OPENSUSE-SU-2025:14881-1 forgejo-runner-6.2.2-3.1 on GA media

These are all security issues fixed in the forgejo-runner-6.2.2-3.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-0475 vulnerabilities

Vulnerabilities for packages: gitlab-runner, gitlab-runner-fips...

CVE-2025-0475 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

CVE-2024-8186 vulnerabilities

Vulnerabilities for packages: gitlab-runner, gitlab-runner-fips...

CVE-2024-8186 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: pluto, oras, whereabouts, shfmt, aws-network-policy-agent, conftest, direnv, gostatsd, kubernetes-csi-external-resizer, nginx-prometheus-exporter, paranoia, yace, golangci-lint, ferretdb, volume-modifier-for-k8s, promxy, redka, kubernetes-ingress-defaultbackend,...

GHSA-V84C-53C6-XMMP vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips...

GHSA-F5R5-77WF-XX6H vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips...

GHSA-RMHM-CWGP-268P vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips...

GHSA-R3MM-QXV5-X23H vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips...

GHSA-G797-R4R7-WP94 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips...

GHSA-94XW-8RG2-4FMC vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: kubevela, nri-f5, delve, sonobuoy, paranoia, prometheus-alertmanager-fips, nri-prometheus, nri-kafka, secrets-store-csi-driver-provider-gcp, esbuild, caddy, src, secrets-store-csi-driver-provider-aws, temporal-ui-server-fips, kubernetes-dashboard, thanos,...

CVE-2022-39321

GitHub Actions Runner is the application that runs a job from a GitHub Actions workflow. The actions runner invokes the docker cli directly in order to run job containers, service containers, or container actions. A bug in the logic for how the environment is encoded into these docker commands wa...

CVE-2020-13347

A command injection vulnerability was discovered in Gitlab runner versions prior to 13.2.4, 13.3.2 and 13.4.1. When the runner is configured on a Windows system with a docker executor, which allows the attacker to run arbitrary commands on Windows host, via DOCKERAUTHCONFIG build variable...

Malicious code in chialisp-lsp-runner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6dd3d79d6053db1cd153f11977e45ca5dabfc1ed73e22a68e807ce879e5be59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1073 Malicious code in chialisp-lsp-runner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6dd3d79d6053db1cd153f11977e45ca5dabfc1ed73e22a68e807ce879e5be59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ig-sonar-runner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 678d2f9e7e569b552fb1c7141755f6c84ec21e62122d3167be78aca0bd1ee2e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-578 Malicious code in ig-sonar-runner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 678d2f9e7e569b552fb1c7141755f6c84ec21e62122d3167be78aca0bd1ee2e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-35 Malicious code in digitalexp-lowcode-runner-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff497f2370d8b4d0bbe77fb825c837cdd2a57a506ec952b2a4e3ba78f273d1b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...