Nick Cleaton

Name of the Vulnerable Software and Affected Versions: PostgreSQL versions prior to 13.1 PostgreSQL versions prior to 12.5 PostgreSQL versions prior to 11.10 PostgreSQL versions prior to 10.15 PostgreSQL versions prior to 9.6.20 PostgreSQL versions prior to 9.5.24 Description: A flaw was found in the psql interactive terminal of PostgreSQL. If an interactive psql session uses `gset` when querying a compromised server, the attacker can execute arbitrary code as the operating system account running psql. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Recommendations: For versions prior to 13.1, update to version 13.1 or later. For versions prior to 12.5, update to version 12.5 or later. For versions prior to 11.10, update to version 11.10 or later. For versions prior to 10.15, update to version 10.15 or later. For versions prior to 9.6.20, update to version 9.6.20 or later. For versions prior to 9.5.24, update to version 9.5.24 or later. As a temporary workaround, consider disabling the use of `gset` in interactive psql sessions until a patch is available.

**Name of the Vulnerable Software and Affected Versions** rssh versions (affected versions not specified) **Description** The issue is related to insufficient sanitization of arguments passed to `rsync`, which can bypass restrictions imposed by `rssh`, a restricted shell. This allows an attacker to execute arbitrary shell commands. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** rsync (affected versions not specified) **Description** The issue is related to insufficient sanitization of environment variables passed to rsync, which can bypass restrictions imposed by rssh, a restricted shell. This allows for the execution of arbitrary shell commands. The vulnerability is associated with errors in input validation. Exploitation can enable a remote attacker to execute arbitrary commands. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Gitolite versions prior to 3.6.11 Description: The issue arises when the .gitolite.rc file enables rsync in Gitolite. In this scenario, Gitolite mishandles the rsync command line, allowing attackers to trigger the use of an option other than -v, -n, -q, or -P, potentially having a negative impact. Recommendations: For versions prior to 3.6.11, update to version 3.6.11 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Safe module versions prior to 2.25 **Description** The issue allows context-dependent attackers to bypass intended access restrictions, specifically those imposed by Safe::reval and Safe::rdo, and inject and execute arbitrary code. This can be achieved through vectors involving implicitly called methods, such as DESTROY and AUTOLOAD, and implicitly blessed objects, which are related to "automagic methods." **Recommendations** For versions prior to 2.25, update to version 2.25 or later to resolve the issue. As a temporary workaround, consider restricting the use of implicitly called methods, such as DESTROY and AUTOLOAD, until a patch is available.

**Name of the Vulnerable Software and Affected Versions** cfengine versions prior to 2.0.8 **Description** The issue is related to a buffer overflow in the net.c file, which allows remote attackers to execute arbitrary code. This occurs when certain packets with modified length values are trusted by the ReceiveTransaction function, which uses a buffer provided by the BusyWithConnection function. **Recommendations** For versions prior to 2.0.8, update to version 2.0.8 or later to resolve the issue.

Name of the Vulnerable Software and Affected Versions: Exim 3 versions prior to 3.36 Exim 4 versions prior to 4.21 Description: The issue is related to a heap-based buffer overflow in the smtp in.c file. This can be exploited by remote attackers who send an invalid HELO or EHLO argument with a large number of spaces, followed by a NULL character and a newline. The argument is not properly trimmed before being appended to the buffer, potentially allowing the execution of arbitrary code. Recommendations: For Exim 3 versions prior to 3.36, update to version 3.36 or later. For Exim 4 versions prior to 4.21, update to version 4.21 or later.