Security Bulletin: IBM Cognos Transformer is affected by security vulnerabilities

Summary There are vulnerabilities in Apache Xalan, Apache Commons Codec, IBM® Java™ Version 8, and OpenSSL that are consumed by IBM Cognos Transformer. These have been addressed by upgrading or removing the vulnerable libraries. Please refer to the table in the Related Information section for...

CLSA-2024-1708029694 Update of nss

Update to CKBI 2.64 from NSS 3.95 - Removed: - Certificate "E-Tugra Certification Authority" - Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2" - Certificate "Hongkong Post Root CA 1" - Certificate "Symantec Class 1 Public Primary Certification Authority - G6" - Certificate "Symantec...

CLSA-2024-1708028290 Update of nss

Update to CKBI 2.64 from NSS 3.95 - Removed: - Certificate "E-Tugra Certification Authority" - Certificate "Hongkong Post Root CA 1" - Certificate "Symantec Class 1 Public Primary Certification Authority - G6" - Certificate "Symantec Class 2 Public Primary Certification Authority - G6" -...

MAL-2024-994 Malicious code in disme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c23269587b224c4d3f4bebc2ccd53f3327661579f233f4095900ebcdf95f6f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CLSA-2024-1707379599 Update of alt-php

Update ca-certificates database to 20231207: - mozilla/certdata.txt,nssckbi.h: Update Mozilla certificate authority bundle of the version 2.64. - The following certificates authorities were added: Certificate "Atos TrustedRoot Root CA ECC G2 2020" Certificate "Atos TrustedRoot Root CA ECC TLS 202...

CLSA-2024-1707379486 Update of alt-php

Update ca-certificates database to 20231207: - mozilla/certdata.txt,nssckbi.h: Update Mozilla certificate authority bundle of the version 2.64. - The following certificates authorities were added: Certificate "Atos TrustedRoot Root CA ECC G2 2020" Certificate "Atos TrustedRoot Root CA ECC TLS 202...

MAL-2024-965 Malicious code in ngpd-merceros-ui-meta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b9c719bf14b04e4b0155b8641b63f83c3a854798e6f3038be2d9f6d25e73c3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-942 Malicious code in russiapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c6d1e96f02c100786e7803d4038c785700157fa988cbf51067b6aa85d5a5e40 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-907 Malicious code in wlwz-2312-8108 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d563fc2ce6141a32b52e9acdd16b1bb909b5a54b7cef5a86b2b4adbb7dfdf5c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-795 Malicious code in wlwz-2312-6904 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware abfb7d9312c4be77c95fe84310487e311e875f63e5fb5dc91f8944c537457ff8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-746 Malicious code in wlwz-2312-6400 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c3ae55a396c40ae29925f4f2da009ac03848b899e701f1ad3cb3a86f84bfb0e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-770 Malicious code in wlwz-2312-6606 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 716d21aeb1de0994122d0a3f03f548be5057eee0a4af682ce0361a516033a36e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-760 Malicious code in wlwz-2312-6505 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aeac3483aa614c196a021210c3f415551f6cb842edd84abe9131f1c98356798e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-709 Malicious code in wlwz-2312-5908 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec65d215365f566ae13857bfefa3bad1f2b016d4226583753422dc4e991ce91a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-624 Malicious code in wlwz-2312-5004 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4f04c9a040dad09f844a23714890485904a7d6566e6470298a27fe2d4b60b31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-644 Malicious code in wlwz-2312-5206 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6f18badc7579ed73945786583773fa1bae7a6043142744a80ad2d119c6c4894 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-575 Malicious code in wlwz-2312-4500 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ebbc9fc9b7466695fd0436db942075f375169991c1c48a2c800130ad25e1fff9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-493 Malicious code in wlwz-2312-3508 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb16e7733f011f620000f3f4d37e7be638c6e08b157eddd5fbd67d685508e66c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-336 Malicious code in wlwz-2312-1804 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58f724394a3db79c9566ba805306f4fcde65aebb314a8b5478cf3bf440637886 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-333 Malicious code in wlwz-2312-1801 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0576f070cb709f21f4120edb9e0806ccdd09e074447e9fbf39228e06cb2bfc18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...