OPENSUSE-SU-2024:11342-1 ruby2.7-rubygem-puma-5.4.0-1.2 on GA media

These are all security issues fixed in the ruby2.7-rubygem-puma-5.4.0-1.2 package on the GA media of openSUSE Tumbleweed...

CVE-2024-24786 affecting package moby-compose for versions less than 2.17.3-5

CVE-2024-24786 affecting package moby-compose for versions less than 2.17.3-5. A patched version of the package is available...

GHSA-V6MG-7F7P-QMQP vulnerabilities

Vulnerabilities for packages: pombump, melange...

SUSE: Security Advisory (SUSE-SU-2024:1462-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-20380 vulnerabilities

Vulnerabilities for packages: clamav...

CVE-2019-8457 affecting package ceph for versions less than 18.2.1-1

CVE-2019-8457 affecting package ceph for versions less than 18.2.1-1. An upgraded version of the package is available that resolves this issue...

GHSA-3RQ5-2G8H-59HC vulnerabilities

Vulnerabilities for packages: py3-dnspython, kubeflow-pipelines-visualization-server...

GHSA-F8H5-V2VG-46RR vulnerabilities

Vulnerabilities for packages: keycloak-operator...

CVE-2008-2149 affecting package wordnet for versions less than 3.0-43

CVE-2008-2149 affecting package wordnet for versions less than 3.0-43. A patched version of the package is available...

CVE-2024-29041 vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, argo-workflows, kubeflow-pipelines, sqlpad...

openSUSE Security Advisory (SUSE-SU-2024:0786-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-41717 affecting package sriov-network-device-plugin for versions less than 3.6.2-2

CVE-2022-41717 affecting package sriov-network-device-plugin for versions less than 3.6.2-2. An upgraded version of the package is available that resolves this issue...

GHSA-47G3-MF24-6559 vulnerabilities

Vulnerabilities for packages: openjdk-8-openj9, openjdk-25-openj9, openjdk-21-openj9, openjdk-17-openj9, openjdk-26-openj9, openjdk-11-openj9...

CVE-2024-20964 vulnerabilities

Vulnerabilities for packages: mysql...

SUSE: Security Advisory (SUSE-SU-2024:0520-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2024:0508-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MAL-2024-869 Malicious code in wlwz-2312-7706 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75e5f2b06ed59b1023d5b7d62471910cc2c922a27ae54456320b888dc5ea7f4d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-508 Malicious code in wlwz-2312-3705 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 622f15bbb365d08c6076eb998fd3186db4ea48775106c009b58ea35c879a6702 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MGASA-2024-0014 Updated tinyxml packages fix a security vulnerability

The updated packages fix a security vulnerability: StringEqual in TiXmlDeclaration::Parse in tinyxmlparser.cpp in TinyXML through 2.6.2 has a reachable assertion and application exit via a crafted XML document with a '\0' located after whitespace. CVE-2023-34194...

Debian: Security Advisory (DLA-3692-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...