ALBA-2021:4258 new packages: gcc-toolset-11-annobin

GCC Toolset is a compiler toolset that provides recent versions of development tools. GCC Toolset is an Application Stream packaged as a Software Collection. This enhancement update adds the gcc-toolset-11-annobin packages to AlmaLinux For instructions on usage, see Using GCC Toolset linked from...

new packages: gcc-toolset-11-systemtap

GCC Toolset is a compiler toolset that provides recent versions of development tools. GCC Toolset is an Application Stream packaged as a Software Collection. This enhancement update adds the gcc-toolset-11-systemtap packages to AlmaLinux For instructions on usage, see Using GCC Toolset linked fro...

new packages: gcc-toolset-11-dwz

GCC Toolset is a compiler toolset that provides recent versions of development tools. GCC Toolset is an Application Stream packaged as a Software Collection. This enhancement update adds the gcc-toolset-11-dwz packages to AlmaLinux For instructions on usage, see Using GCC Toolset linked from the...

llvm-toolset:rhel8 bug fix and enhancement update

LLVM Toolset provides the LLVM compiler infrastructure framework, the Clang compiler for the C and C++ languages, the LLDB debugger, and related tools for code analysis. For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. For...

new packages: gcc-toolset-11

GCC Toolset is a compiler toolset that provides recent versions of development tools. GCC Toolset is an Application Stream packaged as a Software Collection. This enhancement update adds the gcc-toolset-11 packages to AlmaLinux For instructions on usage, see Using GCC Toolset linked from the...

Certipy - Python Implementation For Active Directory Certificate Abuse

Certipy is a Python tool to enumerate and abuse misconfigurations in Active Directory Certificate Services AD CS. Based on the C variant Certify from @harmj0y and @tifkin. Installation $ python3 setup.py install Remember to add the Python scripts directory to your path. Usage $ certipy -h usage:...

PYSEC-2021-637

TensorFlow is an open source platform for machine learning. In affected versions TensorFlow's savedmodelcli tool is vulnerable to a code injection as it calls eval on user supplied strings. This can be used by attackers to run arbitrary code on the plaform where the CLI tool runs. However, given...

CVE-2021-39907

A potential DOS vulnerability was discovered in GitLab CE/EE starting with version 13.7. The stripping of EXIF data from certain images resulted in high CPU usage...

CVE-2021-39907

A potential DOS vulnerability was discovered in GitLab CE/EE starting with version 13.7. The stripping of EXIF data from certain images resulted in high CPU usage...

Denial of service

A potential DOS vulnerability was discovered in GitLab CE/EE starting with version 13.7. The stripping of EXIF data from certain images resulted in high CPU usage...

UBUNTU-CVE-2021-39907

A potential DOS vulnerability was discovered in GitLab CE/EE starting with version 13.7. The stripping of EXIF data from certain images resulted in high CPU usage...

CVE-2021-39914

A regular expression denial of service issue in GitLab versions 8.13 to 14.2.5, 14.3.0 to 14.3.3 and 14.4.0 could cause excessive usage of resources when a specially crafted username was used when provisioning a new user...

Denial of service

A regular expression denial of service issue in GitLab versions 8.13 to 14.2.5, 14.3.0 to 14.3.3 and 14.4.0 could cause excessive usage of resources when a specially crafted username was used when provisioning a new user...

CVE-2021-39907

Removed by vendor...

CVE-2021-39907

CVE-2021-39907 affects GitLab CE/EE starting with version 13.7. The issue arises from stripping EXIF data from certain images, which can cause high CPU usage and potential denial of service. The connected documents corroborate the baseline description across multiple sources (GitLab CVE entry, OS...

CVE-2021-39907

A potential DOS vulnerability was discovered in GitLab CE/EE starting with version 13.7. The stripping of EXIF data from certain images resulted in high CPU usage...

CVE-2021-39914

Removed by vendor...

CVE-2021-39914

CVE-2021-39914 is a Denial of Service vulnerability in GitLab where a crafted username during user provisioning can trigger pathological backtracking in a regular expression, leading to excessive resource usage. Affected GitLab versions are 8.13 to 14.2.5, 14.3.0 to 14.3.3, and 14.4.0 (inclusive)...

Mozilla: Opportunistic Encryption in HTTP2 could be used to bypass the Same-Origin-Policy on services hosted on other ports

The Mozilla Foundation Security Advisory describes this flaw as: The Opportunistic Encryption feature of HTTP2 RFC 8164 allows a connection to be transparently upgraded to TLS while retaining the visual properties of an HTTP connection, including being same-origin with unencrypted connections on...

envoyproxy/envoy: excessive CPU usage when handling a large number of HTTP/2 requests

An uncontrolled resource consumption vulnerability was found in envoyproxy/envoy. When envoy handles a large number of HTTP/2 requests which open and then reset the connection, it can cause excessive CPU usage. This flaw allows an attacker to cause a denial of service on the proxy. The highest...