Spring AI - Groq AI inference

Faster information processing not only inform—it transforms how we perceive and innovate. Spring AI, a powerful framework for integrating AI capabilities into Spring applications, now offers support for Groq - a blazingly fast AI inference engine with supports for Tool/Function calling. Because...

SUSE SLED12: libreoffice / libreoffice-base / etc (SUSE-SU-2024:2258-1)

The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2258-1 advisory. Libreoffice was updated to version 24.2.4.2: - Release notes: https://wiki.documentfoundation.org/Releases/24.2.1/RC1...

SUSE-SU-2024:2258-1 Security update for libreoffice

This update for libreoffice fixes the following issues: Libreoffice was updated to version 24.2.4.2: - Release notes: https://wiki.documentfoundation.org/Releases/24.2.1/RC1 https://wiki.documentfoundation.org/Releases/24.2.1/RC2 - Security issues fixed: CVE-2024-3044: Fixed unchecked script...

SUSE-SU-2024:2257-1 Security update for libreoffice

This update for libreoffice fixes the following issues: Libreoffice was updated to version 24.2.4.2: - Release notes: https://wiki.documentfoundation.org/Releases/24.2.1/RC1 https://wiki.documentfoundation.org/Releases/24.2.1/RC2 - Security issues fixed: CVE-2024-3044: Fixed unchecked script...

Practical Guidance For Securing Your Software Supply Chain

The heightened regulatory and legal pressure on software-producing organizations to secure their supply chains and ensure the integrity of their software should come as no surprise. In the last several years, the software supply chain has become an increasingly attractive target for attackers who...

Malicious code in pkg-with-peer-deps (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2872 Malicious code in pkg-with-peer-deps (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in npm_package_dependencies__shopify_monorail (npm)

--- -= Per source details. Do not edit below this line.=-...

org.keycloak:keycloak-dependencies-server-all (2.1.0.cr1) potentially affected by CVE-2024-5967 via org.keycloak:keycloak-ldap-federation (2.1.0.cr1)

org.keycloak:keycloak-ldap-federation MAVEN version 2.1.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 2.1.0.cr1 Source cves: CVE-2024-596...

org.keycloak:keycloak-dependencies-server-all (2.3.0.final) potentially affected by CVE-2024-5967 via org.keycloak:keycloak-ldap-federation (2.3.0.final)

org.keycloak:keycloak-ldap-federation MAVEN version 2.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 2.3.0.final Source cves:...

com.github.vzakharchenko:chillispot-radius-plugin (>=1.3.8, <=1.3.9), com.github.vzakharchenko:cisco-radius-plugin (>=1.3.8, <=1.3.9) +17 more potentially affected by CVE-2024-5967 via org.keycloak:keycloak-ldap-federation (14.0.0)

org.keycloak:keycloak-ldap-federation MAVEN version 14.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin =1.3.8, =1.3.8, =1.3.8, =1.3.8,...

org.keycloak:keycloak-dependencies-server-all (3.1.0.cr1), org.keycloak:keycloak-services (3.1.0.cr1) potentially affected by CVE-2024-5967 via org.keycloak:keycloak-ldap-federation (3.1.0.cr1)

org.keycloak:keycloak-ldap-federation MAVEN version 3.1.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 3.1.0.cr1 -...

org.keycloak:keycloak-dependencies-server-all (2.2.0.cr1) potentially affected by CVE-2024-5967 via org.keycloak:keycloak-ldap-federation (2.2.0.cr1)

org.keycloak:keycloak-ldap-federation MAVEN version 2.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 2.2.0.cr1 Source cves: CVE-2024-596...

org.keycloak:keycloak-dependencies-server-all (1.2.0.cr1) potentially affected by CVE-2024-5967 via org.keycloak:keycloak-ldap-federation (1.2.0.cr1)

org.keycloak:keycloak-ldap-federation MAVEN version 1.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.2.0.cr1 Source cves: CVE-2024-596...

org.keycloak:keycloak-dependencies-server-all (1.3.0.final), org.keycloak:keycloak-server-dist (1.3.0.final) +1 more potentially affected by CVE-2024-5967 via org.keycloak:keycloak-ldap-federation (1.3.0.final)

org.keycloak:keycloak-ldap-federation MAVEN version 1.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.3.0.final -...

org.keycloak:keycloak-dependencies-server-all (2.5.1.final), org.keycloak:keycloak-services (2.5.1.final) potentially affected by CVE-2024-5967 via org.keycloak:keycloak-ldap-federation (2.5.1.final)

org.keycloak:keycloak-ldap-federation MAVEN version 2.5.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 2.5.1.final -...

org.keycloak:keycloak-dependencies-server-all (2.5.5.final), org.keycloak:keycloak-services (2.5.5.final) potentially affected by CVE-2024-5967 via org.keycloak:keycloak-ldap-federation (2.5.5.final)

org.keycloak:keycloak-ldap-federation MAVEN version 2.5.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 2.5.5.final -...

org.keycloak:keycloak-dependencies-server-all (1.0-final), org.keycloak:keycloak-server (1.0-final) potentially affected by CVE-2024-5967 via org.keycloak:keycloak-ldap-federation (1.0-final)

org.keycloak:keycloak-ldap-federation MAVEN version 1.0-final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.0-final -...

org.keycloak:keycloak-dependencies-server-all (3.4.1.cr1), org.keycloak:keycloak-server-feature-pack (3.4.1.cr1) +2 more potentially affected by CVE-2024-5967 via org.keycloak:keycloak-ldap-federation (3.4.1.cr1)

org.keycloak:keycloak-ldap-federation MAVEN version 3.4.1.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 3.4.1.cr1 -...

org.keycloak:keycloak-dependencies-server-all (19.0.2), org.keycloak:keycloak-guides (19.0.2) +8 more potentially affected by CVE-2024-5967 via org.keycloak:keycloak-ldap-federation (19.0.2)

org.keycloak:keycloak-ldap-federation MAVEN version 19.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 19.0.2 - org.keycloak:keycloak-guides...