Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CGA-gj2w-9cxp-992v

published 1 year ago

Summary

No summary available.

What to do

Update chainguard trino-plugin-session-property-managers to version 439-r0.
Update wolfi trino-plugin-session-property-managers to version 439-r0.

Affected software

Ecosystem	Vendor	Product	Affected versions
Chainguard	chainguard	trino-plugin-session-property-managers	< 439-r0 Fix: upgrade to 439-r0
Wolfi	wolfi	trino-plugin-session-property-managers	< 439-r0 Fix: upgrade to 439-r0

Original advisory text

CGA-gj2w-9cxp-992v

References

https://lists.apache.org/thread.html/c94bc9649d5109a663b2129371dc45753fbdeacd340... URL
https://lists.apache.org/thread.html/d6ca9439c53374b597f33b7ec180001625597db48ea... URL
https://lists.apache.org/thread.html/r43de02fd4a4f52c4bdeff8c02f09625d83cd047498... URL
https://lists.apache.org/thread.html/956995acee0d8bc046f1df0a55b7fbeb65dd2f82864... URL
https://lists.apache.org/thread.html/r306c0322aa5c0da731e03f3ce9f07f4745c052c6b7... URL
https://lists.apache.org/thread.html/ra41fd0ad4b7e1d675c03a5081a16a6603085a4e37d... URL
https://lists.apache.org/thread.html/ra87ac17410a62e813cba901fdd4e9a674dd53daaf7... URL
https://lists.apache.org/thread.html/rcc029be4edaaf5b8bb85818aab494e16f312fced07... URL
https://lists.apache.org/thread.html/rd2d2493f4f1af6980d265b8d84c857e2b7ab80a46e... URL
https://lists.apache.org/thread.html/rec74f3a94dd850259c730b4ba6f7b6211222b58900... URL
https://lists.apache.org/thread.html/r967953a14e05016bc4bcae9ef3dd92e770181158b4... URL
https://lists.apache.org/thread.html/ra9a139fdc0999750dcd519e81384bc1fe3946f311b... URL
https://lists.apache.org/thread.html/re2028d4d76ba1db3e3c3a722d6c6034e801cc3b309... URL
https://lists.apache.org/thread.html/reee57101464cf7622d640ae013b2162eb864f603ec... URL
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro... URL
http://mail-archives.apache.org/mod_mbox/www-announce/201908.mbox/%3cC628798F-31... URL
https://lists.apache.org/thread.html/1f78f1e32cc5614ec0c5b822ba4bd7fc8e8b5c46c8e... URL
https://lists.apache.org/thread.html/2fd61dc89df9aeab738d2b49f48d42c76f7d53b980b... URL
https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e... URL
https://lists.apache.org/thread.html/r2d5f1d88c39bd615271abda63964a0bee9b2b57fef... URL
https://lists.apache.org/thread.html/racd3e7b2149fa2f255f016bd6bffab0fea77b6fb81... URL
https://lists.apache.org/thread.html/rb8dac04cb7e9cc5dedee8dabaa1c92614f590642e5... URL
https://lists.apache.org/thread.html/r513a7a21c422170318115463b399dd58ab447fe099... URL
https://lists.apache.org/thread.html/02094ad226dbc17a2368beaf27e61d8b1432f5baf77... URL
https://lists.apache.org/thread.html/a684107d3a78e431cf0fbb90629e8559a36ff8fe94c... URL
https://lists.apache.org/thread.html/rb1f76c2c0a4d6efb8a3523974f9d085d5838b73e7b... URL
https://lists.apache.org/thread.html/5261066cd7adee081ee05c8bf0e96cf0b2eeaced391... URL
https://lists.apache.org/thread.html/r18d8b4f9263e5cad3bbaef0cdba0e2ccdf9201316a... URL
https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12e... URL
https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d28... URL
https://lists.apache.org/thread.html/r46e536fc98942dce99fadd2e313aeefe90c1a769c5... URL
https://lists.apache.org/thread.html/rae81e0c8ebdf47ffaa85a01240836bfece8a990c48... URL
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro... URL
https://lists.apache.org/thread.html/re3cd7cb641d7fc6684e4fc3c336a8bad4a01434bb5... URL
https://www.oracle.com/security-alerts/cpujul2022.html URL
https://lists.apache.org/thread.html/r6194ced4828deb32023cd314e31f41c61d388b5893... URL
https://lists.apache.org/thread.html/3d1ed1a1596c08c4d5fea97b36c651ce167b773f1af... URL
https://access.redhat.com/errata/RHSA-2020:0805 Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00007.html Vendor Advisory
https://access.redhat.com/errata/RHSA-2020:0057 Vendor Advisory
https://access.redhat.com/errata/RHSA-2020:0804 Vendor Advisory
https://lists.debian.org/debian-lts-announce/2019/08/msg00030.html Vendor Advisory
https://access.redhat.com/errata/RHSA-2019:4317 Vendor Advisory
https://www.oracle.com/security-alerts/cpujan2020.html Vendor Advisory
https://access.redhat.com/errata/RHSA-2020:0194 Vendor Advisory
https://access.redhat.com/errata/RHSA-2020:0806 Vendor Advisory
https://access.redhat.com/errata/RHSA-2020:0811 Vendor Advisory
https://www.oracle.com/security-alerts/cpuApr2021.html Patch
https://www.oracle.com/security-alerts/cpuapr2022.html Patch
https://www.oracle.com/security-alerts/cpujul2020.html Patch
https://www.oracle.com//security-alerts/cpujul2021.html Patch
https://www.oracle.com/security-alerts/cpujan2021.html Patch
https://www.oracle.com/security-alerts/cpujan2022.html Patch
https://www.oracle.com/security-alerts/cpuapr2020.html Patch
https://www.oracle.com/security-alerts/cpuoct2021.html Patch

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker partial control (estimated)

Severity

7.3 High

Timeline

Published30 Oct 2025

Updated5 Nov 2026

First seen5 Nov 2026

Sources

CGA-gj2w-9cxp-992v · OSV

Track software like this

Free during beta