CVE-2024-52516 Nextcloud Server's shares are not removed when user is limited to share with in their groups and being removed from one of them

Nextcloud Server is a self hosted personal cloud system. When a server is configured to only allow sharing with users that are in ones own groups, after a user was removed from a group, previously shared items were not unshared. It is recommended that the Nextcloud Server is upgraded to 22.2.11 o...

Fedora 41 : opendmarc (2024-513cf04db3)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-513cf04db3 advisory. - Fix for CVE-2024-25768 - Closes rhbz2266175 rhbz2266174 - Convert to %autorelease and %autochangelog - Simplify spec - Remove checks on if systemd is prese...

kernel: wifi: mt76: mt7921e: fix use-after-free in free_irq()

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921e: fix use-after-free in freeirq From commit a304e1b82808 "PATCH Debug shared irqs", there is a test to make sure the shared irq handler should be able to handle the unexpected event after deregistration. For th...

kernel: hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field

A vulnerability was found in the Linux kernel's hwmon driver in the w83791d module where the driver performs a read operation, which can result in a NULL pointer dereference. This occurs due to an unnecessary field lm75 that is no longer needed after updates to device handling functions, the driv...

kernel: blk-mq: fix tags leak when shrink nr_hw_queues

A memory leak flaw was found in the Linux kernel's block multi-queue blk-mq subsystem. When the number of hardware queues is reduced via the submitqueues parameter, the tags associated with the removed queues are not freed, causing a memory leak. This occurs because shrinking nrhwqueues does not...

tracing/timerlat: Drop interface_lock in stop_kthread()

...

MAL-2024-10507 Malicious code in ethens-name (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2587aaeff09cedb01639d066a033a97d01f1137b14788e741c56f5801b6f38b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10493 Malicious code in 1234wdzwkcsf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24a9740048ac983c055f06c0c70ef23cd9654f1afc41a6b809febf6ea84f4aa2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CLSA-2024-1731001050 Update of nss

update to CKBI 2.70 from NSS 3.104 - updated certificates: - Certificate "GLOBALTRUST 2020" - Certificate "certSIGN ROOT CA" - Certificate "ACCVRAIZ1" - Certificate "OISTE WISeKey Global Root GC CA" - removed certificates: - Certificate "Security Communication Root CA" - Certificate "Camerfirma...

MAL-2024-10522 Malicious code in puppeterfirefox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02d8862ce6e00754c11e1aed862512e4c262443896518351c4e86f5773be1199 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10526 Malicious code in valomemo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c766f5074a741d52acff64d70b735707af99e18eff8bd842be0d39ab5f138c0b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10533 Malicious code in webb3-bzz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8aaeecf6e2f692d69483d7fe98783533279175704f115f53cbf1bfa223a08a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10509 Malicious code in ethers-multicaal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b6a3ae6518d1268c8a0dd1eedcc72da3fb1c5f939868743ea2699108f1d3741b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10435 Malicious code in openzepplin-solidity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96160503f6efd74b51cbb0434c82e4d7e8e07d087e3d9578d56ab5563071bcd2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CLSA-2024-1730917239 Update of nss

update to CKBI 2.70 from NSS 3.104 - updated certificates: - Certificate "GLOBALTRUST 2020" - Certificate "certSIGN ROOT CA" - Certificate "ACCVRAIZ1" - Certificate "OISTE WISeKey Global Root GC CA" - Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" - removed certificates:...

CLSA-2024-1730916930 Update of alt-php

Update ca-certificates database to 20240909: - mozilla\certdata.txt,nssckbi.h: Update Mozilla certificate authority bundle of the version 2.70. - The following certificates were updated: Certificate "certSIGN ROOT CA" Certificate "ACCVRAIZ1" Certificate "OISTE WISeKey Global Root GC CA" - The...

CLSA-2024-1730916673 Update of alt-php

Update ca-certificates database to 20240823: - mozilla/certdata.txt,nssckbi.h: Update Mozilla certificate authority bundle of the version 2.69. - The following certificates were updated: Certificate "OISTE WISeKey Global Root GC CA" - The following certificates were added: Certificate "Telekom...

CLSA-2024-1730916322 Update of nss

update to CKBI 2.70 from NSS 3.104 - updated certificates: - Certificate "GLOBALTRUST 2020" - Certificate "certSIGN ROOT CA" - Certificate "ACCVRAIZ1" - Certificate "OISTE WISeKey Global Root GC CA" - removed certificates: - Certificate "Security Communication Root CA" - Certificate "Camerfirma...

CLSA-2024-1730916203 Update of ca-certificates

update to CKBI 2.69 from NSS 3.103 - updated certificates: - Certificate "GLOBALTRUST 2020" - Certificate "OISTE WISeKey Global Root GC CA" - removed certificates: - Certificate "Security Communication Root CA" - Certificate "Camerfirma Chambers of Commerce Root" - Certificate "Chambers of...

CLSA-2024-1730915716 Update of nss

update to CKBI 2.69 from NSS 3.103 - updated certificates: - Certificate "OISTE WISeKey Global Root GC CA" - Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" - removed certificates: - Certificate "Security Communication Root CA" - Certificate "Camerfirma Chambers of...