Db2 For Linux, UNIX And Windows Security Vulnerabilities

Updated nano packages fix security vulnerability

A vulnerability was found in GNU Nano that allows a possible privilege escalation through an insecure temporary file. If Nano is killed while editing, a file it saves to an emergency file with the permissions of the running user provides a window of opportunity for attackers to escalate privileges....

Updated atril packages fix security vulnerability

Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A path traversal and arbitrary file write vulnerability exists in versions of Atril prior to 1.26.2. This vulnerability is capable of writing arbitrary files anywhere on the filesystem to which the user....

Updated nss & firefox packages fix security vulnerabilities

Use-after-free in networking. (CVE-2024-5702) Use-after-free in JavaScript object transplant. (CVE-2024-5688) External protocol handlers leaked by timing attack. (CVE-2024-5690) Sandboxed iframes were able to bypass sandbox restrictions to open a new window. (CVE-2024-5691) Cross-Origin Image leak....

CVE-2024-38395

In iTerm2 before 3.5.2, the "Terminal may report window title" setting is not honored, and thus remote code execution might occur but "is not trivially...

CVE-2024-38395

In iTerm2 before 3.5.2, the "Terminal may report window title" setting is not honored, and thus remote code execution might occur but "is not trivially...

CVE-2024-38394

Mismatches in interpreting USB authorization policy between GNOME Settings Daemon (GSD) through 46.0 and the Linux kernel's underlying device matching logic allow a physically proximate attacker to access some unintended Linux kernel USB functionality, such as USB device-specific kernel modules...

CVE-2024-38394

Mismatches in interpreting USB authorization policy between GNOME Settings Daemon (GSD) through 46.0 and the Linux kernel's underlying device matching logic allow a physically proximate attacker to access some unintended Linux kernel USB functionality, such as USB device-specific kernel modules...

CVE-2024-38395

In iTerm2 before 3.5.2, the "Terminal may report window title" setting is not honored, and thus remote code execution might occur but "is not trivially...

Alleged Boss of ‘Scattered Spider’ Hacking Group Arrested

A 22-year-old man from the United Kingdom arrested this week in Spain is allegedly the ringleader of Scattered Spider, a cybercrime group suspected of hacking into Twilio, LastPass, DoorDash, Mailchimp, and nearly 130 other organizations over the past two years. The Spanish daily Murcia Today...

ectm.fr Cross Site Scripting vulnerability OBB-3935473

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

toutembal.fr Cross Site Scripting vulnerability OBB-3935472

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

GHSA-CFGP-2977-2FMM vulnerabilities

Vulnerabilities for packages: calico,...

GHSA-VR64-R9QJ-H27F vulnerabilities

Vulnerabilities for packages:...

CVE-2024-29131 vulnerabilities

Vulnerabilities for packages: cassandra-reaper, neo4j,...

CVE-2024-25620 vulnerabilities

Vulnerabilities for packages: k9s, kots, zot, trivy, helm-push, kubescape, cilium-cli, flux-source-controller, chartmuseum, helm-operator, k8sgpt, up, zarf, flux-helm-controller, cert-manager, istio-operator,...

GHSA-7WW5-4WQC-M92C vulnerabilities

Vulnerabilities for packages: kubevela, gitness, newrelic-infrastructure-agent, cert-manager, helm, ctop, k3d, kubescape, melange, up, fuse-overlayfs-snapshotter, eksctl, zot, trivy, cilium-cli, flux-source-controller, kaniko, telegraf, kots, helm-push, tekton-pipelines, grype, neuvector-agent,...

GHSA-R53H-JV2G-VPX6 vulnerabilities

Vulnerabilities for packages: k9s, kots, zot, trivy, helm-push, kubescape, cilium-cli, flux-source-controller, chartmuseum, helm-operator, k8sgpt, up, zarf, flux-helm-controller, cert-manager, istio-operator,...

CVE-2024-4368 vulnerabilities

Vulnerabilities for packages:...

GHSA-JX24-3G7H-4QJ2 vulnerabilities

Vulnerabilities for packages:...

CVE-2024-3914 vulnerabilities

Vulnerabilities for packages:...

GHSA-5R57-JCC8-JHH3 vulnerabilities

Vulnerabilities for packages:...

GHSA-JFH3-F27X-P9GP vulnerabilities

Vulnerabilities for packages:...

CVE-2024-5159 vulnerabilities

Vulnerabilities for packages:...

CVE-2024-5834 vulnerabilities

Vulnerabilities for packages:...

CVE-2024-5837 vulnerabilities

Vulnerabilities for packages:...

GHSA-FCHP-8M28-G68F vulnerabilities

Vulnerabilities for packages:...

GHSA-G9F9-C2XM-RWMM vulnerabilities

Vulnerabilities for packages:...

CVE-2023-43620 vulnerabilities

Vulnerabilities for packages:...

CVE-2024-5493 vulnerabilities

Vulnerabilities for packages:...

CVE-2024-5494 vulnerabilities

Vulnerabilities for packages:...

GHSA-X989-52FC-4VR4 vulnerabilities

Vulnerabilities for packages: cilium,...

CVE-2023-43618 vulnerabilities

Vulnerabilities for packages:...

CVE-2024-21506 vulnerabilities

Vulnerabilities for packages: datadog-agent, kubeflow-pipelines-visualization-server,...

CVE-2020-15136 vulnerabilities

Vulnerabilities for packages:...

GHSA-99PG-GRM5-QQ3V vulnerabilities

Vulnerabilities for packages:...

CVE-2021-43565 vulnerabilities

Vulnerabilities for packages: k3d,...

CVE-2024-2961 vulnerabilities

Vulnerabilities for packages:...

CVE-2024-33599 vulnerabilities

Vulnerabilities for packages:...

CVE-2024-1442 vulnerabilities

Vulnerabilities for packages:...

CVE-2024-24579 vulnerabilities

Vulnerabilities for packages: k9s, kubescape, wolfictl, syft, grype,...

GHSA-HPXR-W9W7-G4GV vulnerabilities

Vulnerabilities for packages: k9s, kubescape, wolfictl, syft, grype,...

CVE-2023-40225 vulnerabilities

Vulnerabilities for packages:...

CVE-2024-28860 vulnerabilities

Vulnerabilities for packages:...

GHSA-CJ6R-8PXJ-5JV6 vulnerabilities

Vulnerabilities for packages:...

GHSA-HFRX-6QGJ-FP6C vulnerabilities

Vulnerabilities for packages:...

GHSA-RRGP-C2W8-6VG6 vulnerabilities

Vulnerabilities for packages:...

GHSA-6F9G-CXWR-Q5JR vulnerabilities

Vulnerabilities for packages:...

GHSA-R4Q3-7G4Q-X89M vulnerabilities

Vulnerabilities for packages:...

GHSA-CJGM-9VC9-56MX vulnerabilities

Vulnerabilities for packages:...

GHSA-CCGV-VJ62-XF9H vulnerabilities

Vulnerabilities for packages:...