[SECURITY] [DLA 3385-1] trafficserver security update

Debian LTS Advisory DLA-3385-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany April 05, 2023 https://wiki.debian.org/LTS Package : trafficserver Version : 8.1.6+ds-1deb10u1 CVE ID : CVE-2022-31778 CVE-2022-31779 CVE-2022-32749 CVE-2022-37392 Several vulnerabiliti...

USN-5998-1 apache-log4j1.2 vulnerabilities

It was discovered that the SocketServer component of Apache Log4j 1.2 incorrectly handled deserialization. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 ESM. CVE-2019-17571 It was discovered that the JMSSink component of Apache Log4j 1....

USN-5999-1: trim-newlines vulnerability

It was discovered that trim-newlines incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service. CVE-2021-33623...

PhotoShow 3.0 - Remote Code Execution Exploit

Exploit Title: PhotoShow 3.0 - Remote Code Execution Date: January 11, 2023 Exploit Author: LSCP Responsible Disclosure Lab Detailed Bug Description: https://lscp.llc/index.php/2021/07/19/how-white-box-hacking-works-remote-code-execution-and-stored-xss-in-photoshow-3-0/ Vendor Homepage:...

[SECURITY] [DLA 3382-1] openimageio security update

Debian LTS Advisory DLA-3382-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany April 05, 2023 https://wiki.debian.org/LTS Package : openimageio Version : 2.0.5dfsg0-1+deb10u1 CVE ID : CVE-2022-36354 CVE-2022-41639 CVE-2022-41838 CVE-2022-41977 CVE-2022-41981...

[SECURITY] [DLA 3381-1] ghostscript security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3381-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb April 04, 2023 https://wiki.debian.org/LTS -...

Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : IPMItool vulnerability (USN-5997-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-5997-1 advisory. It was discovered that IPMItool was not properly checking the data received from a remote LAN party. A remote attacker could possibly use...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Vim vulnerabilities (USN-5995-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5995-1 advisory. It was discovered that Vim incorrectly handled memory when opening certain files. If an attacker could trick a user into opening ...

Debian dla-3381 : ghostscript - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3381 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3381-1 [email protected] https://www.debian.org/lts/security/...

USN-5966-3: amanda regression

USN-5966-1 fixed vulnerabilities in amanda. Unfortunately that update caused a regression and was reverted in USN-5966-2. This update provides security fixes for Ubuntu 22.10, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS and Ubuntu 18.04 LTS. We apologize for the inconvenience. Original advisory details:...

Debian dla-3376 : libsvgpp-dev - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3376 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3376-1 [email protected]...

Ubuntu 18.04 LTS : Linux kernel (GCP) vulnerabilities (USN-5991-1)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5991-1 advisory. It was discovered that the System V IPC implementation in the Linux kernel did not properly handle large shared memory counts. A local attacker could use...

Debian dla-3378 : duktape - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3378 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3378-1 [email protected] https://www.debian.org/lts/security/...

Ubuntu: Security Advisory (USN-5966-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 22.04 LTS : HAProxy vulnerability (USN-5994-1)

The remote Ubuntu 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5994-1 advisory. It was discovered that HAProxy incorrectly initialized certain connection buffers. A remote attacker could possibly use this issue to obtain sensitive information...

Debian dla-3372 : xdmx - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3372 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3372-1 [email protected] https://www.debian.org/lts/security/...

Debian dla-3379 : intel-microcode - security update

The remote Debian 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3379 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3379-1 [email protected]...

Debian dla-3377 : libnss-myhostname - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3377 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3377-1 [email protected] https://www.debian.org/lts/security/...

[SECURITY] [DLA 3380-1] firmware-nonfree LTS new upstream version (security updates and newer firmware for Linux 5.10)

Debian LTS Advisory DLA-3380-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost April 01, 2023 https://wiki.debian.org/LTS Package : firmware-nonfree Version : 20190114+really20220913-0+deb10u1 CVE ID : CVE-2020-12362 CVE-2020-12363 CVE-2020-12364 CVE-2020-24586...

[SECURITY] [DLA 3376-1] svgpp security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3376-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky March 31, 2023 https://wiki.debian.org/LTS -...