UBUNTU-CVE-2024-45003

In the Linux kernel, the following vulnerability has been resolved: vfs: Don't evict inode under the inode lru traversing context The inode reclaiming processSee function pruneicachesb collects all reclaimable inodes and mark them with IFREEING flag at first, at that time, other processes will be...

PT-2024-33741

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.58 Description: A vulnerability in the Linux kernel has been resolved, related to an uninit-value access of new ea in ea buffer. The issue was reported by syzbot, which found that lzo1x 1 do compress was usi...

MAL-2024-8270 Malicious code in @diotoborg/ea-sint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b95e915f94bee83c0e1641dbf02efd61167248012d21dd8ba5f690c15913a512 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8653 Malicious code in @diotoborg/temporibus-ea (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4822012ec1a833f674cfa9f32eb442ad1a087d5edf1a5b693743f06491fb2bb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/placeat-ea-autem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bcf0392eb6b7aaaf4beeb8fc0399b6dd4ad83eff6a98b990b17d2c31f8f41687 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/ea-consectetur (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d65c9696fb568aa04d4ee8f20b1815ae16b0511e7731e9744663f006eb21fde3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2024-41017

In the Linux kernel, the following vulnerability has been resolved: jfs: don't walk off the end of ealist Add a check before visiting the members of ea to make sure each ea stays within the ealist...

CVE-2024-41017

A vulnerability was found in the Journaled File System JFS in the kernel code, which allows for out-of-bounds access when traversing the extended attribute list ealist. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product...

java-21-openjdk security update

1:21.0.4.0.7-1.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:21.0.4.0.7-1 - Update to jdk-21.0.4+7 GA - Update release notes to 21.0.4+7 - Switch to GA mode. - Sync the copy of the portable specfile with the latest update - Add missing section headers in NEWS - This tarball is embargoed unti...

CVE-2024-40972

In the Linux kernel, the following vulnerability has been resolved: ext4: do not create EA inode under buffer lock ext4xattrsetentry creates new EA inodes while holding buffer lock on the external xattr block. This is problematic as it nests all the allocation locking which acquires locks on othe...

CVE-2024-40972

In the Linux kernel, the following vulnerability has been resolved: ext4: do not create EA inode under buffer lock ext4xattrsetentry creates new EA inodes while holding buffer lock on the external xattr block. This is problematic as it nests all the allocation locking which acquires locks on othe...

CVE-2024-40972

In the Linux kernel, the following vulnerability has been resolved: ext4: do not create EA inode under buffer lock ext4xattrsetentry creates new EA inodes while holding buffer lock on the external xattr block. This is problematic as it nests all the allocation locking which acquires locks on othe...

MAL-2024-7184 Malicious code in @zitterorg/ea-quis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95d552dc3a130539ba592cc72374523dd6581181f8b61290b32fb993b515eb00 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/ea-quis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95d552dc3a130539ba592cc72374523dd6581181f8b61290b32fb993b515eb00 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7266 Malicious code in @zitterorg/maiores-commodi-ea (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d78203f67fe4b8efd76000bab0b09a39c5a8433007c221e08b1ed83ec92ef20c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7130 Malicious code in @zitterorg/beatae-provident-ea (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85cbdbe2538d320a054069e84937c9edcb7ec3c61898017d8c94581a78fd397d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

(Pwn2Own) Phoenix Contact CHARX SEC-3100 MQTT Protocol JSON Parsing Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Phoenix Contact CHARX SEC-3100 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of JSON-encoded arrays. The issue results...

MAL-2024-1500 Malicious code in @juiggitea/vero-placeat-ea-consequuntur (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce8c3feba471a4cbe36afc647558994783b5f59eb77754f5f4401e1abf65fcf5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-14686

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential circular locking issue was identified in the smb2 set ea function. This issue arises because smb2 set ea can be called within the parent inode lock range. To address this, th...

java-11-openjdk security update

1:11.0.23.0.9-3.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:11.0.23.0.9-2 - Fix 11.0.22 release date in NEWS 1:11.0.23.0.9-1 - Update to jdk-11.0.23+9 GA - Update release notes to 11.0.23+9 - Switch to GA mode for release - Require tzdata 2024a due to upstream inclusion of JDK-8322725 - On...