kernel: drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()'

An out-of-bounds access flaw was found in drivers/gpu/drm/amd/amdgpu/amdgpudiscovery.c in the Linux kernel. This issue may lead to a crash...

OSV-2024-1140 Security exception in java.base/java.util.Arrays.copyOfRange

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=368729567 Crash type: Security exception Crash state: java.base/java.util.Arrays.copyOfRange java.base/java.lang.StringUTF16.newString java.base/java.lang.StringBuilder.toString...

PT-2024-40582 · Git +1 · Maven-Model

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A security exception crash was reported, involving the java.base/java.util.Arrays.copyOfRange, java.base/java.lang.StringUTF16.newString, and...

Ghostscript Heap Buffer Overflow DoS

The vulnerability of the base/gpmisc.c file in the software suite for processing, converting, and generating Ghostscript documents is related to improper validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

OESA-2024-2159 ghostscript security update

Ghostscript is an interpreter for PostScript™ and Portable Document Format PDF files. Ghostscript consists of a PostScript interpreter layer, and a graphics library. Security Fixes: Artifex Ghostscript before 10.03.0 has a heap-based pointer disclosure observable in a constructed BaseFont name in...

OESA-2024-2161 ghostscript security update

Ghostscript is an interpreter for PostScript™ and Portable Document Format PDF files. Ghostscript consists of a PostScript interpreter layer, and a graphics library. Security Fixes: Artifex Ghostscript before 10.03.0 has a heap-based pointer disclosure observable in a constructed BaseFont name in...

OESA-2024-2160 ghostscript security update

Ghostscript is an interpreter for PostScript™ and Portable Document Format PDF files. Ghostscript consists of a PostScript interpreter layer, and a graphics library. Security Fixes: Artifex Ghostscript before 10.03.0 has a heap-based pointer disclosure observable in a constructed BaseFont name in...

Fedora: Security Advisory (FEDORA-2024-f652468298)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

de.gematik.refv.valmodule:valmodule-diga (0.6.1), de.gematik.refv.valmodule:valmodule-eau (0.6.1) +7 more potentially affected by CVE-2024-46984 via de.gematik.refv.commons:commons (0.6.1)

de.gematik.refv.commons:commons MAVEN version 0.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on de.gematik.refv.commons:commons and may be impacted: - de.gematik.refv.valmodule:valmodule-diga 0.6.1 - de.gematik.refv.valmodule:valmodule-eau 0.6.1 -...

de.gematik.refv.valmodule:valmodule-core (1.0.0), de.gematik.refv.valmodule:valmodule-diga (1.0.0) +7 more potentially affected by CVE-2024-46984 via de.gematik.refv.commons:commons (1.0.0)

de.gematik.refv.commons:commons MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on de.gematik.refv.commons:commons and may be impacted: - de.gematik.refv.valmodule:valmodule-core 1.0.0 - de.gematik.refv.valmodule:valmodule-diga 1.0.0 -...

de.gematik.refv.valmodule:valmodule-eau (0.4.1), de.gematik.refv.valmodule:valmodule-erp (0.4.1) +3 more potentially affected by CVE-2024-46984 via de.gematik.refv.commons:commons (0.4.1)

de.gematik.refv.commons:commons MAVEN version 0.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on de.gematik.refv.commons:commons and may be impacted: - de.gematik.refv.valmodule:valmodule-eau 0.4.1 - de.gematik.refv.valmodule:valmodule-erp 0.4.1 -...

de.gematik.refv.valmodule:valmodule-diga (0.6.0), de.gematik.refv.valmodule:valmodule-eau (0.6.0) +6 more potentially affected by CVE-2024-46984 via de.gematik.refv.commons:commons (0.6.0)

de.gematik.refv.commons:commons MAVEN version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on de.gematik.refv.commons:commons and may be impacted: - de.gematik.refv.valmodule:valmodule-diga 0.6.0 - de.gematik.refv.valmodule:valmodule-eau 0.6.0 -...

kernel: mm/shmem: disable PMD-sized page cache if needed

A denial of service vulnerability was found in the Linux Kernel. In architectures such as ARM64 where the base page size is 64KB, a 512MB page cache could lead to a software crash...

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Node.js

Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of Node.js Vulnerability Details CVEID:CVE-2024-30261 DESCRIPTION: Node.js undici module could allow a remote authenticated attacker to bypass security restrictions, caused by a flaw with fetch with integrity...

389-ds:1.4 security update

An update is available for module.389-ds-base, 389-ds-base. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list 389 Directory Server is an LDAP version 3 LDAPv3...

sos bug fix and enhancement update

An update is available for sos. This update affects Rocky Linux 8, Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The sos package contains a set of utilities that gather informatio...

RHSA-2024:3088 Red Hat Security Advisory: gstreamer1-plugins-base security update

Bulletin has no description...

RHSA-2024:2302 Red Hat Security Advisory: gstreamer1-plugins-base security update

Bulletin has no description...

Exploit for OS Command Injection in Ivanti Cloud_Services_Appliance

CVE-2024-8190: Ivanti Cloud Service Appliance Authenticated Co...

Malware in afe-base-component

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...