gpp_maybe
Security update for pgadmin4
SUSE-SLE-Module-Python3-15-SP6-2024-3771
This update for pgadmin4 fixes the following issues: - CVE-2024-38355: Fixed socket.io: unhandled 'error' event (bsc#1226967) - CVE-2024-38998: Fixed requirejs: prototype pollution via function config (bsc#1227248) - CVE-2024-38999: Fixed requirejs: prototype pollution via function s.contexts._.configure (bsc#1227252) - CVE-2024-39338: Fixed axios: server-side request forgery due to requests for path relative URLs being processed as protocol relative URLs in axios (bsc#1229423) - CVE-2024-4067: Fixed micromatch: vulnerable to Regular Expression Denial of Service (ReDoS) (bsc#1224366) - CVE-2024-4068: Fixed braces: fails to limit the number of characters it can handle, which could lead to Memory Exhaustion (bsc#1224295) - CVE-2024-43788: Fixed webpack: DOM clobbering gadget in AutoPublicPathRuntimeModule could lead to XSS (bsc#1229861) - CVE-2024-48948: Fixed elliptic: ECDSA signature verification error due to leading zero may reject legitimate transactions in elliptic (bsc#1231684) - CVE-2024-48949: Fixed elliptic: Missing Validation in Elliptic's EDDSA Signature Verification (bsc#1231564) - CVE-2024-9014: Fixed OAuth2 issue that could lead to information leak (bsc#1230928)
-
Release DateOct 29 2024
-
ReferencesBugzilla: 1227248, 1229861, 1224366, 1224295, 1231564, 1227252, 1226967, 1230928, 1229423, 1231684
CVEs: CVE-2024-48949, CVE-2024-4067, CVE-2024-48948, CVE-2024-9014, CVE-2024-4068, CVE-2024-43788, CVE-2024-38998, CVE-2024-38355, CVE-2024-39338, CVE-2024-38999 -
Typesecurity
-
Severityimportant
cloud_download Downloads
Python 3 Module 15.6 aarch64
-
Packagespgadmin4
Management tool for PostgreSQLpgadmin4-doc8.5-150600.3.6.1 lock rpm lock src
Documentation for pgAdmin4system-user-pgadmin8.5-150600.3.6.1 lock rpm
System user for pgadmin8.5-150600.3.6.1 lock rpm
Python 3 Module 15.6 ppc64le
-
Packagespgadmin4
Management tool for PostgreSQLpgadmin4-doc8.5-150600.3.6.1 lock rpm lock src
Documentation for pgAdmin4system-user-pgadmin8.5-150600.3.6.1 lock rpm
System user for pgadmin8.5-150600.3.6.1 lock rpm
Python 3 Module 15.6 x86_64
-
Packagespgadmin4
Management tool for PostgreSQLpgadmin4-doc8.5-150600.3.6.1 lock rpm lock src
Documentation for pgAdmin4system-user-pgadmin8.5-150600.3.6.1 lock rpm
System user for pgadmin8.5-150600.3.6.1 lock rpm