Security Bulletin: IBM MQ is affected by a denial of service vulnerability (CVE-2023-28513)

Summary IBM MQ is affected by a denial of service vulnerability caused by improper message handling. Vulnerability Details CVEID:CVE-2023-28513 DESCRIPTION: IBM MQ, under certain configurations, is vulnerable to a denial of service attack caused by an error processing messages. CVSS Base score: 5...

Security Bulletin: IBM MQ is vulnerable to an issue in IBM GSKit (CVE-2023-32342)

Summary Vulnerabilities in GSKit affect IBM MQ. IBM MQ has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2023-32342 DESCRIPTION: IBM GSKit could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in the RSA Decryption implementation. By...

Security Bulletin: IBM App Connect Enterprise Certified Container operands and operator may be vulnerable to HTML injection due to [CVE-2023-24540]

Summary IBM App Connect Enterprise Certified Container operator and operands may be vulnerable to HTML injection. This bulletin provides patch information to address the reported vulnerability in Golang Go. CVE-2023-24540 Vulnerability Details CVEID:CVE-2023-24540 DESCRIPTION: Go is vulnerable to...

Security Bulletin: IBM MQ Appliance is vulnerable to heap-based buffer overflow (CVE-2022-48303)

Summary IBM MQ Appliance has resolved a heap-based buffer overflow. Vulnerability Details CVEID:CVE-2022-48303 DESCRIPTION: GNU Tar is vulnerable to a heap-based buffer overflow, caused by an out-of-bounds read in the fromheader function in list.c when processing of V7 archive files. By persuadin...

Debian dla-3467 : hsqldb-utils - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3467 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3467-1 [email protected] https://www.debian.org/lts/security/...

Debian dla-3468 : libhsqldb1.8.0-java - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3468 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3468-1 [email protected] https://www.debian.org/lts/security/...

Debian: Security Advisory (DLA-3471-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3471-1] c-ares security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3471-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky June 26, 2023 https://wiki.debian.org/LTS -...

Debian dla-3470 : owslib-doc - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3470 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3470-1 [email protected] https://www.debian.org/lts/security/...

CVE-2023-34203

In Progress OpenEdge OEM OpenEdge Management and OEE OpenEdge Explorer before 12.7, a remote user who has any OEM or OEE role could perform a URL injection attack to change identity or role membership, e.g., escalate to admin. This affects OpenEdge LTS before 11.7.16, 12.x before 12.2.12, and...

Design/Logic Flaw

In Progress OpenEdge OEM OpenEdge Management and OEE OpenEdge Explorer before 12.7, a remote user who has any OEM or OEE role could perform a URL injection attack to change identity or role membership, e.g., escalate to admin. This affects OpenEdge LTS before 11.7.16, 12.x before 12.2.12, and...

Debian dla-3469 : liblua5.3-0 - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3469 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3469-1 [email protected]...

[SECURITY] [DLA 3469-1] lua5.3 security update

Debian LTS Advisory DLA-3469-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin June 23, 2023 https://wiki.debian.org/LTS Package : lua5.3 Version : 5.3.3-1.1+deb10u1 CVE ID : CVE-2019-6706 CVE-2020-24370 Debian Bug : 920321 988734 Issues were found in lua5.3, a...

Security Bulletin: IBM MQ is affected by vulnerabilities in libcURL (CVE-2023-23916, CVE-2023-27535)

Summary Multiple issues were identified within the libcurl library that affect IBM MQ. IBM MQ uses libcurl to provide HTTPURL functionality which is only used to download remote CCDT files and is not used to send or receive messages. Vulnerability Details CVEID:CVE-2023-23916 DESCRIPTION: cURL...

Debian dla-3461 : libfastjson-dev - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3461 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3461-1 [email protected] https://www.debian.org/lts/security/...

Ubuntu 20.04 LTS / 22.04 LTS / 23.04 : CUPS vulnerability (USN-6184-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 host has packages installed that are affected by a vulnerability as referenced in the USN-6184-1 advisory. It was discovered that CUPS incorrectly handled certain memory operations. An attacker could possibly use this issue to cause CUPS to crash,...

[SECURITY] [DLA 3467-1] hsqldb security update

Debian LTS Advisory DLA-3467-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany June 22, 2023 https://wiki.debian.org/LTS Package : hsqldb Version : 2.4.1-2+deb10u2 CVE ID : CVE-2023-1183 Gregor Kopf of Secfault Security GmbH discovered that HSQLDB, a Java SQL...

USN-6143-3: Firefox regressions

USN-6143-1 fixed vulnerabilities and USN-6143-2 fixed minor regressions in Firefox. The update introduced several minor regressions. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple security issues were discovered in Firefox. If a user were...

[SECURITY] [DLA 3463-1] opensc security update

Debian LTS Advisory DLA-3463-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin June 21, 2023 https://wiki.debian.org/LTS Package : opensc Version : 0.19.0-1+deb10u2 CVE ID : CVE-2019-6502 CVE-2021-42779 CVE-2021-42780 CVE-2021-42781 CVE-2021-42782 CVE-2023-2977...

Ubuntu 20.04 LTS : Firefox regressions (USN-6143-3)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6143-3 advisory. USN-6143-1 fixed vulnerabilities and USN-6143-2 fixed minor regressions in Firefox. The update introduced several minor regressions. This update fixes the problem...