491)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CentOS: Security Advisory for xorg-x11-server-common (CESA-2022:5905)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

co.aurasphere.botmill:botmill-core (>=1.0.0, <=1.0.2), co.aurasphere.botmill:fb-botmill (>=2.0.0-rc1, <=2.0.0-rc3) +7 more potentially affected by CVE-2022-22980 via org.springframework.data:spring-data-mongodb (1.2.0.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - co.aurasphere.botmill:botmill-core =1.0.0, =2.0.0-rc1, =2.0.0,...

ae.teletronics.nlp:entityextraction (1.3), ai.catboost:catboost-spark_2.11 (>=0.25-rc1, <=0.25-rc3) +4092 more potentially affected by CVE-2021-33036 via org.apache.hadoop:hadoop-yarn-server-common (>=2.2.0, <=2.10.1)

org.apache.hadoop:hadoop-yarn-server-common MAVEN version =2.2.0, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =local, =local, =0.42.1, =0.78.8 - ai.eto:rikai2.12 0.0.1 and mor...

ch.cern.hadoop:hadoop-archive-logs (3.2.1), ch.cern.hadoop:hadoop-datajoin (3.2.1) +250 more potentially affected by CVE-2021-33036 via org.apache.hadoop:hadoop-yarn-server-common (>=3.0.0, <=3.2.2)

org.apache.hadoop:hadoop-yarn-server-common MAVEN version =3.0.0, =3.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hadoop:hadoop-yarn-server-common and may be impacted: - ch.cern.hadoop:hadoop-archive-logs 3.2.1 -...

ai.starlake:starlake-spark2_2.11 (>=0.2.7, <=0.2.8), ai.starlake:starlake-spark3_2.12 (>=0.2.7, <=0.2.10) +83 more potentially affected by CVE-2021-33036 via org.apache.hadoop:hadoop-yarn-server-common (>=3.3.0, <=3.3.1)

org.apache.hadoop:hadoop-yarn-server-common MAVEN version =3.3.0, =0.2.7, =0.2.7, =0.1.30, =0.1.30, =0.1.28, =0.9.0, =2.8.2, =2.8.2, =304, =3.3.0, =3.3.0, =3.3.0, =3.3.0, =3.3.0, =3.3.0, =3.3.1 and more Source cves: CVE-2021-33036 Source advisory: GHSA-58JX-F5RF-QGQF...

ae.teletronics.nlp:entityextraction (1.3), ai.catboost:catboost-spark_2.11 (>=0.25-rc1, <=0.25-rc3) +4092 more potentially affected by CVE-2021-33036 via org.apache.hadoop:hadoop-yarn-server-common (>=2.2.0, <=2.10.1)

org.apache.hadoop:hadoop-yarn-server-common MAVEN version =2.2.0, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =local, =local, =0.42.1, =0.78.8 - ai.eto:rikai2.12 0.0.1 and mor...

ai.starlake:starlake-spark2_2.11 (>=0.2.7, <=0.2.8), ai.starlake:starlake-spark3_2.12 (>=0.2.7, <=0.2.10) +83 more potentially affected by CVE-2021-33036 via org.apache.hadoop:hadoop-yarn-server-common (>=3.3.0, <=3.3.1)

org.apache.hadoop:hadoop-yarn-server-common MAVEN version =3.3.0, =0.2.7, =0.2.7, =0.1.30, =0.1.30, =0.1.28, =0.9.0, =2.8.2, =2.8.2, =304, =3.3.0, =3.3.0, =3.3.0, =3.3.0, =3.3.0, =3.3.0, =3.3.1 and more Source cves: CVE-2021-33036 Source advisory: OSV:GHSA-58JX-F5RF-QGQF...

ch.cern.hadoop:hadoop-archive-logs (3.2.1), ch.cern.hadoop:hadoop-datajoin (3.2.1) +250 more potentially affected by CVE-2021-33036 via org.apache.hadoop:hadoop-yarn-server-common (>=3.0.0, <=3.2.2)

org.apache.hadoop:hadoop-yarn-server-common MAVEN version =3.0.0, =3.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hadoop:hadoop-yarn-server-common and may be impacted: - ch.cern.hadoop:hadoop-archive-logs 3.2.1 -...

