SUSE SLES16 Security Update : aliyun-cli (SUSE-SU-2026:24261-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:24261-1 advisory. This update for aliyun-cli fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDic...

openSUSE 16 Security Update : aliyun-cli (openSUSE-SU-2026:22140-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:22140-1 advisory. This update for aliyun-cli fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict allows an...

Security update for aliyun-cli (important)

openSUSE security update: security update for aliyun-cli ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22140-1 Rating: important References: bsc1283596 bsc1284203 Cross-References: CVE-2026-63209 CVSS scores: CVE-2026-63209 SUSE : 7.5...

OPENSUSE-SU-2026:22140-1 Security update for aliyun-cli

This update for aliyun-cli fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict allows an attacker to bypass repeat index validation and cause a process crash bsc1283596. Changes for aliyun-cli: - Update to version 3.5.1 Add opt-in...

SUSE-SU-2026:24261-1 Security update for aliyun-cli

This update for aliyun-cli fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict allows an attacker to bypass repeat index validation and cause a process crash bsc1283596. Changes for aliyun-cli: - Update to version 3.5.1 Add opt-in...

aliyun-cli-3.5.1-2.1 on GA media (moderate)

aliyun-cli-3.5.1-2.1 on GA media Announcement ID: openSUSE-SU-2026:11953-1 Rating: moderate Cross-References: CVE-2026-63209 CVSS scores: CVE-2026-63209 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-63209 SUSE : 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:...

OPENSUSE-SU-2026:11953-1 aliyun-cli-3.5.1-2.1 on GA media

These are all security issues fixed in the aliyun-cli-3.5.1-2.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-105662

These are all security issues fixed in the aliyun-cli-3.5.1-2.1 package on the GA media of openSUSE Tumbleweed...

Rocky Linux 9.2 [CIQ] Security Update: fence-agents-aliyun / fence-agents-all / fence-agents-amt-ws / etc Multiple Vulnerabilities (ciqsa-2026_0411)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260411 advisory. This advisory aggregates security fixes for the fence-agents SRPM in CIQ LTS 9.2. It addresses 10 CVEs: CVE-2023-52323, CVE-2023-45803, CVE-2024-34064,...

Rocky Linux 8.6 [CIQ] Security Update: fence-agents-aliyun / fence-agents-aliyun-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0040)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260040 advisory. This advisory aggregates security fixes for the fence-agents SRPM in CIQ LTS 8.6. It addresses 9 CVEs: CVE-2023-52323, CVE-2023-45803, CVE-2024-34064,...

Rocky Linux 9.4 [CIQ] Security Update: fence-agents-aliyun / fence-agents-all / fence-agents-amt-ws / etc Multiple Vulnerabilities (ciqsa-2026_0527)

The Rocky Linux 9.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260527 advisory. This advisory aggregates security fixes for the fence-agents SRPM in CIQ LTS 9.4. It addresses 2 CVEs: CVE-2024-56201, CVE-2024-56326. Tenable has...

CVE-2026-19339

A security flaw has been discovered in aliyun alibabacloud-dataworks-mcp-server up to 1.0.43. The impacted element is the function ReadResourceRequestSchema of the file src/resources/initResources.ts. The manipulation of the argument request.params.uri results in server-side request forgery. The...

CVE-2026-19339: Server-Side Request Forgery (SSRF)

A security flaw has been discovered in aliyun alibabacloud-dataworks-mcp-server up to 1.0.43. The impacted element is the function ReadResourceRequestSchema of the file src/resources/initResources.ts. The manipulation of the argument request.params.uri results in server-side request forgery. The...

Malicious code in luluking3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a95cec14b778c5a61008305c1a4ee8155f777dbe02b6ae5cff25748584105ee On npm install, the package's postinstall hook runs index.js, which reconstructs a URL and shell command from String.fromCharCode char-code arrays...

MAL-2026-12399 Malicious code in luluking3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a95cec14b778c5a61008305c1a4ee8155f777dbe02b6ae5cff25748584105ee On npm install, the package's postinstall hook runs index.js, which reconstructs a URL and shell command from String.fromCharCode char-code arrays...

MAL-2026-12398 Malicious code in luluking2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 495a71c4dcddec545026181c7faeef59cf4c79b4816a148fb88c59c5465e8c97 On npm install, the package's postinstall hook runs index.js, which reconstructs a URL from a char-code array String.fromCharCode.apply on a numeric...

Malicious code in python-aliyun-sdk-kms (PyPI)

Source: checkmarx 53bdcdc5414f25435cd821a9217982c4b486c91100caa324a9c3613d4ccd8d42 Malicious Typosquatting packages campaign targeting developers, steals cloud service credentials Source: google-open-source-security 4b0a37d9408528e981948fc9fa594b68b02980adbd851742fd03422ff814a7d7 Attack targeted ...

Malicious code in python-aliyun-sdk-core (PyPI)

Source: checkmarx 63f6387d6bfe7ae582be4478cf6a42a8104b44ea50b22489f5217ba2bfb3ce39 Malicious Typosquatting packages campaign targeting developers, steals cloud service credentials Source: google-open-source-security 100a505969357acd1d756a9df7eeb9150e1ffa1044b22cd739c11aab0b6c5d92 Attack targeted ...

Malicious code in python-aliyun-sdk-rds (PyPI)

Source: checkmarx 56906386c88b620607253fc1d00a6d5d205c6a535a2ba12fc63108f09761300b Malicious Typosquatting packages campaign targeting developers, steals cloud service credentials Source: google-open-source-security fad9f833ea9884cd2de7c1e26977adb4c84c650ad954cbfa25b0af0aef09eeee Attack targeted ...

Malicious code in python-aliyun-sdk-ecs (PyPI)

Source: checkmarx fcb822b0528f2cbde54bd2197ed8c774dda8cafc7c3e9ae5aff56465e7c6c72c Malicious Typosquatting packages campaign targeting developers, steals cloud service credentials Source: google-open-source-security 68fc577518eac5e23447df7ccb71f78c102fb3277d85b6d868db42ab2414fe4b Attack targeted ...