Log

AVG-1741 edited at 14 Dec 2021 20:03:46
Affected
- 5.10.84-1
+ 5.10.85-1
AVG-1393 edited at 14 Dec 2021 20:01:30
Affected
- 258-1
+ 259-1
CVE-2021-3698 edited at 14 Dec 2021 20:01:12
References
https://bugzilla.redhat.com/show_bug.cgi?id=1992149
https://cockpit-project.org/guide/latest/cert-authentication.html
https://github.com/SSSD/sssd/issues/5224
https://github.com/SSSD/sssd/pull/5852
+ https://github.com/cockpit-project/cockpit/pull/16703
AVG-2643 created at 14 Dec 2021 19:57:23
Packages
+ dotnet-runtime-3.1
Issues
+ CVE-2021-43877
Status
+ Not affected
Severity
+ Low
Affected
+ 3.1.20.sdk120-1
Fixed
Ticket
Advisory qualified
+ No
References
Notes
AVG-2642 edited at 14 Dec 2021 19:57:05
Packages
dotnet-runtime
- dotnet-sdk
Status
- Vulnerable
+ Not affected
Advisory qualified
- Yes
+ No
CVE-2021-43877 edited at 14 Dec 2021 19:56:56
References
- https://msrc.microsoft.com/update-guide/acknowledgement
+ https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-43877
https://github.com/dotnet/announcements/issues/206
AVG-2642 edited at 14 Dec 2021 19:56:46
Severity
- Unknown
+ Low
CVE-2021-43877 edited at 14 Dec 2021 19:56:46
Severity
- Unknown
+ Low
Remote
- Unknown
+ Local
Type
- Unknown
+ Privilege escalation
Description
+ An elevation of privilege vulnerability exists in ANCM in .NET 6.0 before Runtime 6.0.1 as well as .NET Core 3.1 before Runtime 3.1.22.
References
+ https://msrc.microsoft.com/update-guide/acknowledgement
+ https://github.com/dotnet/announcements/issues/206
Notes
AVG-2642 edited at 14 Dec 2021 19:52:56
Packages
+ dotnet-runtime
dotnet-sdk
AVG-2642 created at 14 Dec 2021 19:52:45
Packages
+ dotnet-sdk
Issues
+ CVE-2021-43877
Status
+ Vulnerable
Severity
+ Unknown
Affected
+ 6.0.0.sdk100-2
Fixed
Ticket
Advisory qualified
+ Yes
References
Notes
CVE-2021-43877 created at 14 Dec 2021 19:52:45
AVG-2626 edited at 14 Dec 2021 19:49:49
Issues
CVE-2021-44228
- CVE-2021-45046