USN-7120-1 linux, linux-aws, linux-gcp, linux-gcp-6.8, linux-gke, linux-hwe-6.8, linux-ibm, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-oem-6.8, linux-oracle, linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - File systems infrastructure; - Network traffic control; CVE-2024-46800, CVE-2024-43882...

GHSA-HRXH-9W67-G4CV Rclone has Improper Permission and Ownership Handling on Symlink Targets with --links and --metadata

tl;dr: unprivileged user creates a symlink to /etc/sudoers, /etc/shadow or similar and waits for a privileged user or process to copy/backup/mirror users data using --links and --metadata. unprivileged user now owns /etc/sudoers. Summary Insecure handling of symlinks with --links and --metadata i...

Malicious code in seller-vuex-report-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d1caf07f7bf71a4f82b9bc3d65c3a2cbd6a7f7762185704479a04da297485e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in seller-fulfillment-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55ebc5b94723310fdc818906683b92c5de92b31571f86799a4a51a25af391ba0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rn-native-portals (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9cc76bce72b94e6ae0b2f629d3fc88141eeebe2e6d7f59c886a7ca7b8ec6d078 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redux-store-immutable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59b3c7c3c688154e0e3a57a2a85b1e6f27a506c0a4020c324d3d5120a517cad0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in newbharatv1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d58cd04cb4c3ad9bf805ad16e20cc8373d056c1a8afe2ffe2f67925488786a95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in quality-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f01f544d6f653ee39d1d5c68a0b5795305468c31c30f8ed337e10e39387d63e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pvct-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97125a9e23577624ce75d1c18f9ef230f8dee8ab03e9122e21afcadedbf22b0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Ubuntu 24.04 LTS : Linux kernel vulnerabilities (USN-7089-6)

The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7089-6 advisory. Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing. A local...

Malicious code in people-rn-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 681ed628388433ac94a7fae9dc863ce558f90b455be767d11efd4b5f0ad7bd97 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

USN-7110-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - HW tracing; - ISDN/mISDN subsystem; - Media drivers; - Network drivers; - SCSI drivers; - USB...

Malicious code in oms-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 096fa8375c3d3d18ad7f109d5bcc12864480bd78ba8892401bc853554469accc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in module-json-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03f9de22e9d105a1442fd2bab315de0e956fcabbec66fbfa38d5e3452a01bc33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in axios-mockadptr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e64ef7d0e28707dcceed8016121547c9232833f50b9ead795de4f4fa4d4a282 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in logjs4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2db9ce61ae79bc8f972d6275198581d1924f054967dfead3abccc970d1b77daf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in agn-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87afdc0a8e30ae8eebb05c2e6a137747bf63e1873c568c2b6ffc898507bd7b1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mocktp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74b55d23fdb36bab61a6449aff71690d445a015bf0dfe059c796ecdb6ca1c784 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in htp2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2f646abc54192dce6f7771d42de7321b233e28eec8e74a93f3d6ba8bfff37ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in basicath (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c0a0a0749c1ad1f82f0475d065d5bace6e04151bc7daea6f1596d383a707c4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...