Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS : Dnsmasq vulnerability (USN-6034-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6034-1 advisory. It was discovered that Dnsmasq was sending large DNS messages over UDP, possibly causing transmission failures due to IP...

Ubuntu: Security Advisory (USN-6026-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3395-1] golang-1.11 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3395-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler April 19, 2023 https://wiki.debian.org/LTS -...

USN-6028-1: libxml2 vulnerabilities

It was discovered that lixml2 incorrectly handled certain XML files. An attacker could possibly use this issue to cause a crash or execute arbitrary code. CVE-2023-28484 It was discovered that libxml2 incorrectly handled certain XML files. An attacker could possibly use this issue to cause a cras...

Ubuntu 22.04 LTS : Linux kernel (OEM) vulnerabilities (USN-6031-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6031-1 advisory. It was discovered that the Traffic-Control Index TCINDEX implementation in the Linux kernel contained a use-after-free vulnerability. A local attacker...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Vim vulnerabilities (USN-6026-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6026-1 advisory. It was discovered that Vim was incorrectly processing Vim buffers. An attacker could possibly use this issue to perform illegal...

Ubuntu 18.04 LTS : Linux kernel (Qualcomm Snapdragon) vulnerabilities (USN-6030-1)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6030-1 advisory. It was discovered that the Traffic-Control Index TCINDEX implementation in the Linux kernel contained a use-after-free vulnerability. A local attacker...

Ubuntu 22.04 LTS : Linux kernel (OEM) vulnerabilities (USN-6033-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6033-1 advisory. It was discovered that the Traffic-Control Index TCINDEX implementation in the Linux kernel did not properly perform filter deactivation in some...

Ubuntu 22.04 LTS : Linux kernel vulnerabilities (USN-6024-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6024-1 advisory. It was discovered that the Traffic-Control Index TCINDEX implementation in the Linux kernel contained a use-after-free vulnerability. A local attacker...

[SECURITY] [DLA 3393-1] protobuf security update

Debian LTS Advisory DLA-3393-1 [email protected] https://www.debian.org/lts/security/ Helmut Grohne April 18, 2023 https://wiki.debian.org/LTS Package : protobuf Version : 3.6.1.3-2+deb10u1 CVE ID : CVE-2021-22569 CVE-2021-22570 CVE-2022-1941 This update fixes a NULL pointer derference...

USN-6010-2: Firefox regressions

USN-6010-1 fixed vulnerabilities in Firefox. The update introduced several minor regressions. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted...

Ubuntu 18.04 LTS / 20.04 LTS : Firefox regressions (USN-6010-2)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6010-2 advisory. USN-6010-1 fixed vulnerabilities in Firefox. The update introduced several minor regressions. This update fixes the problem. We apologize for the...

[SECURITY] [DLA 3392-1] ruby-rack security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3392-1 [email protected] https://www.debian.org/lts/security/ Scarlett Moore April 17, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3392-1] ruby-rack security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3392-1 [email protected] https://www.debian.org/lts/security/ Scarlett Moore April 17, 2023 https://wiki.debian.org/LTS -...

Debian dla-3392 : ruby-rack - security update

The remote Debian 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3392 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3392-1 [email protected]...

Ubuntu 18.04 LTS / 20.04 LTS : LibreOffice vulnerability (USN-6023-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6023-1 advisory. It was discovered that LibreOffice may be configured to add an empty entry to the Java class path. This may lead to run arbitrary Java code from the...

USN-6020-1: Linux kernel (BlueField) vulnerabilities

It was discovered that the System V IPC implementation in the Linux kernel did not properly handle large shared memory counts. A local attacker could use this to cause a denial of service memory exhaustion. CVE-2021-3669 It was discovered that the KVM VMX implementation in the Linux kernel did no...

Ubuntu 20.04 LTS : Flask-CORS vulnerability (USN-6019-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-6019-1 advisory. It was discovered that Flask-CORS did not properly escape paths before evaluating resource rules. An attacker could possibly use this to expose sensitive...

USN-6016-1: thenify vulnerability

It was discovered that thenify incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to execute arbitrary code...

[SECURITY] [DLA 3391-1] firefox-esr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3391-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort April 12, 2023 https://wiki.debian.org/LTS -...