CVE-2024-9367

CVE-2024-9367 affects GitLab CE/EE: all versions starting from 13.9 before 17.4.6, 17.5 before 17.5.4, and 17.6 before 17.6.2. It allows an attacker to trigger uncontrolled CPU consumption while parsing changelog templates, potentially causing a Denial of Service (DoS). Connected documents confir...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-thunderbird-128.5.2esr-i686-1slack15.0.txz: Upgraded. This release contains security fixes and improvements. For...

Malicious code in vue-cli-plugin-changelog (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11486 Malicious code in vue-cli-plugin-changelog (npm)

--- -= Per source details. Do not edit below this line.=-...

Fedora 38 : python3.6 (2022-3bc8e7f017)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-3bc8e7f017 advisory. Automatic update for python3.6-3.6.15-13.fc38. Changelog Wed Oct 5 2022 Victor Stinner - 3.6.15-13 - Prevent denial of service DoS by very large integers...

Fedora 41 : python-mechanicalsoup (2024-45b02f63e4)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-45b02f63e4 advisory. Automatic update for python-mechanicalsoup-1.3.0-1.fc41. Changelog Sun Apr 7 2024 Fabian Affolter - 1.3.0-1 - Update to latest upstream version 1.3.0 closes...

Fedora 41 : mingw-libxml2 (2024-6ac71752a4)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-6ac71752a4 advisory. Automatic update for mingw-libxml2-2.12.7-1.fc41. Changelog Thu May 16 2024 Richard W.M. Jones - 2.12.7-1 - Update to 2.12.7 RHBZ2280535, CVE-2024-34459...

Fedora 41 : golang-github-quic (2024-62fc2aa0aa)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-62fc2aa0aa advisory. Automatic update for golang-github-quic-0.42.0-1.fc41. Changelog Sat Mar 23 2024 Mikel Olasagasti Uranga - 0.42.0-1 - Update to 0.42.0 - Closes rhbz2240724...

Fedora 37 : pcs (2022-28e171f780)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-28e171f780 advisory. Automatic update for pcs-0.11.3-1.fc37. Changelog Tue Jun 28 2022 Miroslav Lisik - 0.11.3-1 - Rebased to latest upstream sources see CHANGELOG.md - Updated...

Fedora 37 : openssl1.1 (2022-eaec96bb34)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-eaec96bb34 advisory. Automatic update for openssl1.1-1.1.1p-1.fc37. Changelog Thu Jun 30 2022 Clemens Lang - 1:1.1.1p-1 - Upgrade to 1.1.1p Resolves: CVE-2022-2068 Related:...

Fedora 36 : qemu (2022-d73cfd3a36)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-d73cfd3a36 advisory. Automatic update for qemu-6.2.0-4.fc36.1. Changelog Wed Feb 9 2022 Eduardo Lima Etrunko - 2:6.2.0-4 - virtiofsd: Drop membership of all supplementar...

Fedora 41 : cjson (2024-ef33631a3c)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-ef33631a3c advisory. Automatic update for cjson-1.7.17-1.fc41. Changelog Sun Apr 7 2024 Fabian Affolter - 1.7.17.-1 - Update to latest upstream version 1.7.17 closes rhbz2255953 ...

Fedora 37 : plib (2022-89c22f2ea9)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-89c22f2ea9 advisory. Automatic update for plib-1.8.5-30.fc37. Changelog Fri May 13 2022 Hans de Goede - 1.8.5-30 - Add 3 patches from Debian - Fixes CVE-2021-38714 rhbz1997815...

Fedora 37 : plantuml (2022-5f32512090)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-5f32512090 advisory. Automatic update for plantuml-1.2022.4-1.fc37. Changelog Mon Apr 18 2022 Sandipan Roy - 1:1.2022.4-1 - Updated version to 1.2022.4 - Added fix for...

Fedora 38 : qpress (2022-9172acadf8)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-9172acadf8 advisory. Automatic update for qpress-20220819-1.fc38. Changelog Fri Nov 25 2022 Davide Cavalca 20220819-1 - Switch to new upstream and update to 20220819...

Fedora 41 : golang-uber-mock (2024-ec60f79b80)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-ec60f79b80 advisory. Automatic update for golang-uber-mock-0.4.0-1.fc41. Changelog Sat Mar 23 2024 Mikel Olasagasti Uranga - 0.4.0-1 - Update to 0.4.0 - Closes rhbz2271191...

Fedora 38 : python-engineio (2022-8ca9330e57)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-8ca9330e57 advisory. Automatic update for python-engineio-4.3.4-2.fc38. Changelog Thu Sep 15 2022 Benjamin A. Beasley 4.3.4-2 - Dont ship package-lock.json files with the example...

Fedora 41 : golang-github-acme-lego (2024-f6f91d983c)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-f6f91d983c advisory. Automatic update for golang-github-acme-lego-4.17.4-4.fc41. Changelog Mon Jul 29 2024 Mikel Olasagasti Uranga - 4.17.4-4 - Update to 4.17.4 - Closes...

Fedora 37 : rubygem-rails-html-sanitizer (2022-9cd3e3a570)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-9cd3e3a570 advisory. Automatic update for rubygem-rails-html-sanitizer-1.4.3-1.fc37. Changelog Fri Aug 5 2022 Vt Ondruch - 1.4.3-1 - Update to rails-html-sanitizer 1.4.3. Resolve...

WordPress Database Scanning For Malware Released in Wordfence CLI 5.0.1

Today we’re excited to announce the recent release of Wordfence CLI version 5.0.1 which includes a much requested feature from security analysts, hosting providers and ops teams: Database scanning for WordPress. Now you can scan any WordPress database you have access to for malware and...