OESA-2024-1790 glib2 security update

GLib is a bundle of three formerly five low-level system libraries written in C and developed mainly by GNOME. GLib's code was separated from GTK, so it can be used by software other than GNOME and has been developed in parallel ever since. Security Fixes: An issue was discovered in GNOME GLib...

ROS-20240703-10

Vulnerability of usbguard-dbus daemon of USBGuard USB device protection software is related to an error of access error of an unprivileged user who could connect USB devices. Exploitation of the vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, a...

OPENSUSE-SU-2024:10711-1 dbus-1-1.12.20-5.5 on GA media

These are all security issues fixed in the dbus-1-1.12.20-5.5 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12996-1 dbus-1-1.14.8-1.1 on GA media

These are all security issues fixed in the dbus-1-1.14.8-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10280-1 dbus-1-glib-0.108-2.1 on GA media

These are all security issues fixed in the dbus-1-glib-0.108-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10517-1 dbus-1-1.10.12-2.1 on GA media

These are all security issues fixed in the dbus-1-1.10.12-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12448-1 dbus-1-1.14.4-1.1 on GA media

These are all security issues fixed in the dbus-1-1.14.4-1.1 package on the GA media of openSUSE Tumbleweed...

virt:kvm_utils1 security update

hivex libguestfs libguestfs-winsupport libiscsi libnbd libvirt 5.7.0-42 - Document CVEs as fixed Karl Heubaum CVE-2023-2700 - Fix off-by-one error in udevListInterfacesByStatus Martin Kletzander Orabug: 36364474 CVE-2024-1441 - libvirt- : Check caller-provided buffers to be NULL with size 0 Erik...

fprintd Security Vulnerabilities

fprintd is a D-Bus service access fingerprint reader open-sourced by libfprint. A security vulnerability exists in fprintd version 1.94.3 and earlier versions, which stems from the lack of a security attention mechanism...

CVE-2022-28655

isclosingsession allows users to create arbitrary tcp dbus connections...

CVE-2022-28655

isclosingsession allows users to create arbitrary tcp dbus connections...

CVE-2022-28655

isclosingsession allows users to create arbitrary tcp dbus connections...

CVE-2022-28655: Allocation of Resources Without Limits or Throttling

isclosingsession allows users to create arbitrary tcp dbus connections...

RHEL 7 : dbus (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - dbus: denial of service when forwarding invalid file descriptors CVE-2014-3533 - The dbus-daemon in D-Bus...

RHEL 6 : dbus (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - dbus: denial of service when forwarding invalid file descriptors CVE-2014-3533 - The dbus-daemon in D-Bus...

RHEL 4 : dbus (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - dbus: incorrect use of send|receiverequestedreply policy rule attribute in system.conf CVE-2008-4311 Note that Ness...

RHEL 4 : pidgin (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - pidgin: libpurple no way to restrict private messages from being sent over session dbus CVE-2012-1257 -...

RHEL 6 : pidgin (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - pidgin: Out-of-bounds write in purplemarkupunescapeentity triggered by invalid XML CVE-2017-2640 - Pidgin...

RHEL 5 : dbus (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - dbus: incorrect use of send|receiverequestedreply policy rule attribute in system.conf CVE-2008-4311 -...

Oracle Linux 8 : virt:ol / and / virt-devel:rhel (ELSA-2024-3253)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-3253 advisory. - remote: check for negative array lengths before allocation CVE-2024-2494 libvirt-dbus libvirt-python nbdkit netcf perl-Sys-Virt qemu-kvm - Resolves: RHEL-1962...