Mageia: Security Advisory (MGASA-2024-0397)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MAL-2024-12086 Malicious code in dynamodb-data-mapper-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 93e1601651b9c7ac38203563ebdc9231ff5ac6298c9dee85fb2eeae24acdce30 The OpenSSF Package Analysis project identified 'dynamodb-data-mapper-js' @ 7.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-12000 Malicious code in maplibre (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 812bdb7f3cb3a09a616e906c456e223c0069b42451a78c0df8d032054ec3f6a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12054 Malicious code in uid-2-test-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f2900f53327b861bd4050d2e38c0e867e8ace72a97f5525cb74f56a7af8373e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-52337 affecting package tuned for versions less than 2.21.0-2

CVE-2024-52337 affecting package tuned for versions less than 2.21.0-2. A patched version of the package is available...

Moderate: Red Hat Security Advisory: unbound security update

An update for unbound is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

OPENSUSE-SU-2024:14589-1 libmozjs-78-0-78.15.0-7.1 on GA media

These are all security issues fixed in the libmozjs-78-0-78.15.0-7.1 package on the GA media of openSUSE Tumbleweed...

Debian: Security Advisory (DSA-5829-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-38471 affecting package avahi for versions less than 0.8-4

CVE-2023-38471 affecting package avahi for versions less than 0.8-4. A patched version of the package is available...

Fedora: Security Advisory (FEDORA-2024-5ea38dfb80)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-49858 affecting package kernel for versions less than 5.15.173.1-1

CVE-2024-49858 affecting package kernel for versions less than 5.15.173.1-1. An upgraded version of the package is available that resolves this issue...

MAL-2024-11615 Malicious code in infoind (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11597 Malicious code in frexco-pip-requests (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11431 Malicious code in react-redux-up (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in evocateur_libnpmpublisher (npm)

--- -= Per source details. Do not edit below this line.=-...

OPENSUSE-SU-2024:14564-1 lxd-5.21.1-2.1 on GA media

These are all security issues fixed in the lxd-5.21.1-2.1 package on the GA media of openSUSE Tumbleweed...

Malicious code in chime-ui (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11293 Malicious code in admin-upload-common (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11261 Malicious code in @cawraytestorg/packagetest (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11244 Malicious code in nextcloud2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0849e0cda274c845158689c282bae36877b598c0a3e458b2e44243c3acd542d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...