Fedora Project Extra Packages For Enterprise Linux 7.0

The Mock software contains a vulnerability wherein an attacker could potentially exploit privilege escalation, enabling the execution of arbitrary code with root user privileges. This weakness stems from the absence of proper sandboxing during the expansion and execution of Jinja2 templates, which may be included in certain configuration parameters. While the Mock documentation advises treating users added to the mock group as privileged, certain build systems invoking mock on behalf of users might inadvertently permit less privileged users to define configuration tags. These tags could then be passed as parameters to mock during execution, potentially leading to the utilization of Jinja2 templates for remote privilege escalation and the execution of arbitrary code as the root user on the build server.

Published: 2024-01-16T14:33:02.308Z
Updated: 2025-02-13T17:26:22.188Z

Separate Groups mode restrictions were not honoured in the forum summary report, which would display users from other groups.

Published: 2023-11-09T19:39:11.940Z
Updated: 2024-09-04T13:24:24.392Z

In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user who also has direct access to the web server outside of the Moodle webroot could utilise a local file include to achieve remote code execution.

Published: 2023-11-09T19:38:08.611Z
Updated: 2024-08-02T07:59:44.743Z

Insufficient web service capability checks made it possible to move categories a user had permission to manage, to a parent category they did not have the capability to manage.

Published: 2023-11-09T19:37:15.856Z
Updated: 2024-08-02T07:59:44.965Z

Stronger revision number limitations were required on file serving endpoints to improve cache poisoning protection.

Published: 2023-11-09T19:36:18.676Z
Updated: 2024-08-02T07:59:44.808Z

H5P metadata automatically populated the author with the user's username, which could be sensitive information.

Published: 2023-11-09T19:33:18.127Z
Updated: 2024-08-02T07:59:44.795Z

When duplicating a BigBlueButton activity, the original meeting ID was also duplicated instead of using a new ID for the new activity. This could provide unintended access to the original meeting.

Published: 2023-11-09T21:35:38.116Z
Updated: 2024-08-02T07:59:44.863Z

Students in "Only see own membership" groups could see other students in the group, which should be hidden.

Published: 2023-11-09T19:27:38.733Z
Updated: 2024-08-02T07:59:44.790Z

A remote code execution risk was identified in the IMSCP activity. By default this was only available to teachers and managers.

Published: 2023-11-09T19:15:53.821Z
Updated: 2024-08-02T07:59:44.894Z

A remote code execution risk was identified in the Lesson activity. By default this was only available to teachers and managers.

Published: 2023-11-09T19:11:06.859Z
Updated: 2024-09-03T18:29:00.544Z

Exim before 4.97.1 allows SMTP smuggling in certain PIPELINING/CHUNKING configurations. Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass of an SPF protection mechanism. This occurs because Exim supports <LF>.<CR><LF> but some other popular e-mail servers do not.

Published: 2023-12-24T00:00:00.000Z
Updated: 2025-11-04T18:21:35.998Z

The vulnerability was found Moodle which exists due to insufficient sanitization of user-supplied data in external Wiki method for listing pages. A remote attacker can send a specially crafted request to the affected application and execute limited SQL commands within the application database.

Published: 2023-05-02T00:00:00.000Z
Updated: 2024-08-02T14:37:15.570Z

The vulnerability was found Moodle which exists because the application allows a user to control path of the older to create in TinyMCE loaders. A remote user can send a specially crafted HTTP request and create arbitrary folders on the system.

Published: 2023-05-02T00:00:00.000Z
Updated: 2024-08-02T14:37:15.692Z

A blind Server-Side Request Forgery (SSRF) vulnerability was found in Moodle. This flaw exists due to insufficient validation of user-supplied input in LTI provider library. The library does not utilise Moodle's inbuilt cURL helper, which resulted in a blind SSRF risk. An attacker can send a specially crafted HTTP request and trick the application to initiate requests to arbitrary systems. This vulnerability allows a remote attacker to perform SSRF attacks.

Published: 2022-11-25T00:00:00.000Z
Updated: 2025-04-29T14:22:36.364Z

The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows a panic via long scalar input.

Published: 2022-04-20T00:00:00.000Z
Updated: 2024-08-03T05:48:38.092Z

client_golang is the instrumentation library for Go applications in Prometheus, and the promhttp package in client_golang provides tooling around HTTP servers and clients. In client_golang prior to version 1.11.1, HTTP server is susceptible to a Denial of Service through unbounded cardinality, and potential memory exhaustion, when handling requests with non-standard HTTP methods. In order to be affected, an instrumented software must use any of `promhttp.InstrumentHandler*` middleware except `RequestsInFlight`; not filter any specific methods (e.g GET) before middleware; pass metric with `method` label name to our middleware; and not have any firewall/LB/proxy that filters away requests with unknown `method`. client_golang version 1.11.1 contains a patch for this issue. Several workarounds are available, including removing the `method` label name from counter/gauge used in the InstrumentHandler; turning off affected promhttp handlers; adding custom middleware before promhttp handler that will sanitize the request method given by Go http.Request; and using a reverse proxy or web application firewall, configured to only allow a limited set of methods.

