SUSE-SU-2022:2536-1 Security update for mozilla-nspr, mozilla-nss

This update for mozilla-nspr, mozilla-nss fixes the following issues: mozilla-nss was updated to fix various issues: FIPS 140-3 enablement patches were backported from SUSE Linux Enterprise 15. - FIPS: add on-demand integrity tests through sftkFIPSRepeatIntegrityCheck bsc1198980. - FIPS: mark...

SUSE-SU-2022:2533-2 Security update for mozilla-nss

This update for mozilla-nss fixes the following issues: Various FIPS 140-3 related fixes were backported from SUSE Linux Enterprise 15 SP4: - Makes the PBKDF known answer test compliant with NIST SP800-132. bsc1192079. - FIPS: Add on-demand integrity tests through sftkFIPSRepeatIntegrityCheck...

CLSA-2022-1658171690 Fixed CVE-2016-10012 in openssh

CVE-2016-10012: re-remove pre-authentication compression and potentially unsecure shared memory manager used by zlib - Move not yet valid timestamps for certs to 2030-2040 range, make sure all tests are passed and add %check unset DISPLAY section...

Fixed CVE-2016-10012 in openssh

CVE-2016-10012: re-remove pre-authentication compression and potentially unsecure shared memory manager used by zlib - Move not yet valid timestamps for certs to 2030-2040 range, make sure all tests are passed and add %check unset DISPLAY section...

CLSA-2022-1658171011 Fixed CVE-2016-10012 in openssh

CVE-2016-10012: re-remove pre-authentication compression and potentially unsecure shared memory manager used by zlib - Move not yet valid timestamps for certs to 2030-2040 range, make sure all tests are passed and add %check unset DISPLAY section...

[SECURITY] Fedora 36 Update: golang-github-burntsushi-toml-test-0.2.0-11.20210108git9767d20.fc36

Toml-test is a higher-order program that tests other TOML decoders or encoder s. The goal is to make it comprehensive. Tests are divided into two groups: inva lid TOML data and valid TOML data. Decoders that reject invalid TOML data pass invalid TOML tests. Decoders that accept valid TOML data an...

curl security update

7.76.1-14.el90.4 - fix too eager reuse of TLS and SSH connections CVE-2022-27782 7.76.1-14.el90.3 - fix leak of SRP credentials in redirects CVE-2022-27774 7.76.1-14.el90.2 - add missing tests to Makefile 7.76.1-14.el90.1 - fix credential leak on redirect CVE-2022-27774 - fix auth/cookie leak on...

CLSA-2022-1655757814 Fix CVE(s): CVE-2020-1938, CVE-2020-9484, CVE-2021-25329

Fix build process: - debian/keystores/.pem|.jks: update expiring certs and keystores - debian/patches/0028-update-expiring-test-certs.patch: update expiring test certs - debian/patches/0029-fix-path-to-valid-keystore.patch: fix path to valid keystore - debian/patches/0030-use-tls12-in-tests.patch...

Malicious code in facebook-nodejs-business-sdk-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e8d8d81ca4b948dcfa09565e5cd03395cbd94a463bf6d49437beb32b5bb1d202 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2961 Malicious code in facebook-nodejs-business-sdk-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e8d8d81ca4b948dcfa09565e5cd03395cbd94a463bf6d49437beb32b5bb1d202 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5244 Malicious code in paypal-sdk-e2e-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbf78f6e3c0804dd208733f5a6a2c666614467a873d68214580d2f183b1dc35f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sovryn-node-integration-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0d8a316d21d24dc79e10223d3c0b2e58efb32ba31dc62b9d09efedcc39a14d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6221 Malicious code in sovryn-node-integration-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0d8a316d21d24dc79e10223d3c0b2e58efb32ba31dc62b9d09efedcc39a14d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nextcloud-js-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b16d1ebcc082e0916e1ebfbf2a580ae6ef9e6167138c0df20449a63917dcd6ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4828 Malicious code in nextcloud-js-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b16d1ebcc082e0916e1ebfbf2a580ae6ef9e6167138c0df20449a63917dcd6ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sncicd-tests-run (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4be8f2247f95470e297a82a1f688243b369a67e3df14dca0a017f9ddecb88aee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6192 Malicious code in sncicd-tests-run (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4be8f2247f95470e297a82a1f688243b369a67e3df14dca0a017f9ddecb88aee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in karma-failed-tests-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 936e6328b59bb0287da11b8311dd6a223d84756be95bf201c9e3b87d6c056eb0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4110 Malicious code in karma-failed-tests-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 936e6328b59bb0287da11b8311dd6a223d84756be95bf201c9e3b87d6c056eb0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-785 Malicious code in @xvideos/tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39916423d097ff70776a72d4ec09cae71c30f9e91b3d3eeb5c29b59198b581a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...