[SECURITY] [DLA 3206-1] heimdal security update

Debian LTS Advisory DLA-3206-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin November 26, 2022 https://wiki.debian.org/LTS Package : heimdal Version : 7.5.0+dfsg-3+deb10u1 CVE ID : CVE-2019-14870 CVE-2021-3671 CVE-2021-44758 CVE-2022-3437 CVE-2022-41916...

[SECURITY] [DSA 5287-1] heimdal security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5287-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 22, 2022 https://www.debian.org/security/faq -...

bind security update

32:9.16.23-5 - Fix possible serve-stale related crash CVE-2022-3080 - Fix memory leak in ECDSA verify processing CVE-2022-38177 - Fix memory leak in EdDSA verify processing CVE-2022-38178 32:9.16.23-4 - Export bind-doc package 2104863 32:9.16.23-3 - Tighten cache protection against record from...

SUSE SLES15: krb5 / krb5-32bit / krb5-client / krb5-devel / krb5-plugin-kdb-ldap / etc (SUSE-SU-2022:4154-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:4154-1 advisory. - CVE-2021-37750: Fixed KDC null pointer dereference via a FAST inner body that lacks a server field bsc1189929. - CVE-2022-42898:...

libguestfs security, bug fix, and enhancement update

1.48.4-2.0.1 - Add btrfs-progs to the packages installed in the appliance Orabug: 34137448 - Replace upstream references from a description tag - Fix build on Oracle Linux Orabug: 29319324 - Set DISTROORACLELINUX correspeonding to ol 1:1.48.4-2 - Rebase to new stable branch version 1.48.4 resolve...

CVE-2022-43782

Affected versions of Atlassian Crowd allow an attacker to authenticate as the crowd application via security misconfiguration and subsequent ability to call privileged endpoints in Crowd's REST API under the usermanagement path. This vulnerability can only be exploited by IPs specified under the...

CVE-2022-30283

In UsbCoreDxe, tampering with the contents of the USB working buffer using DMA while certain USB transactions are in process leads to a TOCTOU problem that could be used by an attacker to cause SMRAM corruption and escalation of privileges The UsbCoreDxe module creates a working buffer for USB...

openjpeg2 security update

2.4.0-5 - Fix CVE-2022-1122...

CVE-2022-30772

Summary: CVE-2022-30772 describes a memory corruption vulnerability in InsydeH2O BIOS/SMM related to the PnpSmm function 0x52. The input address and size passed to the SMBIOS write operation can be manipulated, enabling a malware attacker with local access to potentially overwrite SMRAM or OS ker...

Buffer Over Read

wolfSSL is vulnerable to buffer overreads. The vulnerability exists if callback functions are enabled via the WOLFSSLCALLBACKS flag which allows an attacker to trigger a buffer over-read on the heap of 5 bytes...

CVE-2021-34577

In the Kaden PICOFLUX AiR water meter an adversary can read the values through wireless M-Bus mode 5 with a hardcoded shared key while being adjacent to the device...

PT-2022-10357 · Kaden · Kaden Picoflux Air

Name of the Vulnerable Software and Affected Versions: Kaden PICOFLUX AiR water meter affected versions not specified Description: The issue allows an adversary to read values from the device through wireless M-Bus mode 5, utilizing a hardcoded shared key, provided they are adjacent to the device...

krb5 bug fix and enhancement update

An update is available for krb5. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8.7...

qt5 security, bug fix, and enhancement update

An update is available for qt5. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Qt5 libraries packages provide Qt 5, version 5 of the Qt cross-platform...

sannioteatrieculture.it Cross Site Scripting vulnerability OBB-3038543

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

josefzolk.de Cross Site Scripting vulnerability OBB-3037610

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

adtob.md Cross Site Scripting vulnerability OBB-3037425

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

model-sedcard.net Cross Site Scripting vulnerability OBB-3037192

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

vattucongnghiepbinhduong.net Cross Site Scripting vulnerability OBB-3036836

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

gcaoa.org Cross Site Scripting vulnerability OBB-3036632

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...