[SECURITY] [DLA 3936-1] activemq security update

Debian LTS Advisory DLA-3936-1 [email protected] https://www.debian.org/lts/security/ Santiago Ruano Rincón October 25, 2024 https://wiki.debian.org/LTS Package : activemq Version : 5.16.1-1+deb11u1 CVE ID : CVE-2022-41678 CVE-2023-46604 Debian Bug : 1054909 Two vulnerabilities were fou...

CVE-2024-10342

creationtimestamp| type| source ---|---|--- 2024-10-25 11:13:51+00:00| seen| https://t.me/cvedetector/8911...

[SECURITY] [DLA 3935-1] distro-info-data database update

Debian LTS Advisory DLA-3935-1 [email protected] https://www.debian.org/lts/security/ Stefano Rivera October 24, 2024 https://wiki.debian.org/LTS Package : distro-info-data Version : 0.51+deb11u7 This is a routine update of the distro-info-data database for Debian LTS users. It adds...

Debian dla-3935 : distro-info-data - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-3935 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3935-1 [email protected] https://www.debian.org/lts/security/...

RockyLinux 8 / 9 : java-11-openjdk (RLSA-2024:8121)

The remote RockyLinux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:8121 advisory. giflib: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function CVE-2023-48161 JDK: Array indexing integer overflow 8328544 CVE-2024-2121...

Debian: Security Advisory (DLA-3935-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian dla-3936 : activemq - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3936 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3936-1 [email protected]...

OpenRefine's SQLite integration allows filesystem access, remote code execution (RCE)

Summary In the database extension, the "enableloadextension" property can be set for the SQLite integration, enabling an attacker to load local or remote extension DLLs and so run arbitrary code on the server. The attacker needs to have network access to the OpenRefine instance. Details The...

CVE-2024-20412

creationtimestamp| type| source ---|---|--- 2024-10-23 20:45:17+00:00| seen| https://t.me/cvedetector/8758 2024-10-24 07:48:30+00:00| seen| https://t.me/CyberBulletin/1243 2024-10-24 07:48:30+00:00| seen| https://t.me/CyberBulletin/26178 2024-10-24 18:00:07+00:00| exploited|...

Debian: Security Advisory (DLA-3933-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-3932-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3934-1] libheif security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3934-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb October 22, 2024 https://wiki.debian.org/LTS -...

The severity of the Elevation of Privilege – Windows Kernel-Mode Driver (CVE-2024-35250) vulnerability has increased

The severity of the Elevation of Privilege - Windows Kernel-Mode Driver CVE-2024-35250 vulnerability has increased. This vulnerability was fixed as part of the June Microsoft Patch Tuesday. As in the case of the CVE-2024-30090 vulnerability, it was discovered by a researcher with the nickname...

AZL-50757 CVE-2024-9287 affecting package python3 for versions less than 3.9.19-11

A vulnerability has been found in the CPython venv module and CLI where path names provided when creating a virtual environment were not quoted properly, allowing the creator to inject commands into virtual environment "activation" scripts ie "source venv/bin/activate". This means that...

[SECURITY] [DLA 3931-1] ghostscript security update

Debian LTS Advisory DLA-3931-1 [email protected] https://www.debian.org/lts/security/ Sean Whitton October 22, 2024 https://wiki.debian.org/LTS Package : ghostscript Version : 9.53.3dfsg-7+deb11u8 CVE ID : CVE-2024-29508 A heap-based pointer disclosure problem was found in Ghostscript, ...

Debian: Security Advisory (DLA-3931-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-3930-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-3927-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian dla-3930 : libsepol1 - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3930 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3930-1 [email protected]...

Debian dla-3931 : ghostscript - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-3931 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3931-1 [email protected] https://www.debian.org/lts/security/...