io.quarkiverse.cxf:quarkus-cxf-deployment (1.1.0), io.quarkiverse.cxf:quarkus-cxf-integration-tests (1.1.0) potentially affected by CVE-2024-9621 via io.quarkiverse.cxf:quarkus-cxf (1.1.0)

io.quarkiverse.cxf:quarkus-cxf MAVEN version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkiverse.cxf:quarkus-cxf and may be impacted: - io.quarkiverse.cxf:quarkus-cxf-deployment 1.1.0 - io.quarkiverse.cxf:quarkus-cxf-integration-tests...

io.quarkiverse.cxf:quarkus-cxf-deployment (1.2.0), io.quarkiverse.cxf:quarkus-cxf-integration-tests (1.2.0) potentially affected by CVE-2024-9621 via io.quarkiverse.cxf:quarkus-cxf (1.2.0)

io.quarkiverse.cxf:quarkus-cxf MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkiverse.cxf:quarkus-cxf and may be impacted: - io.quarkiverse.cxf:quarkus-cxf-deployment 1.2.0 - io.quarkiverse.cxf:quarkus-cxf-integration-tests...

io.quarkiverse.cxf:quarkus-cxf-deployment (1.4.0), io.quarkiverse.cxf:quarkus-cxf-integration-tests (1.4.0) potentially affected by CVE-2024-9621 via io.quarkiverse.cxf:quarkus-cxf (1.4.0)

io.quarkiverse.cxf:quarkus-cxf MAVEN version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkiverse.cxf:quarkus-cxf and may be impacted: - io.quarkiverse.cxf:quarkus-cxf-deployment 1.4.0 - io.quarkiverse.cxf:quarkus-cxf-integration-tests...

Malicious Package

Overview sdk-integration-tests is a malicious package. This package contains malicious code that collects sensitive information about the victim and sends it to the attacker's remote server. While this package might be attempting to impersonate a valid organization, there is no connection between...

SUSE CVE-2024-41092

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Fix potential UAF by revoke of fence registers CI has been sporadically reporting the following issue triggered by igt@i915selftest@live@hangcheck on ADL-P and similar machines: 414.049203 i915: Running...

PYSEC-2024-322

JupyterLab extension template is a copier template for JupyterLab extensions. Repositories created using this template with test option include update-integration-tests.yml workflow which has an RCE vulnerability. Extension authors hosting their code on GitHub are urged to upgrade the template to...

PYSEC-2024-322

JupyterLab extension template is a copier template for JupyterLab extensions. Repositories created using this template with test option include update-integration-tests.yml workflow which has an RCE vulnerability. Extension authors hosting their code on GitHub are urged to upgrade the template to...

CVE-2024-39700 Remote Code Execution (RCE) vulnerability in jupyterlab extension template `update-integration-tests` GitHub Action

JupyterLab extension template is a copier template for JupyterLab extensions. Repositories created using this template with test option include update-integration-tests.yml workflow which has an RCE vulnerability. Extension authors hosting their code on GitHub are urged to upgrade the template to...

PT-2024-28639

Name of the Vulnerable Software and Affected Versions JupyterLab extension template versions prior to 4.3.0 Description The JupyterLab extension template has a remote code execution RCE vulnerability in the update-integration-tests.yml workflow. This issue affects repositories created using the...

Malicious code in Blockсore.IntegratioոTests.Common (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in Blockсore.IntеgrаtioոTests.Common (NuGet)

--- -= Per source details. Do not edit below this line.=-...

org.keycloak:keycloak-dependencies-server-all (20.0.0), org.keycloak:keycloak-guides (20.0.0) +6 more potentially affected by CVE-2024-5967 via org.keycloak:keycloak-ldap-federation (20.0.0)

org.keycloak:keycloak-ldap-federation MAVEN version 20.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 20.0.0 - org.keycloak:keycloak-guides...

Evmos allows unvested token delegations

Impact What kind of vulnerability is it? Who is impacted? At the moment, users are able to delegate tokens that have not yet been vested. This affects employees and grantees who have funds managed via ClawbackVestingAccount. Patches Has the problem been patched? What versions should users upgrade...

GHSA-7HRH-V6WP-53VW Evmos allows unvested token delegations

Impact What kind of vulnerability is it? Who is impacted? At the moment, users are able to delegate tokens that have not yet been vested. This affects employees and grantees who have funds managed via ClawbackVestingAccount. Patches Has the problem been patched? What versions should users upgrade...

Spring Framework 6.2.0-M1: Overriding Beans in Tests

Spring Framework 6.2.0-M1 has been released, including changes that resolve more than one hundred issues. Among those are a range of new features in Spring's testing support. In this post, I’d like to walk you through one of these new testing features: Bean Overriding support. The previous state ...

Amazon Linux 2023 : aws-nitro-enclaves-cli, aws-nitro-enclaves-cli-devel, aws-nitro-enclaves-cli-integration-tests (ALAS2023-2024-575)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-575 advisory. RUSTSEC-2024-0006 NOTE: https://rustsec.org/advisories/RUSTSEC-2024-0006.html NOTE: https://github.com/comex/rust-shlex/security/advisories/GHSA-r7qv-8r2h-pg27 Tenable has extracted the preceding...

[SECURITY] Fedora 40 Update: testng-7.8.0-5.fc40

TestNG is a testing framework inspired from JUnit and NUnit but introducing some new functionality, including flexible test configuration, and distributed test running. It is designed to cover unit tests as well as functional, end-to-end, integration, etc...

[SECURITY] Fedora 40 Update: maven-verifier-2.0.0~M1-7.fc40

Provides a test harness for Maven integration tests...

org.keycloak:keycloak-dependencies-server-all (20.0.5), org.keycloak:keycloak-guides (20.0.5) +5 more potentially affected by CVE-2023-6563 via org.keycloak:keycloak-model-jpa (20.0.5)

org.keycloak:keycloak-model-jpa MAVEN version 20.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - org.keycloak:keycloak-dependencies-server-all 20.0.5 - org.keycloak:keycloak-guides 20.0.5 -...

grafana security and enhancement update

9.2.10-7 - resolve RHEL-12649 - resolve CVE-2023-39325 CVE-2023-44487 rapid stream resets can cause excessive work - testing is turned off due to test failures caused by testing date mismatch 9.2.10-6 - Add /usr/share/grafana to systemd-sysusers --replace 9.2.10-5 - resolve CVE-2023-3128 grafana:...