firefox security update

115.8.0-1.0.1 - Remove upstream references Orabug: 30143292 - Update distribution for Oracle Linux Orabug: 30143292 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 115.8.0-1 - Update to 115.8.0 build1...

Astaroth, Mekotio & Ousaban abusing Google Cloud Run in LATAM-focused malware campaigns

Google Cloud Run is currently being abused in high-volume malware distribution campaigns, spreading several banking trojans such as Astaroth aka Guildma, Mekotio and Ousaban to targets across Latin America and Europe. The volume of emails associated with these campaigns has significantly increase...

Design/Logic Flaw

eProsima Fast DDS formerly Fast RTPS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Even with the application of SROS2, due to the issue where the data pUD and guid values used to disconnect between nodes are not encrypted, a vulnerability has be...

CVE-2023-50257 Disconnect Vulnerability in RTPS Packets Used by SROS2

eProsima Fast DDS formerly Fast RTPS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Even with the application of SROS2, due to the issue where the data pUD and guid values used to disconnect between nodes are not encrypted, a vulnerability has be...

CVE-2023-50257 Disconnect Vulnerability in RTPS Packets Used by SROS2

eProsima Fast DDS formerly Fast RTPS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Even with the application of SROS2, due to the issue where the data pUD and guid values used to disconnect between nodes are not encrypted, a vulnerability has be...

CVE-2023-50257 Disconnect Vulnerability in RTPS Packets Used by SROS2

eProsima Fast DDS formerly Fast RTPS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Even with the application of SROS2, due to the issue where the data pUD and guid values used to disconnect between nodes are not encrypted, a vulnerability has be...

CVE-2023-50257

CVE-2023-50257 affects eProsima Fast DDS (Fast RTPS) with SROS2. The issue: RTPS Disconnect packets (p[UD]/guid) are not encrypted, enabling a malicious actor to forcibly disconnect a Subscriber and deny connections by sending disconnect packets to 239.255.0.1:7400 using the Publisher ID. Impact ...

CVE-2023-50257

eProsima Fast DDS formerly Fast RTPS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Even with the application of SROS2, due to the issue where the data pUD and guid values used to disconnect between nodes are not encrypted, a vulnerability has be...

com.hazelcast.jet:hazelcast-jet-core (4.5.4), com.hazelcast.jet:hazelcast-jet-hadoop-core (4.5.4) +24 more potentially affected by CVE-2023-45860 via com.hazelcast:hazelcast (4.2.6)

com.hazelcast:hazelcast MAVEN version 4.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast.jet:hazelcast-jet-core 4.5.4 - com.hazelcast.jet:hazelcast-jet-hadoop-core 4.5.4 -...

com.hazelcast:hazelcast-build-utils (4.2.7), com.hazelcast:hazelcast-distribution (4.2.7) +12 more potentially affected by CVE-2023-45860 via com.hazelcast:hazelcast (4.2.7)

com.hazelcast:hazelcast MAVEN version 4.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 4.2.7 - com.hazelcast:hazelcast-distribution 4.2.7 -...

RUGGEDCOM DoS

The vulnerability of the web server of the microprogramming software platform for routing and switching solutions, RUGGEDCOM, is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

F5 BIG-IP Security Vulnerabilities

F5 BIG-IP is an application delivery platform from F5 Corporation that integrates network traffic management, application security management, load balancing, and other features. A security vulnerability exists in F5 BIG-IP that stems from an undisclosed request that may result in increased CPU...

[SECURITY] [DSA 5617-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5617-1 [email protected] https://www.debian.org/security/ Andres Salomon February 08, 2024 https://www.debian.org/security/faq -...

org.apache.pulsar:pulsar-server-distribution (3.1.0) potentially affected by CVE-2023-51437 via org.apache.pulsar:pulsar-broker-auth-sasl (3.1.0)

org.apache.pulsar:pulsar-broker-auth-sasl MAVEN version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-broker-auth-sasl and may be impacted: - org.apache.pulsar:pulsar-server-distribution 3.1.0 Source cves: CVE-2023-5143...

org.apache.pulsar:pulsar-server-distribution (3.1.0) potentially affected by CVE-2023-51437 via org.apache.pulsar:pulsar-broker-auth-sasl (3.1.0)

org.apache.pulsar:pulsar-broker-auth-sasl MAVEN version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-broker-auth-sasl and may be impacted: - org.apache.pulsar:pulsar-server-distribution 3.1.0 Source cves: CVE-2023-5143...

org.apache.pulsar:pulsar-docker-image (>=2.4.0, <=2.7.5), org.apache.pulsar:pulsar-server-distribution (>=2.4.0, <=2.11.2) potentially affected by CVE-2023-51437 via org.apache.pulsar:pulsar-broker-auth-sasl (>=2.4.0, <=2.11.2)

org.apache.pulsar:pulsar-broker-auth-sasl MAVEN version =2.4.0, =2.4.0, =2.4.0, =2.11.2 Source cves: CVE-2023-51437 Source advisory: OSV:GHSA-C57V-4VG5-CM2X...

org.apache.pulsar:pulsar-server-distribution (>=3.0.0, <=3.0.1) potentially affected by CVE-2023-51437 via org.apache.pulsar:pulsar-broker-auth-sasl (>=3.0.0, <=3.0.1)

org.apache.pulsar:pulsar-broker-auth-sasl MAVEN version =3.0.0, =3.0.0, =3.0.1 Source cves: CVE-2023-51437 Source advisory: OSV:GHSA-C57V-4VG5-CM2X...

org.apache.pulsar:pulsar-docker-image (>=2.4.0, <=2.7.5), org.apache.pulsar:pulsar-server-distribution (>=2.4.0, <=2.11.2) potentially affected by CVE-2023-51437 via org.apache.pulsar:pulsar-broker-auth-sasl (>=2.4.0, <=2.11.2)

org.apache.pulsar:pulsar-broker-auth-sasl MAVEN version =2.4.0, =2.4.0, =2.4.0, =2.11.2 Source cves: CVE-2023-51437 Source advisory: GHSA-C57V-4VG5-CM2X...

org.apache.pulsar:pulsar-server-distribution (>=3.0.0, <=3.0.1) potentially affected by CVE-2023-51437 via org.apache.pulsar:pulsar-broker-auth-sasl (>=3.0.0, <=3.0.1)

org.apache.pulsar:pulsar-broker-auth-sasl MAVEN version =3.0.0, =3.0.0, =3.0.1 Source cves: CVE-2023-51437 Source advisory: GHSA-C57V-4VG5-CM2X...

org.apache.pulsar:pulsar-docker-image (>=2.4.0, <=2.7.5), org.apache.pulsar:pulsar-server-distribution (>=2.4.0, <=2.11.2) potentially affected by CVE-2023-51437 via org.apache.pulsar:pulsar-broker-auth-sasl (>=2.4.0, <=2.11.2)

org.apache.pulsar:pulsar-broker-auth-sasl MAVEN version =2.4.0, =2.4.0, =2.4.0, =2.11.2 Source cves: CVE-2023-51437 Source advisory: MEND:CVE-2023-51437...