SUSE-SU-2024:3843-1 Security update for 389-ds

This update for 389-ds fixes the following issues: - Persist extracted key path for ldapsslclientinit over repeat invocations bsc1230852 - Re-enable use of .dsrc basedn for dsidm commands bsc1231462 - Update to version 2.2.10git18.20ce9289: RFE: Use previously extracted key path Update dsidm to...

Malicious code in 4xrkhv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1b868fa1493a353ea10499717d60f6c6e5ff87dc5191e90adfb63b550589ead Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mp3-file-zip-d-ownload-7517-goodbye-yellow-brick-road-h63vl-tpdnhx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ce58c2ac7b1825c26b2656020f588d8a223c04953287197e776979cc4f4f6ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in do-wnload-available-88507-inheaven-dfkvm-eunrso (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cbd9ffe03800cded037bb1f5aac60442e960ff6ba37ff5ff4f9e7705114b0029 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ava-ilable-down-load-mp3-today-illuminated-people-pwjfd-buzpyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f7ed6d741d62c3d245d21febdfd0058e2857c4f3016aec9c3f13dc25c9b2a46 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in alb-um-availa-ble-zip-mp3-file-85058-bright-phoebus-dboqy-oraqvx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7896431589d1851d65f8365d770dff71aa63f823917838fd5734b3ee77fe7f32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in blank-fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6eee7dd629fd54a1f09fdb48256d257595637f6596b2182b38bf01200ec08291 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in request-ip-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb7847462f5f3794e37804f11b5846d70e4b6862db2008d75ded729dea8f2c7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-23376

CVE-2024-23376 involves memory corruption while sending the persist buffer IOCTL from user-space to kernel space in Qualcomm-related components (notably Qualcomm Snapdragon Auto). The issue is described as a memory corruption (also characterized as a use-after-free in some feeds) affecting the pe...

Malicious code in xto10x (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02f004d7b51ec9f929c3b4a1b7cca8ff3bd7ea934932ec13499735545663ba6c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zama1.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2afbc5173ad05196006544f59dceeb925749886b3658d14e9fe6ef4fc721c4b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in temp928546 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ce0eef84654ac11c5ab26063df541ecb6b38f4ee9d29996ad53f8af13363339 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in stripe-testfb-v3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3cd65a10f0ebad6ff909e45ebb515898fc48e522018ebf68f4290dc40ad6d1d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jsowuer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 111fb7600e81b5a50f008078826db3ae508544bb41cb3afcc72c3266cb08eab9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in falcor-restify-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d65bd1e0827a70f5ef5dcd48080f47b4954d22f07cdba313bf94bb7508d4f1f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/in-explicabo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ee5c3db6a0f6c398e2458dcac6524ee382c6cd6e372e168f885d2d84dbd14c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/rem-rerum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2081ec37a0a405ca20b688e6266b41083b171bc34ae5f782eb9024f95c00242c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/consequuntur-rem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77ff8cdf6fc2fe14fd3b9473168c517674150ba9ade6db408601172615cc25e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/eum-deleniti-tempora (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7745470e6672da8b3fc007d0352aefd0a67a74624726724b7284c8aa37f3eb81 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/molestias-quis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba293583def0448a941a973bb0a464465a209d8fae107aff7d5d93ff58f29e2a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...