USN-6205-1: Linux kernel (GKE) vulnerabilities

Hangyu Hua discovered that the Flower classifier implementation in the Linux kernel contained an out-of-bounds write vulnerability. An attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2023-35788, LP: 2023577 It was discovered that for some...

CVE-2023-35937

Metersphere is an open source continuous testing platform. In versions prior to 2.10.2 LTS, some key APIs in Metersphere lack permission checks. This allows ordinary users to execute APIs that can only be executed by space administrators or project administrators. For example, ordinary users can ...

Debian dla-3479 : golang-gopkg-yaml.v2-dev - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3479 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3479-1 [email protected]...

USN-6201-1: Firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. CVE-2023-37201, CVE-2023-37202,...

Ubuntu 20.04 LTS : Firefox vulnerabilities (USN-6201-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6201-1 advisory. Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially explo...

Ubuntu 20.04 LTS / 22.04 LTS / 23.04 : Django vulnerability (USN-6203-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 host has a package installed that is affected by a vulnerability as referenced in the USN-6203-1 advisory. Seokchan Yoon discovered that Django incorrectly handled certain regular expressions. A remote attacker could possibly use this issue to cause...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 ESM / 23.04 : ImageMagick vulnerabilities (USN-6200-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 ESM / 23.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6200-1 advisory. It was discovered that ImageMagick incorrectly handled the -authenticate option for password-protected PDF...

Ubuntu 22.04 LTS : Vim vulnerabilities (USN-6195-1)

The remote Ubuntu 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6195-1 advisory. It was discovered that Vim contained an out-of-bounds read vulnerability. An attacker could possibly use this issue to cause a denial of service or execu...

Debian dla-3476 : cups - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3476 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3476-1 [email protected] https://www.debian.org/lts/security/...

Debian dla-3478 : libyajl-dev - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3478 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3478-1 [email protected] https://www.debian.org/lts/security/...

Debian dla-3477 : idle-python3.7 - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3477 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3477-1 [email protected]...

[SECURITY] [DLA 3477-1] python3.7 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3477-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk June 30, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3476-1] cups security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3476-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz June 30, 2023 https://wiki.debian.org/LTS -...

Debian dla-3475 : trafficserver - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3475 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3475-1 [email protected]...

Debian dla-3474 : libnss-myhostname - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3474 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3474-1 [email protected] https://www.debian.org/lts/security/...

USN-6194-1: Linux kernel (OEM) vulnerabilities

Hangyu Hua discovered that the Flower classifier implementation in the Linux kernel contained an out-of-bounds write vulnerability. An attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2023-35788, LP: 2023577 Xingyuan Mo and Gengjia Chen...

Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to Go [CVE-2023-24539 and CVE-2023-24540]

Summary Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to remote code injection due to Go CVE-2023-24539 and CVE-2023-24540, with details below. IBM has addressed the vulnerabilities. Vulnerability Details CVEID:CVE-2023-24539 DESCRIPTION: Go is vulnerabl...

USN-6193-1: Linux kernel vulnerabilities

Hangyu Hua discovered that the Flower classifier implementation in the Linux kernel contained an out-of-bounds write vulnerability. An attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2023-35788, LP: 2023577 It was discovered that for some...

Debian dla-3473 : docker-registry - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3473 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3473-1 [email protected] https://www.debian.org/lts/security/...

Security Bulletin: IBM MQ Appliance is affected by a denial of service vulnerability (CVE-2023-28513)

Summary IBM MQ Appliance has resolved a denial of service vulnerability. Vulnerability Details CVEID:CVE-2023-28513 DESCRIPTION: IBM MQ, under certain configurations, is vulnerable to a denial of service attack caused by an error processing messages. CVSS Base score: 5.9 CVSS Temporal Score: See:...