Security Bulletin: IBM Spectrum Conductor provides upgraded software packages to address known CVEs

IBM Spectrum Conductor 2.5.1 Fix 601861 provides upgraded software packages to address known CVEs. Several software versions have been upgraded with Fix 601861. IBM Spectrum Conductor 2.5.1 Fix 601861 is a security fix that provides upgraded versions of software packages included with IBM Spectru...

Security Bulletin: IBM Spectrum Symphony provides upgraded software packages to address known CVEs

IBM Spectrum Symphony Fix 601860 provides upgraded software packages to address known CVEs. Several software versions have been upgraded with Fix 601860. IBM Spectrum Symphony 7.3.2 with Fix 601860 is a security fix that provides upgraded versions of software packages included with IBM Spectrum...

[slackware-security] postfix

New postfix packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/postfix-3.6.14-i586-1slack15.0.txz: Upgraded. Security inbound SMTP smuggling: with "smtpdforbidbarenewline = normalize" default "no...

CVE-2023-0475 affecting package packer for versions less than 1.8.7-1

CVE-2023-0475 affecting package packer for versions less than 1.8.7-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-46218 affecting package curl for versions less than 8.5.0-1

CVE-2023-46218 affecting package curl for versions less than 8.5.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-6918 affecting package libssh for versions less than 0.10.6-1

CVE-2023-6918 affecting package libssh for versions less than 0.10.6-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-49284 affecting package fish for versions less than 3.6.2-1

CVE-2023-49284 affecting package fish for versions less than 3.6.2-1. An upgraded version of the package is available that resolves this issue...

Upgraded Q -> 2 from #482 [1705001199242]

Judge has assessed an item in Issue 482 as 2 risk. The relevant finding follows: L-02: AuctionHouse’s owner should not be allowed to change parameters when auction is active --- The text was updated successfully, but these errors were encountered: All reactions...

Security Bulletin: IBM Planning Analytics Cartridge for IBM Cloud Pak for Data 4.8.1 is affected but not considered vulnerable to multiple vulnerabilities

Summary IBM Planning Analytics Cartridge for IBM Cloud Pak for Data 4.8.1 is affected but not classified as vulnerable to multiple vulnerabilities based on current information, in the following 3rd-party components: Ansible and Logrus. These 3rd-party have been upgraded to non-vulnerable versions...

Upgraded Q -> 3 from #534 [1702060375162]

Judge has assessed an item in Issue 534 as 3 risk. The relevant finding follows: L-03 Consider use stETH/UDS oracle Issue Description: The sponsor has confirmed their choice of Chainlink as an oracle to fetch prices. Since all other LST price feeds are 18 decimal places, they will most likely use...

CVE-2023-48232 affecting package vim for versions less than 9.0.2112-1

CVE-2023-48232 affecting package vim for versions less than 9.0.2112-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-22112 affecting package mysql for versions less than 8.0.35-1

CVE-2023-22112 affecting package mysql for versions less than 8.0.35-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-22092 affecting package mysql for versions less than 8.0.35-1

CVE-2023-22092 affecting package mysql for versions less than 8.0.35-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-22066 affecting package mysql for versions less than 8.0.35-1

CVE-2023-22066 affecting package mysql for versions less than 8.0.35-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-38039 affecting package mysql for versions less than 8.0.35-1

CVE-2023-38039 affecting package mysql for versions less than 8.0.35-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-22114 affecting package mysql for versions less than 8.0.35-1

CVE-2023-22114 affecting package mysql for versions less than 8.0.35-1. An upgraded version of the package is available that resolves this issue...

Upgraded Q -> 2 from #304 [1701018148851]

Judge has assessed an item in Issue 304 as 2 risk. The relevant finding follows: Incorrect minTotalContribution and minContribution Interaction --- The text was updated successfully, but these errors were encountered: All reactions...

CVE-2023-22033 affecting package mysql for versions less than 8.0.34-1

CVE-2023-22033 affecting package mysql for versions less than 8.0.34-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-27533 affecting package mysql for versions less than 8.0.34-1

CVE-2023-27533 affecting package mysql for versions less than 8.0.34-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-27534 affecting package mysql for versions less than 8.0.34-1

CVE-2023-27534 affecting package mysql for versions less than 8.0.34-1. An upgraded version of the package is available that resolves this issue...