CVE-2021-47072

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix removed dentries still existing after log is synced When we move one inode from one directory to another and both the inode and its previous parent directory were logged before, we are not supposed to have the dentry f...

UBUNTU-CVE-2021-47072

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix removed dentries still existing after log is synced When we move one inode from one directory to another and both the inode and its previous parent directory were logged before, we are not supposed to have the dentry f...

Spoofing

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Remove WO permissions on second-level paging entries When the first level page table is used for IOVA translation, it only supports Read-Only and Read-Write permissions. The Write-Only permission is not supported as t...

PT-2024-2635 · Red Hat · 3Scale +2

Name of the Vulnerable Software and Affected Versions: 3Scale versions used with Keycloak 15 or RHSSO 7.5.0 Description: The issue is related to incorrect handling of insufficient permissions or privileges in the 3Scale API Management software. When the auth type is set to use 3scale oidc issuer...

Security Bulletin: IBM Cognos Transformer is affected by security vulnerabilities

Summary There are vulnerabilities in Apache Xalan, Apache Commons Codec, IBM® Java™ Version 8, and OpenSSL that are consumed by IBM Cognos Transformer. These have been addressed by upgrading or removing the vulnerable libraries. Please refer to the table in the Related Information section for...

CLSA-2024-1708029694 Update of nss

Update to CKBI 2.64 from NSS 3.95 - Removed: - Certificate "E-Tugra Certification Authority" - Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2" - Certificate "Hongkong Post Root CA 1" - Certificate "Symantec Class 1 Public Primary Certification Authority - G6" - Certificate "Symantec...

CLSA-2024-1708028290 Update of nss

Update to CKBI 2.64 from NSS 3.95 - Removed: - Certificate "E-Tugra Certification Authority" - Certificate "Hongkong Post Root CA 1" - Certificate "Symantec Class 1 Public Primary Certification Authority - G6" - Certificate "Symantec Class 2 Public Primary Certification Authority - G6" -...

MAL-2024-994 Malicious code in disme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c23269587b224c4d3f4bebc2ccd53f3327661579f233f4095900ebcdf95f6f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CLSA-2024-1707379599 Update of alt-php

Update ca-certificates database to 20231207: - mozilla/certdata.txt,nssckbi.h: Update Mozilla certificate authority bundle of the version 2.64. - The following certificates authorities were added: Certificate "Atos TrustedRoot Root CA ECC G2 2020" Certificate "Atos TrustedRoot Root CA ECC TLS 202...

CLSA-2024-1707379486 Update of alt-php

Update ca-certificates database to 20231207: - mozilla/certdata.txt,nssckbi.h: Update Mozilla certificate authority bundle of the version 2.64. - The following certificates authorities were added: Certificate "Atos TrustedRoot Root CA ECC G2 2020" Certificate "Atos TrustedRoot Root CA ECC TLS 202...

MAL-2024-965 Malicious code in ngpd-merceros-ui-meta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b9c719bf14b04e4b0155b8641b63f83c3a854798e6f3038be2d9f6d25e73c3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-942 Malicious code in russiapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c6d1e96f02c100786e7803d4038c785700157fa988cbf51067b6aa85d5a5e40 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-907 Malicious code in wlwz-2312-8108 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d563fc2ce6141a32b52e9acdd16b1bb909b5a54b7cef5a86b2b4adbb7dfdf5c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-746 Malicious code in wlwz-2312-6400 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c3ae55a396c40ae29925f4f2da009ac03848b899e701f1ad3cb3a86f84bfb0e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-760 Malicious code in wlwz-2312-6505 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aeac3483aa614c196a021210c3f415551f6cb842edd84abe9131f1c98356798e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-795 Malicious code in wlwz-2312-6904 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware abfb7d9312c4be77c95fe84310487e311e875f63e5fb5dc91f8944c537457ff8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-770 Malicious code in wlwz-2312-6606 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 716d21aeb1de0994122d0a3f03f548be5057eee0a4af682ce0361a516033a36e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-709 Malicious code in wlwz-2312-5908 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec65d215365f566ae13857bfefa3bad1f2b016d4226583753422dc4e991ce91a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-644 Malicious code in wlwz-2312-5206 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6f18badc7579ed73945786583773fa1bae7a6043142744a80ad2d119c6c4894 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-624 Malicious code in wlwz-2312-5004 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4f04c9a040dad09f844a23714890485904a7d6566e6470298a27fe2d4b60b31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...