Fedora: Security Advisory (FEDORA-2023-aadd651a30)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 39 Update: erofs-utils-1.6-3.fc39

EROFS stands for Enhanced Read-Only File System. It aims to be a general read-only file system solution for various use cases instead of just focusing on saving storage space without considering runtime performance. This package includes tools to create, check, and extract EROFS images...

@antgineering-studio/strapi (4.5.5), @beardeddudes/strapi-types (0.1.0) +111 more potentially affected by CVE-2023-36472 via @strapi/utils (>=4.0.0, <=4.11.6)

@strapi/utils NPM version =4.0.0, =4.11.3, =4.11.2, =1.0.0, =1.5.1 - @codeparticle/strapi 4.9.2 - @codeparticle/strapi-admin 4.9.2 - @codeparticle/strapi-data-transfer 4.9.2 - @codeparticle/strapi-database 4.9.2 - @codeparticle/strapi-generators 4.9.2 - @codeparticle/strapi-permissions 4.9.2 -...

Malicious code in @get-bridge/bridge-string-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e69ac01e87147a835e5ab4045ff640d7fa9d2eb636aeb12eef6e1fc1577d021f The OpenSSF Package Analysis project identified '@get-bridge/bridge-string-utils' @ 99.99.99 npm as malicious. It is considered malicious becaus...

Fedora: Security Advisory for erofs-utils (FEDORA-2023-f838326992)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 5 : rgmanager (ELSA-2009-1339)

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2009-1339 advisory. 2.0.52-1.0.1 - Update summary and description to be vendor neutral 2.0.52-1 - When vm.sh does a status check and gets 'no state' it is now treated as a running...

Oracle Linux 5 : ecryptfs-utils (ELSA-2009-1307)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2009-1307 advisory. 75-4 - fix EOF handling 499367 - add icon to gui desktop file 75-3 - ask for password confirmation when creating openssl key 500850 - removed executable...

Oracle Linux 5 : nfs-utils (ELSA-2009-1321)

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2009-1321 advisory. 1.0.9-42 - mountd: Check host alias with netgroups bz 478952 - exportfs: fixed typo in man page bz 474848 - nfs.init: NFS server reboot results in 'Stale NFS fi...

Oracle Linux 5 : gfs2-utils (ELSA-2009-1337)

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2009-1337 advisory. 0.1.62-1 - Fix man page references to fsck.gfs2. - Resolves: rhbz477072 0.1.61-1 - fsck.gfs2 no longer segfaults when fixing 'EA leaf block type' problems. -...

Fedora 38 : erofs-utils (2023-f838326992)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-f838326992 advisory. - Backports a fix for CVE-2023-33551 - Backports a fix for CVE-2023-33552 Tenable has extracted the preceding description block directly from the...

Oracle Linux 8 : virt:kvm_utils (ELSA-2023-12342)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12342 advisory. - qga/win32: Use rundll for VSS installation Konstantin Kostiuk Orabug: 35206108 CVE-2023-0664 - qga/win32: Remove change action from MSI installer...

Oracle Linux 6 : nfs-utils (ELSA-2011-1534)

The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2011-1534 advisory. 1.2.3-15 - mout.nfs: Don't roll back to IPv4 whe IPv6 fails bz 744657 - rpcdebug: Added pNFS and FSCache debugging bz 747400 1.2.3-14 - mount.nfs:...

Important: Red Hat Security Advisory: Red Hat Process Automation Manager 7.13.4 security update

An update is now available for Red Hat Process Automation Manager. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which provides a detailed severity rating, is available for each vulnerability from th...

CVE-2023-4641

A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second attempt, shadow-utils fails in cleaning the buffer used to store the first entry. This may allow an attacker with enough access to retrieve the password from...

PT-2023-6882 · Nagios Xi · Nagios Xi

Name of the Vulnerable Software and Affected Versions: NagiosXI affected versions not specified Description: The issue is related to the utils-banner message component of NagiosXI, which fails to properly protect the SQL query structure. This allows a remote attacker to execute arbitrary SQL...

Malicious code in nequi-api-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bf1340504c1cd5ad13f47a2e8c92aa8f58b41f2bfc9cbe68f77c055215dd9122 The OpenSSF Package Analysis project identified 'nequi-api-utils' @ 0.3.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-7925 Malicious code in nequi-api-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bf1340504c1cd5ad13f47a2e8c92aa8f58b41f2bfc9cbe68f77c055215dd9122 The OpenSSF Package Analysis project identified 'nequi-api-utils' @ 0.3.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in personal-profile-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5dfd44b67730d9649f2fa1cdf8999719e5f34e7e9a6b918daf0de76f176a73e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1523 Malicious code in personal-profile-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5dfd44b67730d9649f2fa1cdf8999719e5f34e7e9a6b918daf0de76f176a73e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jscrambler-permission-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 131a72d7a509dfbdfaa80048c9ac64559b4f8ec25798e555ea15688529491856 The OpenSSF Package Analysis project identified 'jscrambler-permission-utils' @ 6.6.6 npm as malicious. It is considered malicious because: - Th...