742 matches found
PackageDNA - Tool To Analyze Software Packages Of Different Programming Languages That Are Being Or Will Be Used In Their Codes
This tool gives developers, researchers and companies the ability to analyze software packages of different programming languages that are being or will be used in their codes, providing information that allows them to know in advance if this library complies with processes. secure development, i...
MGASA-2021-0358 Updated rvxt-unicode, mxrvt, eterm packages fix security vulnerability
rxvt-unicode 9.22, rxvt 2.7.10, mrxvt 0.5.4, and Eterm 0.9.7 allow potentially remote code execution because of improper handling of certain escape sequences ESC G Q. A response is terminated by a newline CVE-2021-33477...
Citrix Hypervisor Open Source Licensing and Attribution
The Citrix Hypervisor product is a compilation of software packages. Each package is governed by its own license. The complete licensing terms applicable to a given package can be found in the source RPM of the package, unless the package is covered by a proprietary license which does not permit...
Update of libcurl, libcurl-devel, libcurl-devel, curl, libcurl
...
Google Releases New Framework to Prevent Software Supply Chain Attacks
As software supply chain attacks emerge as a point of concern in the wake of SolarWinds and Codecov security incidents, Google is proposing a solution to ensure the integrity of software packages and prevent unauthorized modifications. Called "Supply chain Levels for Software Artifacts" SLSA, and...
accuinsight (>=1.0.47 <=1.0.61), alphad3m (>=0.10.0 <=0.10.0.dev1) +88 more potentially affected by CVE-2021-29576 via tensorflow (>=2.2.0 <=2.2.2)
tensorflow PYPI version =2.2.0, =1.0.47, =0.10.0, =0.5.0, =0.2.0, =0.0.6, =1.2.0, =1.0.0, =0.0.15, =0.0.16 and more Source cves: CVE-2021-29576 Source advisory: OSV:GHSA-7CQX-92HP-X6WH...
GHSA-5RCV-M4M3-HFH7 vulnerabilities
Vulnerabilities for packages: k3d, vt-cli...
abmarl (>=0.1.1 <=0.1.3), agrothon (>=1.1.5 <=1.3.2) +95 more potentially affected by CVE-2021-29566 via tensorflow (>=2.4.0 <=2.4.2)
tensorflow PYPI version =2.4.0, =0.1.1, =1.1.5, =2.1.0, =0.7.0, =0.0.1, =0.0.6, =0.1.0, =1.4.0, =1.2.2, =20210221.0.0, =0.7.2, =0.7.4 and more Source cves: CVE-2021-29566 Source advisory: OSV:PYSEC-2021-203...
CVE-2021-2202 vulnerabilities
Vulnerabilities for packages: mysql...
Fedora: Security Advisory for rpm (FEDORA-2021-662680e477)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 32 Update: rpm-4.15.1.1-1.fc32.1
The RPM Package Manager RPM is a powerful command line driven package management system capable of installing, uninstalling, verifying, querying, and updating software packages. Each software package consists of an archive of files along with information about the package like its version, a...
[SECURITY] Fedora 33 Update: rpm-4.16.1.3-1.fc33
The RPM Package Manager RPM is a powerful command line driven package management system capable of installing, uninstalling, verifying, querying, and updating software packages. Each software package consists of an archive of files along with information about the package like its version, a...
CVE-2021-2058 vulnerabilities
Vulnerabilities for packages: mysql...
0lever-utils (>=0.0.2 <=0.0.7), 0x-web3 (=5.0.0a5) +1812 more potentially affected by CVE-2020-25659 via cryptography (>=0.6.1 <=3.2.0)
cryptography PYPI version =0.6.1, =0.0.2, =0.1.0, =0.5.0rc5, =1.0.0, =2.6.3, =2.3.36, =1.0.4, =2.8.1, =0.4.0, =2.0.0, =3.3.6 - adversarial-labeller =0.1.8 and more Source cves: CVE-2020-25659 Source advisory: OSV:PYSEC-2021-62...
MGASA-2021-0013 Updated imagemagick packages fix security vulnerabilities
The imagemagick package has been updated to version 7.0.10-55, fixing several security issues. The abydos, converseen, libopenshot, mgba, pfstools, php-imagick, sk1, synfig, transcode, uniconvertor, and xine-lib1.2 packages have been rebuilt against the updated libmagick library...
rhel8 bug fix update
An update is available for eclipse-emf, eclipse-ecf, apache-commons-compress, hamcrest, opentest4j, xz-java, google-gson, glassfish-el, icu4j, xmlgraphics-commons, jsch, felix-scr, apiguardian, junit, glassfish-jsp, lucene, jetty, junit5, apache-commons-jxpath, eclipse, univocity-parsers,...
CVE-2020-14848 vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2020-14837 vulnerabilities
Vulnerabilities for packages: mysql...