Ubuntu: Security Advisory (USN-6673-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CI solution CI-Out-of-Office Manager 安全漏洞

CI solution CI-Out-of-Office Manager is a tool from CI solution for managing employee leave and out-of-office status. The solution is designed to streamline and automate the leave request, approval, and recording process to improve management efficiency in your organization. A security...

USN-6673-3: python-cryptography vulnerability

USN-6673-1 provided a security update for python-cryptography. This update provides the corresponding update for Ubuntu 24.04 LTS. Original advisory details: It was discovered that python-cryptography incorrectly handled memory operations when processing mismatched PKCS12 keys. A remote attacker...

USN-6673-3 python-cryptography vulnerability

USN-6673-1 provided a security update for python-cryptography. This update provides the corresponding update for Ubuntu 24.04 LTS. Original advisory details: It was discovered that python-cryptography incorrectly handled memory operations when processing mismatched PKCS12 keys. A remote attacker...

D-Link D-View Trust Management Issue Vulnerability

D-Link D-View is a Web-based design network device management software from China AUO D-Link. A trust management issue vulnerability exists in D-Link D-View8, which stems from the use of hard-coded encryption keys, and can be exploited by an attacker to bypass authentication on the system...

[SECURITY] Fedora 40 Update: rust-ssh-key-dir-0.1.4-8.fc40

sshd AuthorizedKeysCommand to read key files from /.ssh/authorizedkeys.d...

[SECURITY] Fedora 40 Update: rust-asahi-btsync-0.2.0-3.fc40

A tool to sync Bluetooth pairing keys with macos on ARM Macs...

BIT-HUBBLE-RELAY-2023-29002 Debug mode leaks confidential data in Cilium

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. When run in debug mode, Cilium will log the contents of the cilium-secrets namespace. This could include data such as TLS private keys for Ingress and GatewayAPI resources. An attacker with access to debug...

GHSA-W8CP-FRXC-55PJ Kwik does not discard unused encryption keys

Kwik commit 745fd4e2 does not discard unused encryption keys...

Kwik does not discard unused encryption keys

Kwik commit 745fd4e2 does not discard unused encryption keys...

CVE-2024-22588

Kwik commit 745fd4e2 does not discard unused encryption keys...

CVE-2024-22588

Kwik commit 745fd4e2 does not discard unused encryption keys...

CVE-2024-22588

CVE-2024-22588 concerns Kwik, where the commit 745fd4e2 does not discard unused encryption keys. Affected software is Kwik (QUIC protocol implementation). Root cause: retention of unused encryption keys rather than discarding them, as described across multiple sources (GitHub advisory, Red Hat en...

CVE-2024-22588

Kwik commit 745fd4e2 does not discard unused encryption keys...

CVE-2024-22588

Kwik commit 745fd4e2 does not discard unused encryption keys...

PT-2024-19493 · Kwik · Kwik

Name of the Vulnerable Software and Affected Versions: Kwik commit 745fd4e2 Description: The issue arises from Kwik not properly discarding unused encryption keys. Recommendations: For commit 745fd4e2, ensure that unused encryption keys are properly discarded to mitigate the issue...

Kwik 安全漏洞

Kwik is a client and server that implements the QUIC protocol RFC 9000 by the individual developer Peter Doornbosch in the Netherlands. A security vulnerability exists in Kwik commit version 745fd4e2, which stems from the retention of unused encryption keys...

kernel security and bug fix update

5.14.0-427.18.14.OL9 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

D-Link D-View 安全漏洞

D-Link D-View is a Web-based design network device management software from China AUO D-Link. A trust management issue vulnerability exists in D-Link D-View8, which stems from the use of hard-coded encryption keys, and can be exploited by an attacker to bypass authentication on the system...

tripleo-ansible: bind keys are world readable

An access-control flaw was found in the OpenStack Designate component where private configuration information including access keys to BIND were improperly made world readable. A malicious attacker with access to any container could exploit this flaw to access sensitive information...