Published: 2022-02-15T00:00:00.000Z
Updated: 2025-04-23T19:05:16.614Z

An SQL injection risk was identified in Badges code relating to configuring criteria. Access to the relevant capability was limited to teachers and managers by default.

Published: 2022-03-25T18:03:07.000Z
Updated: 2024-08-02T23:47:42.821Z

A flaw was found in keepass. The vulnerability occurs due to logging the plain text passwords in system log and leads to an Information Exposure vulnerability. This flaw allows an attacker to interact and read sensitive passwords and logs.

Published: 2022-03-07T14:00:21.000Z
Updated: 2024-08-02T23:40:03.535Z

Cross-site Scripting (XSS) - Reflected in GitHub repository phoronix-test-suite/phoronix-test-suite prior to 10.8.2.

Published: 2022-02-13T11:00:11.000Z
Updated: 2024-08-02T23:32:46.350Z

A missing bounds check in the image loader used in Blender 3.x and 2.93.8 leads to out-of-bounds heap access, allowing an attacker to cause denial of service, memory corruption or potentially code execution.

Published: 2022-02-24T18:27:17.000Z
Updated: 2024-08-02T23:32:45.994Z

A heap-based buffer overflow flaw was found in libmodbus in function modbus_reply() in src/modbus.c.

Published: 2022-08-29T14:03:05.000Z
Updated: 2025-11-03T20:34:24.383Z

In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually authenticating the client and (in the case of EAP methods with mutual authentication and EAP-only authentication for IKEv2) even without server authentication.

Published: 2022-01-31T07:15:52.000Z
Updated: 2024-08-04T04:32:13.673Z

A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. Insufficient capability checks made it possible to fetch other users' calendar action events.

Published: 2021-11-22T16:00:22.000Z
Updated: 2024-08-04T04:03:08.485Z

A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. The "delete related badge" functionality did not include the necessary token check to prevent a CSRF risk.

Published: 2021-11-22T16:00:05.000Z
Updated: 2024-08-04T04:03:08.286Z

A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. A URL parameter in the filetype site administrator tool required extra sanitizing to prevent a reflected XSS risk.

Published: 2021-11-22T15:59:46.000Z
Updated: 2024-08-04T04:03:07.933Z

There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects to, could trigger a Regular Expression Denial of Service (ReDOS) during an authentication request with a specially crafted payload that is sent by the server to the client. The greatest threat that this flaw poses is to application availability.

Published: 2022-03-07T00:00:00.000Z
Updated: 2025-11-03T21:45:06.299Z

In Plib through 1.85, there is an integer overflow vulnerability that could result in arbitrary code execution. The vulnerability is found in ssgLoadTGA() function in src/ssg/ssgLoadTGA.cxx file.

Published: 2021-08-24T13:57:43.000Z
Updated: 2024-08-04T01:51:20.102Z

This affects the package celery before 5.2.2. It by default trusts the messages and metadata stored in backends (result stores). When reading task metadata from the backend, the data is deserialized. Given that an attacker can gain access to, or somehow manipulate the metadata within a celery backend, they could trigger a stored command injection vulnerability and potentially gain further access to the system.

Published: 2021-12-29T16:35:11.896Z
Updated: 2024-09-16T20:53:22.597Z

A code execution vulnerability exists in the DL_Dxf::handleLWPolylineData functionality of Ribbonsoft dxflib 3.17.0. A specially-crafted .dxf file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.

Published: 2021-09-08T15:11:27.000Z
Updated: 2024-08-03T18:30:22.865Z

An issue was discovered in Pure-FTPd 1.0.49. An uninitialized pointer vulnerability has been detected in the diraliases linked list. When the *lookup_alias(const char alias) or print_aliases(void) function is called, they fail to correctly detect the end of the linked list and try to access a non-existent list member. This is related to init_aliases in diraliases.c.

Published: 2020-02-26T15:29:32.000Z
Updated: 2024-08-04T10:26:16.271Z

Cacti 1.2.8 has stored XSS in data_sources.php, color_templates_item.php, graphs.php, graph_items.php, lib/api_automation.php, user_admin.php, and user_group_admin.php, as demonstrated by the description parameter in data_sources.php (a raw string from the database that is displayed by $header to trigger the XSS).

Published: 2020-01-16T03:55:12.000Z
Updated: 2024-08-04T09:18:03.119Z

There's a flaw in openjpeg's t2 encoder in versions prior to 2.4.0. An attacker who is able to provide crafted input to be processed by openjpeg could cause a null pointer dereference. The highest impact of this flaw is to application availability.

Published: 2021-01-05T17:21:40.000Z
Updated: 2024-08-04T16:25:43.575Z

A flaw was found in the check_chunk_name() function of pngcheck-2.4.0. An attacker able to pass a malicious file to be processed by pngcheck could cause a temporary denial of service, posing a low risk to application availability.

Published: 2020-12-08T00:04:55.000Z
Updated: 2024-08-04T16:25:43.451Z

An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block (TRB) Ring. This flaw allows a privileged guest user to hang the QEMU process on the host, resulting in a denial of service.

Published: 2022-08-17T00:00:00.000Z
Updated: 2024-08-04T12:46:34.221Z