CLSA-2024-1711563079 Update of zlib

Rebuild with dist .el79...

firefox security update

115.9.1-1.0.1 - Remove upstream references Orabug: 30143292 - Update distribution for Oracle Linux Orabug: 30143292 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 115.9.1-1 - Update to 115.9.1 115.9.0-2 - Update to 115.9.0 build2 115.9.0-1 - Update to 115.9.0 buil...

AndroxGh0st Malware Targets Laravel Apps to Steal Cloud Credentials

Cybersecurity researchers have shed light on a tool referred to as AndroxGh0st that's used to target Laravel applications and steal sensitive data. "It works by scanning and taking out important information from .env files, revealing login details linked to AWS and Twilio," Juniper Threat Labs...

The Updated APT Playbook: Tales from the Kimsuky threat actor group

Co-authors are Christiaan Beek and Raj Samani Within Rapid7 Labs we continually track and monitor threat groups. This is one of our key areas of focus as we work to ensure that our ability to protect customers remains constant. As part of this process, we routinely identify evolving tactics from...

UBUNTU-CVE-2024-28231

eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.14.0, 2.13.4, 2.12.3, 2.10.4, and 2.6.8, manipulated DATA Submessage can cause a heap overflow error in the Fast-DDS process, causing the process to be terminate...

CVE-2024-28231 Manipulated DATA Submessage causes a heap-buffer-overflow error

eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.14.0, 2.13.4, 2.12.3, 2.10.4, and 2.6.8, manipulated DATA Submessage can cause a heap overflow error in the Fast-DDS process, causing the process to be terminate...

CVE-2024-28231

eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.14.0, 2.13.4, 2.12.3, 2.10.4, and 2.6.8, manipulated DATA Submessage can cause a heap overflow error in the Fast-DDS process, causing the process to be terminate...

CVE-2024-28231 Manipulated DATA Submessage causes a heap-buffer-overflow error

eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.14.0, 2.13.4, 2.12.3, 2.10.4, and 2.6.8, manipulated DATA Submessage can cause a heap overflow error in the Fast-DDS process, causing the process to be terminate...

Hitachi Ops Center Common Services DoS

The vulnerability of the software for managing, monitoring, configuring, and automating IT infrastructure of the Hitachi Ops Center Common Services is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

org.apache.cxf:apache-cxf (2.1), org.apache.cxf:cxf-anttasks (2.1) +8 more potentially affected by CVE-2024-28752 via org.apache.cxf:cxf-rt-databinding-aegis (2.1)

org.apache.cxf:cxf-rt-databinding-aegis MAVEN version 2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-databinding-aegis and may be impacted: - org.apache.cxf:apache-cxf 2.1 - org.apache.cxf:cxf-anttasks 2.1 -...

org.apache.cxf:apache-cxf (2.1.6), org.apache.cxf:cxf-anttasks (2.1.6) +6 more potentially affected by CVE-2024-28752 via org.apache.cxf:cxf-rt-databinding-aegis (2.1.6)

org.apache.cxf:cxf-rt-databinding-aegis MAVEN version 2.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-databinding-aegis and may be impacted: - org.apache.cxf:apache-cxf 2.1.6 - org.apache.cxf:cxf-anttasks 2.1.6 -...

org.apache.camel:camel-cxf (2.4.0), org.apache.camel:camel-example-cxf (2.4.0) +31 more potentially affected by CVE-2024-28752 via org.apache.cxf:cxf-rt-databinding-aegis (2.2.9)

org.apache.cxf:cxf-rt-databinding-aegis MAVEN version 2.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-databinding-aegis and may be impacted: - org.apache.camel:camel-cxf 2.4.0 - org.apache.camel:camel-example-cxf 2.4.0 -...

org.apache.cxf.systests:cxf-systests-databinding (2.5.10), org.apache.cxf.systests:cxf-systests-jaxrs (2.5.10) +9 more potentially affected by CVE-2024-28752 via org.apache.cxf:cxf-rt-databinding-aegis (2.5.10)

org.apache.cxf:cxf-rt-databinding-aegis MAVEN version 2.5.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-databinding-aegis and may be impacted: - org.apache.cxf.systests:cxf-systests-databinding 2.5.10 -...

org.apache.cxf.systests:cxf-systests-databinding (2.7.11), org.apache.cxf.systests:cxf-systests-jaxrs (2.7.11) +9 more potentially affected by CVE-2024-28752 via org.apache.cxf:cxf-rt-databinding-aegis (2.7.11)

org.apache.cxf:cxf-rt-databinding-aegis MAVEN version 2.7.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-databinding-aegis and may be impacted: - org.apache.cxf.systests:cxf-systests-databinding 2.7.11 -...

org.apache.cxf.systests:cxf-systests-databinding (2.2.7), org.apache.cxf.systests:cxf-systests-jaxrs (2.2.7) +8 more potentially affected by CVE-2024-28752 via org.apache.cxf:cxf-rt-databinding-aegis (2.2.7)

org.apache.cxf:cxf-rt-databinding-aegis MAVEN version 2.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-databinding-aegis and may be impacted: - org.apache.cxf.systests:cxf-systests-databinding 2.2.7 -...

Siemens SENTRON 3KC ATC6 Ethernet Module Hidden Function Vulnerability

The Siemens SENTRON 3KC ATC6 Expansion Module is a power distribution protection device from Siemens, Germany, for monitoring and protecting power systems. A hidden function vulnerability exists in the Siemens SENTRON 3KC ATC6 Ethernet Module due to affected devices exposing unused and unstable...

com.datastax.oss:pulsar-jms-filters (>=4.0.0, <=4.0.1), io.github.yangl:pulsar-msg-filter-plugin (3.0) +6 more potentially affected by CVE-2024-27135 via org.apache.pulsar:pulsar-functions-worker (>=3.0.0, <=3.0.2)

org.apache.pulsar:pulsar-functions-worker MAVEN version =3.0.0, =4.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.2 Source cves: CVE-2024-27135 Source advisory: OSV:GHSA-XP2R-G8QQ-44HH...

org.apache.pulsar:pulsar-server-distribution (>=3.0.0, <=3.0.1) potentially affected by CVE-2022-34321 via org.apache.pulsar:pulsar-proxy (>=3.0.0, <=3.0.1)

org.apache.pulsar:pulsar-proxy MAVEN version =3.0.0, =3.0.0, =3.0.1 Source cves: CVE-2022-34321 Source advisory: OSV:GHSA-C35H-W8HJ-MM55...

org.apache.pulsar:pulsar-server-distribution (>=2.11.0, <=2.11.2) potentially affected by CVE-2022-34321 via org.apache.pulsar:pulsar-proxy (>=2.11.0, <=2.11.2)

org.apache.pulsar:pulsar-proxy MAVEN version =2.11.0, =2.11.0, =2.11.2 Source cves: CVE-2022-34321 Source advisory: OSV:GHSA-C35H-W8HJ-MM55...

org.apache.pulsar:pulsar-docker-image (>=2.6.0, <=2.7.5), org.apache.pulsar:pulsar-server-distribution (>=2.6.0, <=2.10.5) potentially affected by CVE-2022-34321 via org.apache.pulsar:pulsar-proxy (>=2.6.0, <=2.10.5)

org.apache.pulsar:pulsar-proxy MAVEN version =2.6.0, =2.6.0, =2.6.0, =2.10.5 Source cves: CVE-2022-34321 Source advisory: OSV:GHSA-C35H-W8HJ-MM55...