Malicious code in gd-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd9e91f4618495cc4c59d76f8f4126c06c74a3966d97546edc9c7a8d5dbf857b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gd-display-ads (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cbb8205ec8f605359044821f392ba666298383cd89c39606a537468b8090c978 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3315 Malicious code in gd-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd9e91f4618495cc4c59d76f8f4126c06c74a3966d97546edc9c7a8d5dbf857b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gd-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4b32271b26a173bfc5332412def45e9a44e7c06b81602c052f488a3994d9d65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gd-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f4633cf317e4b2fdcf4a02c42b75cdaf9615270767e8b0d7489d7a40a922f15 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3308 Malicious code in gd-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f4633cf317e4b2fdcf4a02c42b75cdaf9615270767e8b0d7489d7a40a922f15 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3302 Malicious code in gd-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4b32271b26a173bfc5332412def45e9a44e7c06b81602c052f488a3994d9d65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gd-ldc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc2e513f0947fcbfc51cd5b232abb057c842cf4118394abe5549968e6d8fc44b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3312 Malicious code in gd-ldc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc2e513f0947fcbfc51cd5b232abb057c842cf4118394abe5549968e6d8fc44b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3301 Malicious code in gd-activity-tracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be919ac20b6023e27b37ab04354acc2fe0d76aadf72ab3ccea2dafed5df390a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gd-activity-tracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be919ac20b6023e27b37ab04354acc2fe0d76aadf72ab3ccea2dafed5df390a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE SLED15: apache2-mod_php7 / php7 / php7-bcmath / php7-bz2 / php7-calendar / etc (SUSE-SU-2022:1768-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:1768-1 advisory. - Fixed filtervar bypass vulnerability bsc1197644. Tenable has extracted the preceding description block...

SUSE SLES12: apache2-mod_php7 / php7 / php7-bcmath / php7-bz2 / php7-calendar / etc (SUSE-SU-2022:1764-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:1764-1 advisory. - Fixed filtervar bypass vulnerability bsc1197644. Tenable has extracted the preceding description block directly from the SUSE security...

SUSE SLES12: apache2-mod_php72 / php72 / php72-bcmath / php72-bz2 / etc (SUSE-SU-2022:1714-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:1714-1 advisory. - Fixed filtervar bypass vulnerability bsc1197644. Tenable has extracted the preceding description block directly from the SUSE security...

new packages: hunspell-gd

An update is available for hunspell-gd. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

new packages: gd

An update is available for gd. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...

SUSE SLED12 / SLES12 Security Update : libwmf (SUSE-SU-2022:1560-1)

The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1560-1 advisory. libwmf was updated to 0.2.12: upstream changed to fork from Fedora: https://github.com/caolanm/libwmf merged a...

SUSE SLED15 / SLES15 Security Update : libwmf (SUSE-SU-2022:1516-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1516-1 advisory. - The wmfmalloc function in api.c in libwmf 0.2.8.4 allows remote attackers to cause a denial of service...

CVE-2021-40145 affecting package gd for versions less than 2.3.0-5

CVE-2021-40145 affecting package gd for versions less than 2.3.0-5. A patched version of the package is available...

The vulnerability of the GD library for the PHP programming language allows attackers to trigger a service failure.

The vulnerability of the GD library for the PHP programming language arises due to buffer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted call to the imagefilltoborder function...