DEBIAN-CVE-2024-50297

In the Linux kernel, the following vulnerability has been resolved: net: xilinx: axienet: Enqueue Tx packets in dql before dmaengine starts Enqueue packets in dql after dma engine starts causes race condition. Tx transfer starts once dma engine is started and may execute dql dequeue in completion...

UBUNTU-CVE-2024-50272

In the Linux kernel, the following vulnerability has been resolved: filemap: Fix bounds checking in filemapread If the caller supplies an iocb-kipos value that is close to the filesystem upper limit, and an iterator with a count that causes us to overflow that limit, then filemapread enters an...

CVE-2024-50297

CVE-2024-50297 concerns the Linux kernel Xilinx axienet driver (net/xilinx) where a synchronization race between enqueueing Tx packets in the dql and starting the dmaengine can trigger a crash (BUG: lib/dynamic_queue_limits.c) during iperf stress tests. The evidence across connected documents tie...

CVE-2024-50297

In the Linux kernel, the following vulnerability has been resolved: net: xilinx: axienet: Enqueue Tx packets in dql before dmaengine starts Enqueue packets in dql after dma engine starts causes race condition. Tx transfer starts once dma engine is started and may execute dql dequeue in completion...

Oracle Linux 9 : lldpd (ELSA-2024-9158)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-9158 advisory. 1.0.18-3 - Add lldpd-devel package RHEL-22127 1.0.18-2 - Remove networkd gating test RHEL-25990 Tenable has extracted the preceding description block...

Security update for SUSE Manager Salt Bundle

This update fixes the following issues: venv-salt-minion: Security fixes on Python 3.11 interpreter: CVE-2024-7592: Fixed quadratic complexity in parsing -quoted cookie values with backslashes bsc1229873, bsc1230059 CVE-2024-8088: Prevent malformed payload to cause infinite loops in zipfile.Path...

MAL-2024-10743 Malicious code in alex_evil-test-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 055ea9627aa88ed77488e1c0cdc293a76dfe9e3d24d6fbfc3c897233e426303d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10741 Malicious code in galaktika-components-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 671c7461688fbe5d0af479ac40ecd1b4e4c79918ca524fc0c26608fd8b2dea9a The OpenSSF Package Analysis project identified 'galaktika-components-test' @ 0.1.148 npm as malicious. It is considered malicious because: - Th...

Malicious code in galaktika-components-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 671c7461688fbe5d0af479ac40ecd1b4e4c79918ca524fc0c26608fd8b2dea9a The OpenSSF Package Analysis project identified 'galaktika-components-test' @ 0.1.148 npm as malicious. It is considered malicious because: - Th...

MAL-2024-10785 Malicious code in scfe-joint-test-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3833cf8ad16d9a1273233a6ac79ee110667d3ecd4578d106dff23793d703958 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in scfe-joint-test-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3833cf8ad16d9a1273233a6ac79ee110667d3ecd4578d106dff23793d703958 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

IBM: Exposed Logs and Bearer Tokens on Test Endpoint

Exposed Logs and Bearer Tokens on Test Endpoint were reported to IBM, analyzed, and have been remediated...

CVE-2024-48966 Life2000 service tools for test and calibration do not support user authentication

The software tools used by service personnel to test & calibrate the ventilator do not support user authentication. An attacker with access to the Service PC where the tools are installed could obtain diagnostic information through the test tool or manipulate the ventilator's settings and embedde...

CLSA-2024-1731605761 Fix of 67 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-42265 - protect the fetch of -fdfd in dodup2 from mispredictions CVE-url: https://ubuntu.com/security/CVE-2024-47669 - nilfs2: fix state management in error path of log writing function CVE-url: https://ubuntu.com/security/CVE-2023-52918 - media: pci:...

Arbitrary File Overwrite in download_model_with_test_data in onnx/onnx

...

[SECURITY] Fedora 41 Update: python3.6-3.6.15-38.fc41

Python 3.6 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.6, see other distributions that support it, such as CentOS or RHEL with Software...

Fedora 41 : krb5 (2024-36514cd080)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-36514cd080 advisory. Automatic update for krb5-1.21.2-6.fc41. Changelog Mon Jul 8 2024 Julien Rische - 1.21.2-6 - CVE-2024-37370 CVE-2024-37371: GSS message token handli...

lldpd security update

1.0.18-3 - Add lldpd-devel package RHEL-22127 1.0.18-2 - Remove networkd gating test RHEL-25990...

PT-2024-33302 · Unknown · Ventilator Software Tools

Name of the Vulnerable Software and Affected Versions: Ventilator software tools affected versions not specified Description: The software tools used by service personnel to test and calibrate the ventilator do not support user authentication. An attacker with access to the Service PC where the...

Moderate: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...