A vulnerability has been found in NYUCCL psiTurk up to 3.2.0 and classified as critical. This vulnerability affects unknown code of the file psiturk/experiment.py. The manipulation of the argument mode leads to improper neutralization of special elements used in a template engine. The exploit has been disclosed to the public and may be used. Upgrading to version 3.2.1 is able to address this issue. The name of the patch is 47787e15cecd66f2aa87687bf852ae0194a4335f. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-219676.
Daily Archives: January 28, 2023
bind-9.16.37-1.fc36 bind-dyndb-ldap-11.9-21.fc36
FEDORA-2023-a3d608daf4
Packages in this update:
bind-9.16.37-1.fc36
bind-dyndb-ldap-11.9-21.fc36
Update description:
rust-exa-0.10.1-9.el9 rust-pore-0.1.8-2.el9 rust-resctl-bench-2.1.2-8.el9 rust-resctl-demo-2.1.2-8.el9
FEDORA-EPEL-2023-b7a22b9abd
Packages in this update:
rust-exa-0.10.1-9.el9
rust-pore-0.1.8-2.el9
rust-resctl-bench-2.1.2-8.el9
rust-resctl-demo-2.1.2-8.el9
Update description:
This update contains rebuilds of all Rust applications against versions of the libgit2-sys crate that ship fixes for CVE-2022-24765 and CVE-2022-29187 in the bundled copies of libgit2.
Updates pore to 0.1.8
Speed up update_remote_refs
Fall back to /etc/pore.toml if it exists.
rust-bat-0.21.0-6.fc36 rust-cargo-c-0.9.12-3.fc36 rust-exa-0.10.1-9.fc36 rust-git-delta-0.13.0-4.fc36 rust-gitui-0.20.1-6.fc36 rust-pore-0.1.8-2.fc36 rust-pretty-git-prompt-0.2.1-15.fc36 rust-rd-agent-2.1.2-7.fc36 rust-rd-hashd-2.1.2-7.fc36 rust-resctl-bench-2.1.2-8.fc36 rust-resctl-demo-2.1.2-8.fc36 rust-silver-2.0.1-4.fc36 rust-tokei-12.1.2-4.fc36
FEDORA-2023-3ec32f6d4e
Packages in this update:
rust-bat-0.21.0-6.fc36
rust-cargo-c-0.9.12-3.fc36
rust-exa-0.10.1-9.fc36
rust-git-delta-0.13.0-4.fc36
rust-gitui-0.20.1-6.fc36
rust-pore-0.1.8-2.fc36
rust-pretty-git-prompt-0.2.1-15.fc36
rust-rd-agent-2.1.2-7.fc36
rust-rd-hashd-2.1.2-7.fc36
rust-resctl-bench-2.1.2-8.fc36
rust-resctl-demo-2.1.2-8.fc36
rust-silver-2.0.1-4.fc36
rust-tokei-12.1.2-4.fc36
Update description:
This update contains rebuilds of all Rust applications against versions of the libgit2-sys crate that ship fixes for CVE-2022-24765 and CVE-2022-29187 in the bundled copies of libgit2.
Updates pore to 0.1.8
Speed up update_remote_refs
Fall back to /etc/pore.toml if it exists.
rust-bat-0.21.0-6.fc37 rust-cargo-c-0.9.12-3.fc37 rust-exa-0.10.1-9.fc37 rust-git-delta-0.13.0-4.fc37 rust-gitui-0.20.1-6.fc37 rust-pore-0.1.8-2.fc37 rust-pretty-git-prompt-0.2.1-15.fc37 rust-rd-agent-2.1.2-7.fc37 rust-rd-hashd-2.1.2-7.fc37 rust-resctl-bench-2.1.2-8.fc37 rust-resctl-demo-2.1.2-8.fc37 rust-silver-2.0.1-4.fc37 rust-tokei-12.1.2-4.fc37
FEDORA-2023-e3c8abd37e
Packages in this update:
rust-bat-0.21.0-6.fc37
rust-cargo-c-0.9.12-3.fc37
rust-exa-0.10.1-9.fc37
rust-git-delta-0.13.0-4.fc37
rust-gitui-0.20.1-6.fc37
rust-pore-0.1.8-2.fc37
rust-pretty-git-prompt-0.2.1-15.fc37
rust-rd-agent-2.1.2-7.fc37
rust-rd-hashd-2.1.2-7.fc37
rust-resctl-bench-2.1.2-8.fc37
rust-resctl-demo-2.1.2-8.fc37
rust-silver-2.0.1-4.fc37
rust-tokei-12.1.2-4.fc37
Update description:
This update contains rebuilds of all Rust applications against versions of the libgit2-sys crate that ship fixes for CVE-2022-24765 and CVE-2022-29187 in the bundled copies of libgit2.
Updates pore to 0.1.8
Speed up update_remote_refs
Fall back to /etc/pore.toml if it exists.
bind-9.18.11-1.fc37 bind-dyndb-ldap-11.10-10.fc37
FEDORA-2023-95d98f89a8
Packages in this update:
bind-9.18.11-1.fc37
bind-dyndb-ldap-11.10-10.fc37
Update description:
bind-9.18.11-1.fc38 bind-dyndb-ldap-11.10-11.fc38
FEDORA-2023-f1accd4b37
Packages in this update:
bind-9.18.11-1.fc38
bind-dyndb-ldap-11.10-11.fc38
Update description:
DSA-5331 openjdk-11 – security update
Several vulnerabilities have been discovered in the OpenJDK Java runtime,
which may result in denial of service or spoofing.