[SECURITY] [DLA 3930-1] libsepol security update

Debian LTS Advisory DLA-3930-1 [email protected] https://www.debian.org/lts/security/ Sean Whitton October 22, 2024 https://wiki.debian.org/LTS Package : libsepol Version : 3.1-1+deb11u1 CVE ID : CVE-2021-36084 CVE-2021-36085 CVE-2021-36086 CVE-2021-36087 Debian Bug : 990526 Multiple...

Malicious code in @taxify/taxify-code-utils (npm)

--- -= Per source details. Do not edit below this line.=-...

[SECURITY] Fedora 41 Update: rust-tower-http-0.5.2-6.fc41

Tower middleware and utilities for HTTP clients and servers...

SUSE CVE-2024-47611

XZ Utils provide a general-purpose data-compression library plus command-line tools. When built for native Windows MinGW-w64 or MSVC, the command line tools from XZ Utils 5.6.2 and older have a command line argument injection vulnerability. If a command line contains Unicode characters for exampl...

Race Condition

Overview terra-notebook-utils is an Utilities for the Terra notebook environment. Affected versions of this package are vulnerable to Race Condition in task submission due to improper thread synchronization. The issue could lead to crashes or inconsistent task states when tasks are submitted from...

blktrace bug fix update

An update is available for blktrace. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The blktrace packages contain a number of utilities to record the I/O trace...

PT-2024-38864 · WordPress · Wp Multitasking

Name of the Vulnerable Software and Affected Versions: WP MultiTasking – WP Utilities plugin for WordPress versions up to, and including, 0.1.17 Description: The issue is related to Stored Cross-Site Scripting via the wpmt menu name parameter due to insufficient input sanitization and output...

WordPress plugin WP MultiTasking – WP Utilities 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2024-41708

An issue was discovered in AdaCore adawebservices 20.0 allows an attacker to escalate privileges and steal sessions via the RandomString function in the src/core/aws-utils.adb module...

PT-2024-29528 · Adacore · Ada Web Services

Name of the Vulnerable Software and Affected Versions: AdaCore ada web services version 20.0 Description: An issue was discovered that allows an attacker to escalate privileges and steal sessions via the Random String function in the src/core/aws-utils.adb module. This issue affects AdaCore ada w...

Ada Web Server 安全漏洞

Ada Web Server AWS is an AdaCore open source complete framework for developing web-based applications in Ada. A security vulnerability exists in Ada Web Server version 20.0, which stems from a vulnerability that allows an attacker to elevate privileges and steal sessions via the RandomString...

[SECURITY] Fedora 41 Update: iwd-2.22-1.fc41

The daemon and utilities for controlling and configuring the Wi-Fi network hardware...

[SECURITY] Fedora 41 Update: bluez-5.78-1.fc41

Utilities for use in Bluetooth applications: - avinfo - bluemoon - bluetoothctl - bluetoothd - btattach - btmon - hex2hcd - mpris-proxy The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A...

Malicious code in shopify-app-session-storage-test-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cf57abdb74d18055d8c4a31ab0fe3fb4fe3553670523254373ae3cd9a03d53d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

sos bug fix and enhancement update

An update is available for sos. This update affects Rocky Linux 8, Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The sos package contains a set of utilities that gather informatio...

RHSA-2011:0332 Red Hat Security Advisory: scsi-target-utils security update

Bulletin has no description...

Malicious code in conductor-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware debe53d4542ba37ede81c11f2616cddddf8770ea090f4b3d16482b831a489937 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

[SECURITY] Fedora 40 Update: bluez-5.78-1.fc40

Utilities for use in Bluetooth applications: - avinfo - bluemoon - bluetoothctl - bluetoothd - btattach - btmon - hex2hcd - mpris-proxy The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A...

[SECURITY] Fedora 40 Update: iwd-2.21-1.fc40

The daemon and utilities for controlling and configuring the Wi-Fi network hardware...

MAL-2024-8851 Malicious code in core-roblox-utilities (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36c128906b41aa659324dd5d01db1bec23003e69002b6649abda7c43677ae835 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...