augeas bug fix and enhancement update

An update is available for augeas. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.5...

expat security update

An update is available for expat. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Expat is a C library for parsing XML documents. Security Fixes: libexpat: expat...

CLSA-2024-1731933167 kernel: Fix of 36 CVEs

smb: client: fix use-after-free in smb2queryinfocompound CVE-2023-52751 - smb: client: prevent new fids from being removed by laundromat CVE-2023-52751 - cifs: fix dentry lookups in directory handle cache CVE-2023-52751 - uprobe: avoid out-of-bounds memory access of fetching args CVE-2024-50067 -...

SUSE-SU-2024:4011-1 Security update for SUSE Manager Client Tools

This update fixes the following issues: golang-github-lusitaniae-apacheexporter: - Security issues fixed: CVE-2023-3978: Fixed security bug in x/net dependency bsc1213933 - Other changes and issues fixed: Delete unpackaged debug files for RHEL Do not include source files in the package for RHEL 9...

Security Bulletin: IBM Common Licensing using IBM® SDK, Java™ Technology Edition vulnerable to CVEs

Summary Multiple vulnerabilities affect IBM® SDK, Java™ Technology Edition in IBM License Key Server Administration and Reporting Tool ART and Administration Agent. For more information please refer to Oracle's CPU Advisory and the X-Force database entries referenced below. Vulnerability Details...

Security Bulletin: Vulnerability in IBM WebSphere Application Server Liberty impacts IBM Common Licensing

Summary IBM WebSphere Application Server Liberty is vulnerable to information disclosure. CVE-2023-50314 Vulnerability Details CVEID:CVE-2023-50314 DESCRIPTION: IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.8 could allow an attacker with access to the network to conduct spoofin...

CVE-2022-23961

creationtimestamp| type| source ---|---|--- 2024-11-18 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-11-18 2025-01-28 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-28 2025-01-29 00:00:00+00:00| exploited| The Shadowserver...

CVE-2020-8191

creationtimestamp| type| source ---|---|--- 2024-11-18 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-18 2024-12-17 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-12-17 2024-12-24 00:00:00+00:00| seen| The Shadowserver...

MAL-2024-10810 Malicious code in seller-webchat-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c08c36430d0f111cf5379d4566cc13f5b904dbfcb91a51e28ae64199874c5da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in seller-webchat-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c08c36430d0f111cf5379d4566cc13f5b904dbfcb91a51e28ae64199874c5da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in seller-return-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cb65c23332995d233b20a9c39f766a75b931d27ec3bb60ab9ee7a29268dce28 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10806 Malicious code in seller-return-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cb65c23332995d233b20a9c39f766a75b931d27ec3bb60ab9ee7a29268dce28 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in seller-package-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 34119ed9c1448fe010b34b65ac15d3bead19bc9991c34ee21e93b96c9507cd73 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10803 Malicious code in seller-package-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 34119ed9c1448fe010b34b65ac15d3bead19bc9991c34ee21e93b96c9507cd73 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10800 Malicious code in seller-listing-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e91c83194a00c44fff119714c07ce3b46ebf9b99a33ff1d0ccfe8de8ce972ec0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in seller-fulfillment-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55ebc5b94723310fdc818906683b92c5de92b31571f86799a4a51a25af391ba0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10798 Malicious code in seller-fulfillment-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55ebc5b94723310fdc818906683b92c5de92b31571f86799a4a51a25af391ba0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in seller-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26a60e43622156734ed64b698b46f6115dd23fb593fd5b9da41b6a8fd50faebf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10796 Malicious code in seller-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26a60e43622156734ed64b698b46f6115dd23fb593fd5b9da41b6a8fd50faebf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in seller-assistance-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9fbd59242e61985b8479eb67bfe945856c24c296a5130f77e8b28ae2631db7f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...