ai.starlake:starlake-spark2_2.11 (>=0.2.7, <=0.2.8), ai.starlake:starlake-spark3_2.12 (>=0.2.7, <=0.2.10) +83 more potentially affected by CVE-2021-33036 via org.apache.hadoop:hadoop-yarn-server-common (>=3.3.0, <=3.3.1)

org.apache.hadoop:hadoop-yarn-server-common MAVEN version =3.3.0, =0.2.7, =0.2.7, =0.1.30, =0.1.30, =0.1.28, =0.9.0, =2.8.2, =2.8.2, =304, =3.3.0, =3.3.0, =3.3.0, =3.3.0, =3.3.0, =3.3.0, =3.3.1 and more Source cves: CVE-2021-33036 Source advisory: MEND:CVE-2021-33036...

ae.teletronics.nlp:entityextraction (1.3), ai.catboost:catboost-spark_2.11 (>=0.25-rc1, <=0.25-rc3) +4092 more potentially affected by CVE-2021-33036 via org.apache.hadoop:hadoop-yarn-server-common (>=2.2.0, <=2.10.1)

org.apache.hadoop:hadoop-yarn-server-common MAVEN version =2.2.0, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =local, =local, =0.42.1, =0.78.8 - ai.eto:rikai2.12 0.0.1 and mor...

ch.cern.hadoop:hadoop-archive-logs (3.2.1), ch.cern.hadoop:hadoop-datajoin (3.2.1) +250 more potentially affected by CVE-2021-33036 via org.apache.hadoop:hadoop-yarn-server-common (>=3.0.0, <=3.2.2)

org.apache.hadoop:hadoop-yarn-server-common MAVEN version =3.0.0, =3.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hadoop:hadoop-yarn-server-common and may be impacted: - ch.cern.hadoop:hadoop-archive-logs 3.2.1 -...

org.apache.camel:camel-jbpm (>=2.23.0, <=3.0.0-m2), org.apache.camel:camel-jbpm-starter (>=2.23.0, <=3.0.0-m2) +119 more potentially affected by CVE-2016-7043 via org.kie.server:kie-server-common (>=7.0.0.beta3, <=7.20.0.final)

org.kie.server:kie-server-common MAVEN version =7.0.0.beta3, =2.23.0, =2.23.0, =7.14.0.final, =7.16.0.final, =7.3.0.final, =7.3.0.final, =5.0.1, =7.3.0.final, =7.3.0.final, =7.3.0.final, =7.3.0.final, =7.0.0.beta3, =7.0.0.beta5 and more Source cves: CVE-2016-7043 Source advisory:...

org.apache.camel:camel-jbpm (>=2.23.0, <=3.0.0-m2), org.apache.camel:camel-jbpm-starter (>=2.23.0, <=3.0.0-m2) +119 more potentially affected by CVE-2016-7043 via org.kie.server:kie-server-common (>=7.0.0.beta3, <=7.20.0.final)

org.kie.server:kie-server-common MAVEN version =7.0.0.beta3, =2.23.0, =2.23.0, =7.14.0.final, =7.16.0.final, =7.3.0.final, =7.3.0.final, =5.0.1, =7.3.0.final, =7.3.0.final, =7.3.0.final, =7.3.0.final, =7.0.0.beta3, =7.0.0.beta5 and more Source cves: CVE-2016-7043 Source advisory: GHSA-PJW3-C74J-M...

org.alluxio:alluxio-assembly-client (1.6.0), org.alluxio:alluxio-core-client-fs (1.6.0) +15 more potentially affected by CVE-2022-23848 via org.alluxio:alluxio-core-common (1.6.0)

org.alluxio:alluxio-core-common MAVEN version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.alluxio:alluxio-core-common and may be impacted: - org.alluxio:alluxio-assembly-client 1.6.0 - org.alluxio:alluxio-core-client-fs 1.6.0 -...

org.alluxio:alluxio-assembly-client (1.6.1), org.alluxio:alluxio-core-client-fs (1.6.1) +16 more potentially affected by CVE-2022-23848 via org.alluxio:alluxio-core-common (1.6.1)

org.alluxio:alluxio-core-common MAVEN version 1.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.alluxio:alluxio-core-common and may be impacted: - org.alluxio:alluxio-assembly-client 1.6.1 - org.alluxio:alluxio-core-client-fs 1.6.1 -...

CentOS: Security Advisory for xorg-x11-server-common (CESA-2021:2033)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...