SUSE CVE-2024-53140

In the Linux kernel, the following vulnerability has been resolved: netlink: terminate outstanding dump on socket close Netlink supports iterative dumping of data. It provides the families the following ops: - start - optional kicks off the dumping process - dump - actual dump helper, keeps getti...

UBUNTU-CVE-2024-53140

In the Linux kernel, the following vulnerability has been resolved: netlink: terminate outstanding dump on socket close Netlink supports iterative dumping of data. It provides the families the following ops: - start - optional kicks off the dumping process - dump - actual dump helper, keeps getti...

MAL-2024-11191 Malicious code in auto-cancel-redundant-job (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 101f645ee53d82a1431bda0a23c718a688c58f23d0537c0da9ff38901d46a92c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

UBUNTU-CVE-2024-36610

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage...

MAL-2024-11133 Malicious code in crypto-jsonwebtoken (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25abe83f5832dadd36db735f0f385e70d4f55987a913448a70c7df4ea1c28762 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

java-11-openjdk security update

1:11.0.25.0.9-1.0.1 - Update to jdk-11.0.25+9 GA Orabug: 37178930 - Fixes CVE-2024-21208 CVE-2024-21210 CVE-2024-21217 CVE-2024-21235 - Removed patches - 1001-orabug36904359-CVE-2024-21138-fix.patch - 1002-orabug36904359-CVE-2024-21138-fix.patch - 1003-orabug36904359-CVE-2024-21140-fix-part1.patc...

Security update for xen

This update for xen fixes the following issues: Security issues fixed: CVE-2024-45818: xen: Deadlock in x86 HVM standard VGA handling bsc1232622 CVE-2024-45819: xen: libxl leaks data to PVH guests via ACPI tables bsc1232624 CVE-2024-45817: xen: x86: Deadlock in vlapicerror bsc1230366 Non-security...

MAL-2024-11028 Malicious code in assetmantle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25dddd918f13d7e544f8d420513711de48ce49d7c545668b49d312d4054ff4f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11026 Malicious code in action-deploy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47502de1954b1ba4d201ac64813edf79362d7f81fb2c28f6802f800d93bc08d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11105 Malicious code in ssc-ui-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30657b12f3aa80c9d47f78b2b86279c2077fb4840616cd1de07f80086d4d7d66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11097 Malicious code in soybean-admin-layout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59a6972781b662382399d2ae9303fb5c9213e1d475062dcb8c096bc7b07589c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11075 Malicious code in release-notice (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9188a12e63756142475c425c675afc5c47d67d58761c182bb785745a2b7298fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11001 Malicious code in scan-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7ef4d9984cb1556d85ee7a49552a644920b953dfe2a86a1b22d190cdfce82a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11015 Malicious code in updasolara (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5019b6bb5f610407cab79430a7c13fe5f715daf02b6629d8945a69755c0fea5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10960 Malicious code in dep-validator-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af93a927101a23e38ce34664c1c85dc8651f0e3a5a066ec9a110caabe4cadcbc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10962 Malicious code in eds-charts-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2510990d3cbd74d80350268baeb27e8b73568fb0e64f3c83fd061ad4eda6f565 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10940 Malicious code in nodmialer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f517fd7c243bbf2ebdbc660388ec85202c4ea31c094bc01cbb8b5ff4c0c7388f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PYSEC-2024-152 aiocpa 0.1.13 contains credential harvesting code

aiocpa is a user-facing library for generating color gradients of text. Version 0.1.13 introduced obfuscated, malicious code targeting Crypto Pay users, forwarding client credentials to a remote Telegram bot. All versions have been removed from PyPI...

MAL-2024-10930 Malicious code in ethcrypro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba9c04349ef6d36952c840a64414c794718cfd5fddd4f2c21355423bd6d36f63 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-52516 Nextcloud Server's shares are not removed when user is limited to share with in their groups and being removed from one of them

Nextcloud Server is a self hosted personal cloud system. When a server is configured to only allow sharing with users that are in ones own groups, after a user was removed from a group, previously shared items were not unshared. It is recommended that the Nextcloud Server is upgraded to 22.2.11 o...