TencentOS Server 4: python-yaql (TSSA-2024:1088)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:1088 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

python-muranoclient (>=0.5.8 <=0.6.0), slacktivate (>=0.2.1 <=0.2.26) +1 more potentially affected by CVE-2024-29156 via yaql (>=0.2.7 <=2.0.1)

yaql PYPI version =0.2.7, =0.5.8, =0.2.1, =0.2.26 - yglu =1.1.2 Source cves: CVE-2024-29156 Source advisory: OSV:GHSA-MVF6-HWXH-7V76...

CVE-2024-29156

creationtimestamp| type| source ---|---|--- 2024-03-18 08:21:35+00:00| seen| https://t.me/ctinow/210260 2024-03-18 08:26:46+00:00| seen| https://t.me/ctinow/210261 2024-04-09 11:11:05+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10275 2024-08-16 09:16:45+00:00| seen|...