SUSE-SU-2024:2257-1 Security update for libreoffice

This update for libreoffice fixes the following issues: Libreoffice was updated to version 24.2.4.2: - Release notes: https://wiki.documentfoundation.org/Releases/24.2.1/RC1 https://wiki.documentfoundation.org/Releases/24.2.1/RC2 - Security issues fixed: CVE-2024-3044: Fixed unchecked script...

Practical Guidance For Securing Your Software Supply Chain

The heightened regulatory and legal pressure on software-producing organizations to secure their supply chains and ensure the integrity of their software should come as no surprise. In the last several years, the software supply chain has become an increasingly attractive target for attackers who...

Malicious code in pkg-with-peer-deps (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2872 Malicious code in pkg-with-peer-deps (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in npm_package_dependencies__shopify_monorail (npm)

--- -= Per source details. Do not edit below this line.=-...

SUSE SLED15: libcrc32c-devel / libcrc32c1 / python311-apipkg / etc (SUSE-SU-SUSE-RU-2024:1637-2)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-SUSE-RU-2024:1637-2 advisory. - Add python311 cloud services packages and dependencies jscPED-7987, jscPED-6697 - Bellow 5...

[SECURITY] Fedora 39 Update: composer-2.7.7-1.fc39

Composer helps you declare, manage and install dependencies of PHP projects, ensuring you have the right stack everywhere. Documentation: https://getcomposer.org/doc/...

Exploit for Deserialization of Untrusted Data in Clear Clearml

CVE-2024-24590-ClearML-RCE-Exploit Python script that exploit...

MAL-2024-1605 Malicious code in dependences (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01937c3da9bea8e85a1f2b11953989f03d30855db63d1feaca17c660227a83c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dependences (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01937c3da9bea8e85a1f2b11953989f03d30855db63d1feaca17c660227a83c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Fedora 39 : singularity-ce (2024-c95d3199c5)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-c95d3199c5 advisory. Bulk update of bundled Go dependencies. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Resolving Pending State During Cluster Removal with k10multicluster Tool

Challenge This article helps in finding and deleting long-running finalizers that are waiting on other resources and can cause deletions to appear stuck in the terminating state. Description: When Kubernetes attempts to delete the cluster object that has finalizers "dist.kio.kasten.io/debootstrap...

Composer has a command injection via malicious git branch name

Impact The status, reinstall and remove commands with packages installed from source via git containing specially crafted branch names in the repository can be used to execute code. Patches 2.2.24 for 2.2 LTS or 2.7.7 for mainline Workarounds Avoid installing dependencies via git by using...

GHSA-47F6-5GQ3-VX9C Composer has a command injection via malicious git branch name

Impact The status, reinstall and remove commands with packages installed from source via git containing specially crafted branch names in the repository can be used to execute code. Patches 2.2.24 for 2.2 LTS or 2.7.7 for mainline Workarounds Avoid installing dependencies via git by using...

Exploit for OS Command Injection in Php

CVE-2024-4577: PHP CGI Argument Injection XAMPP 💀 Featur...

Exploit for Code Injection in Exiftool_Project Exiftool

CVE-2021-22204 Summary of the CVE Improper sanitization o...

[SECURITY] Fedora 40 Update: qt5-qtwebsockets-5.15.14-1.fc40

The QtWebSockets module implements the WebSocket protocol as specified in RFC 6455. It solely depends on Qt no external dependencies...

RHEL 9 : jackson-databind (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - jackson-databind: denial of service via cylic dependencies CVE-2023-35116 Note that Nessus has not tested for this...

RHEL 6 : jackson-databind (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - jackson-databind: denial of service via cylic dependencies CVE-2023-35116 Note that Nessus has not tested for this...

Important: Red Hat Security Advisory: rust-toolset:rhel8 security update

An update for the rust-toolset:rhel8 module is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...