CVE-2024-37891 vulnerabilities

Vulnerabilities for packages: superset, py3-pipenv, mlflow, confluent-docker-utils, k8s-sidecar, jwt-tool, reflex, kubeflow-volumes-web-app, az, py3-cassandra-medusa, airflow, ggshield, kubeflow-jupyter-web-app, kubeflow-pipelines-visualization-server, kubeflow-katib, dask-gateway, py3-urllib3,...

OPENSUSE-SU-2024:12537-1 caca-utils-0.99.beta20-1.1 on GA media

These are all security issues fixed in the caca-utils-0.99.beta20-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13318-1 erofs-utils-1.7-1.1 on GA media

These are all security issues fixed in the erofs-utils-1.7-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10683-1 cifs-utils-6.13-1.3 on GA media

These are all security issues fixed in the cifs-utils-6.13-1.3 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10927-1 caca-utils-0.99.beta19.git20171003-8.3 on GA media

These are all security issues fixed in the caca-utils-0.99.beta19.git20171003-8.3 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10334-1 cifs-utils-6.5-1.5 on GA media

These are all security issues fixed in the cifs-utils-6.5-1.5 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12029-1 caca-utils-0.99.beta19.git20171003-9.1 on GA media

These are all security issues fixed in the caca-utils-0.99.beta19.git20171003-9.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11518-1 xdg-utils-1.1.3+20201113-1.2 on GA media

These are all security issues fixed in the xdg-utils-1.1.3+20201113-1.2 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12087-1 cifs-utils-6.15-1.1 on GA media

These are all security issues fixed in the cifs-utils-6.15-1.1 package on the GA media of openSUSE Tumbleweed...

alsa-utils bug fix and enhancement update

An update is available for alsa-utils. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux...

apache-liminal (>=0.0.1.post1, <=0.0.3.post1), apache-liminal-test-spark (0.0.0) +4 more potentially affected by CVE-2024-25142 via apache-airflow (1.10.12)

apache-airflow PYPI version 1.10.12 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - apache-liminal =0.0.1.post1, =0.0.1, =6.0.0, =0.1.0, =0.5.0a9, =0.6.0a15 Source cves: CVE-2024-25142 Source advisory:...

CVE-2024-37877: Out-of-bounds Read

UERANSIM before 3.2.6 allows out-of-bounds read when a RLS packet is sent to gNodeB with malformed PDU length. This occurs in function readOctetString in src/utils/octetview.cpp and in function DecodeRlsMessage in src/lib/rls/rlspdu.cpp...

jupyterhubutils (>=0.11.0, <=0.25.0), jupyterlabutils (>=0.9.1, <=0.10.0) +2 more potentially affected by CVE-2024-37300 via oauthenticator (0.13.0)

oauthenticator PYPI version 0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on oauthenticator and may be impacted: - jupyterhubutils =0.11.0, =0.9.1, =0.30.1, =0.0.2, =0.4.2 Source cves: CVE-2024-37300 Source advisory: OSV:GHSA-GPRJ-3P75-F996...

Apache Submarine Commons Utils has a hard-coded secret

Improper Authentication vulnerability in Apache Submarine Commons Utils. This issue affects Apache Submarine Commons Utils: from 0.8.0. As this project is retired, we do not plan to release a version that fixes this issue. If the user doesn't explicitly set submarine.auth.default.secret, a defaul...

GHSA-JWCG-WV5X-VG3G Apache Submarine Commons Utils has a hard-coded secret

Improper Authentication vulnerability in Apache Submarine Commons Utils. This issue affects Apache Submarine Commons Utils: from 0.8.0. As this project is retired, we do not plan to release a version that fixes this issue. If the user doesn't explicitly set submarine.auth.default.secret, a defaul...

org.apache.submarine:submarine-all (>=0.4.0, <=0.8.0), org.apache.submarine:submarine-client (>=0.4.0, <=0.8.0) +12 more potentially affected by CVE-2024-36264 via org.apache.submarine:submarine-commons-utils (>=0.4.0, <=0.8.0)

org.apache.submarine:submarine-commons-utils MAVEN version =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.8.0-rc0, =0.4.0, =0.8.0-rc0, =0.8.0-rc0, =0.6.0, =0.8.0 Source cves: CVE-2024-36264 Source advisory: OSV:GHSA-JWCG-WV5X-VG3G...

org.apache.submarine:submarine-all (>=0.4.0, <=0.8.0), org.apache.submarine:submarine-client (>=0.4.0, <=0.8.0) +12 more potentially affected by CVE-2024-36264 via org.apache.submarine:submarine-commons-utils (>=0.4.0, <=0.8.0)

org.apache.submarine:submarine-commons-utils MAVEN version =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.8.0-rc0, =0.4.0, =0.8.0-rc0, =0.8.0-rc0, =0.6.0, =0.8.0 Source cves: CVE-2024-36264 Source advisory: GHSA-JWCG-WV5X-VG3G...

CVE-2024-36264

UNSUPPORTED WHEN ASSIGNED Improper Authentication vulnerability in Apache Submarine Commons Utils. If the user doesn't explicitly set submarine.auth.default.secret, a default value will be used. This issue affects Apache Submarine Commons Utils: from 0.8.0. As this project is retired, we do not...

PYSEC-2024-97

UNSUPPORTED WHEN ASSIGNED Improper Authentication vulnerability in Apache Submarine Commons Utils.This issue affects Apache Submarine Commons Utils: from 0.8.0.As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or...

CVE-2024-36264

UNSUPPORTED WHEN ASSIGNED Improper Authentication vulnerability in Apache Submarine Commons Utils. If the user doesn't explicitly set "submarine.auth.default.secret", a default value will be used. This issue affects Apache Submarine Commons Utils: from 0.8.0. As this project is retired, we do not...