February 13, 2024—KB5034833 (Security-only update)

None None...

KB5034867: Servicing stack update for Windows Server 2008 SP2: February 13, 2024

None None...

CLSA-2024-1707478721 kernel: Fix of 11 CVEs

netfilter: nftables: reject QUEUE/DROP verdict parameters CVE-2024-1086 - RDMA/core: Refactor rdmabindaddr CVE-2023-2176 - RDMA/cma: Do not change route.addr.srcaddr outside state checks - RDMA/cma: Ensure rdmaaddrcancel happens before issuing more requests - drm/amdgpu: Fix potential fence...

Huawei EulerOS: Security Advisory for tar (EulerOS-SA-2024-1208)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Software Publico e-Sic Livre Code Issue Vulnerability

Software Publico e-Sic Livre is a solution from the Brazilian company Software Publico designed to manage public services based on Q&A. A code issue vulnerability exists in Software Publico e-Sic Livre v.2.0 and prior versions, which stems from the presence of a file upload vulnerability that cou...

EulerOS 2.0 SP9 : tar (EulerOS-SA-2024-1188)

According to the versions of the tar package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in tar. This issue occurs when extended attributes are processed in PAX archives, and could allow an attacker to cause an applicati...

SUSE SLES15: libnss_slurm2 / libpmi0 / libslurm35 / perl-slurm / slurm / etc (SUSE-SU-2024:0287-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0287-1 advisory. Security fixes: - CVE-2023-49933: Prevent message extension attacks that could bypass the message hash. bsc1218046 - CVE-2023-49936: Prevent NU...

Mozilla: Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7

The Mozilla Foundation Security Advisory describes this flaw as: Memory safety bugs present in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run...

Mozilla: Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7

The Mozilla Foundation Security Advisory describes this flaw as: Memory safety bugs present in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run...

Mozilla: Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7

The Mozilla Foundation Security Advisory describes this flaw as: Memory safety bugs present in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run...

Mozilla: Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7

The Mozilla Foundation Security Advisory describes this flaw as: Memory safety bugs present in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run...

The vulnerability in the floating notifications of Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to gain permission for a website.

The vulnerability in the floating notifications of Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to insufficient warnings about dangerous actions. Exploiting this vulnerability allows a remote attacker to grant permissions to a website...

GHSA-7MGG-3RQ2-HFF4 ai-flow Deserialization of Untrusted Data vulnerability

A vulnerability was found in flink-extended ai-flow 0.3.1. It has been declared as critical. Affected by this vulnerability is the function cloudpickle.loads of the file \aiflow\cli\commands\workflowcommand.py. The manipulation leads to deserialization. The attack can be launched remotely. The...

ai-flow Deserialization of Untrusted Data vulnerability

A vulnerability was found in flink-extended ai-flow 0.3.1. It has been declared as critical. Affected by this vulnerability is the function cloudpickle.loads of the file \aiflow\cli\commands\workflowcommand.py. The manipulation leads to deserialization. The attack can be launched remotely. The...

CVE-2024-0960

A vulnerability was found in flink-extended ai-flow 0.3.1. It has been declared as critical. Affected by this vulnerability is the function cloudpickle.loads of the file \aiflow\cli\commands\workflowcommand.py. The manipulation leads to deserialization. The attack can be launched remotely. The...

CVE-2024-0960 flink-extended ai-flow workflow_command.py cloudpickle.loads deserialization

A vulnerability was found in flink-extended ai-flow 0.3.1. It has been declared as critical. Affected by this vulnerability is the function cloudpickle.loads of the file \aiflow\cli\commands\workflowcommand.py. The manipulation leads to deserialization. The attack can be launched remotely. The...

CVE-2024-0960 flink-extended ai-flow workflow_command.py cloudpickle.loads deserialization

A vulnerability was found in flink-extended ai-flow 0.3.1. It has been declared as critical. Affected by this vulnerability is the function cloudpickle.loads of the file \aiflow\cli\commands\workflowcommand.py. The manipulation leads to deserialization. The attack can be launched remotely. The...

CVE-2024-0960 flink-extended ai-flow workflow_command.py cloudpickle.loads deserialization

A vulnerability was found in flink-extended ai-flow 0.3.1. It has been declared as critical. Affected by this vulnerability is the function cloudpickle.loads of the file \aiflow\cli\commands\workflowcommand.py. The manipulation leads to deserialization. The attack can be launched remotely. The...

CVE-2024-0960

CVE-2024-0960 affects the open-source framework flink-extended ai-flow 0.3.1 . The vulnerability targets the function cloudpickle.loads within the file ai_flow/cli/commands/workflow_command.py , enabling a deserialization flaw. According to connected sources, the attack can be launched remotely o...

ai-flow Code Issue Vulnerability

ai-flow is an open source framework for connecting big data and artificial intelligence. A code issue vulnerability exists in flink-extended ai-flow version 0.3.1, which stems from a security issue in the function cloudpickle.loads in aiflowclicommandsworkflowcommand.py, leading to deserializatio...