Ubuntu 18.04 ESM / 20.04 LTS : dwarves vulnerabilities (USN-6215-1)

The remote Ubuntu 18.04 ESM / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6215-1 advisory. It was discovered that dwarves incorrectly handled certain memory operations under certain circumstances. An attacker could possibly use this...

[SECURITY] [DLA 3493-1] symfony security update

Debian LTS Advisory DLA-3493-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin July 11, 2023 https://wiki.debian.org/LTS Package : symfony Version : 3.4.22+dfsg-2+deb10u2 CVE ID : CVE-2021-21424 CVE-2022-24894 CVE-2022-24895 Multiple security vulnerabilities were...

[SECURITY] [DLA 3492-1] yajl security update

Debian LTS Advisory DLA-3492-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost July 11, 2023 https://wiki.debian.org/LTS Package : yajl Version : 2.1.0-3+deb10u2 CVE ID : CVE-2017-16516 CVE-2022-24795 CVE-2023-33460 Debian Bug : 1040036 Multiple vulnerabilties have...

USN-6216-1: lib3mf vulnerability

It was discovered that lib3mf did not properly manage memory under certain circumstances. If a user were tricked into opening a specially crafted 3MF file, a local attacker could possibly use this issue to cause applications using lib3mf to crash, resulting in a denial of service, or possibly...

Debian dla-3492 : libyajl-dev - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3492 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3492-1 [email protected]...

Debian dla-3488 : node-tough-cookie - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3488 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3488-1 [email protected] https://www.debian.org/lts/security/...

[SECURITY] [DLA 3489-1] mediawiki security update

Debian LTS Advisory DLA-3489-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany July 10, 2023 https://wiki.debian.org/LTS Package : mediawiki Version : 1:1.31.16-1+deb10u5 CVE ID : CVE-2022-47927 A security issue was discovered in MediaWiki, a website engine for...

[SECURITY] [DLA 3488-1] node-tough-cookie security update

Debian LTS Advisory DLA-3488-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin July 10, 2023 https://wiki.debian.org/LTS Package : node-tough-cookie Version : 2.3.4+dfsg-1+deb10u1 CVE ID : CVE-2023-26136 Kokorin Vsevolod discovered a Prototype Pollution vulnerabili...

Exploit for Out-of-bounds Write in Polkit_Project Polkit

Exploit for CVE-2021-4034 Pkexec - Local Privilege Escalatio...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 ESM : Gerbv vulnerabilities (USN-6209-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 ESM host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6209-1 advisory. Claudio Bozzato discovered that Gerbv incorrectly handled certain Gerber files. An attacker could possibly use this...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 : Doorkeeper vulnerability (USN-6210-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 host has a package installed that is affected by a vulnerability as referenced in the USN-6210-1 advisory. It was discovered that Doorkeeper incorrectly performed authorization checks for public clients that have been previou...

Ubuntu 20.04 LTS / 22.04 LTS / 23.04 : Ghostscript vulnerability (USN-6213-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 host has packages installed that are affected by a vulnerability as referenced in the USN-6213-1 advisory. It was discovered that Ghostscript incorrectly handled pipe devices. If a user or automated system were tricked into opening a specially craft...

Debian dla-3484 : firefox-esr - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3484 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3484-1 [email protected]...

Debian dla-3485 : php-cas - security update

"The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3485 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3485-1 [email protected] https://www.debian.org/lts/security/...

[SECURITY] [DLA 3484-1] firefox-esr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3484-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort July 08, 2023 https://wiki.debian.org/LTS -...

USN-6210-1: Doorkeeper vulnerability

It was discovered that Doorkeeper incorrectly performed authorization checks for public clients that have been previous approved. An attacker could potentially exploit these in order to impersonate another user and obtain sensitive information...

USN-6209-1 Gerbv vulnerabilities

Claudio Bozzato discovered that Gerbv incorrectly handled certain Gerber files. An attacker could possibly use this issue to crash Gerbv resulting in a denial of service, or execute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS...

[SECURITY] [DLA 3482-1] debian-archive-keyring update

Debian LTS Advisory DLA-3482-1 [email protected] https://www.debian.org/lts/security/ Jochen Sprickerhof July 07, 2023 https://wiki.debian.org/LTS Package : debian-archive-keyring Version : 2019.1+deb10u2 CVE ID : Debian Bug : debian-archive-keyring is a package containing GnuPG archive...

Ubuntu: Security Advisory (USN-6206-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6206-1: Linux kernel (OEM) vulnerabilities

Hangyu Hua discovered that the Flower classifier implementation in the Linux kernel contained an out-of-bounds write vulnerability. An attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2023-35788, LP: 2023577 It was discovered that the NTFS...