CVE-2024-41004 tracing: Build event generation tests only as modules

In the Linux kernel, the following vulnerability has been resolved: tracing: Build event generation tests only as modules The kprobes and synth event generation test modules add events and lock get a reference those event file reference in module init function, and unlock and delete it in module...

Linux kernel security vulnerabilities

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel that stems from a kernel crash caused by the mm/hugememory component not properly handling a poisoned hugezerofolio when handling memory failure tests...

Oracle Linux 9 : buildah (ELSA-2024-4371)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-4371 advisory. - rebuild for CVE-2024-1394 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

CVE-2024-35234 Discourse vulnerable to stored-dom XSS via Facebook Oneboxes

Discourse is an open-source discussion platform. Prior to version 3.2.3 on the stable branch and version 3.3.0.beta3 on the tests-passed branch, an attacker can execute arbitrary JavaScript on users’ browsers by posting a specific URL containing maliciously crafted meta tags. This issue only...

PT-2024-27341 · Discourse +1 · Discourse +1

Name of the Vulnerable Software and Affected Versions: Discourse versions prior to 3.2.3 on the stable branch Discourse versions prior to 3.3.0.beta4 on the beta and tests-passed branches Description: Discourse is an open-source discussion platform. A malicious actor could get the FastImage libra...

PT-2024-26909 · Discourse · Discourse

Name of the Vulnerable Software and Affected Versions: Discourse versions prior to 3.2.3 on the stable branch Discourse versions prior to 3.3.0.beta4 on the beta and tests-passed branches Description: The issue affects moderators using the review queue, allowing them to see a user's email address...

CLSA-2024-1719925589 openssl: Fix of 2 CVEs

CVE-2022-1292: crehash: Do not use shell to invoke openssl to prevent command injection - CVE-2022-2068: crehash: Fix file operations to prevent command injection - Update expired smime certificates - Add testing using old certificates sha1 to have both types of certificates sha1, sha256 checked...

CVE-2024-39298 mm/memory-failure: fix handling of dissolved but not taken off from buddy pages

In the Linux kernel, the following vulnerability has been resolved: mm/memory-failure: fix handling of dissolved but not taken off from buddy pages When I did memory failure tests recently, below panic occurs: page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x8cee00 flags:...

MAL-2024-6333 Malicious code in acceptance-tests_support (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in acceptance-tests_support (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in Blockсore.IntegratioոTests.Common (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in Blockсore.IntеgrаtioոTests.Common (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in Bloсkcore.Tests.Commoո (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in Bloсkcorе.Tests.Commоո (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in gltf-blender-io-tests (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2424 Malicious code in gltf-blender-io-tests (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in eu.tsystems.mms.tic.testerra.plugins.azuredevops.tests.playgroundtests (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2339 Malicious code in eu.tsystems.mms.tic.testerra.plugins.azuredevops.tests.playgroundtests (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in azure-rest-api-specs-tests (npm)

--- -= Per source details. Do not edit below this line.=-...

python3.11 security update

3.11.9-1.0.1 - Update rpm-macros description Orabug: 36024572 3.11.9-1 - Rebase to 3.11.9 - Security fixes for CVE-2023-6597 and CVE-2024-0450 - Fix expat tests for the latest expat security release Resolves: RHEL-33672, RHEL-33684...