[SECURITY] [DLA 3367-1] libdatetime-timezone-perl security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3367-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort March 24, 2023 https://wiki.debian.org/LTS -...

Debian dla-3366 : tzdata - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3366 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3366-1 [email protected] https://www.debian.org/lts/security/...

Debian dla-3367 : libdatetime-timezone-perl - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3367 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3367-1 [email protected] https://www.debian.org/lts/security/...

USN-5966-1: amanda vulnerabilities

Maher Azzouzi discovered an information disclosure vulnerability in the calcsize binary within amanda. calcsize is a suid binary owned by root that could possibly be used by a malicious local attacker to expose sensitive file system information. CVE-2022-37703 Maher Azzouzi discovered a privilege...

Debian dla-3365 : thunderbird - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3365 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3365-1 [email protected]...

Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS : SoX regression (USN-5904-2)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5904-2 advisory. USN-5904-1 fixed vulnerabilities in SoX. It was discovered that the fix for CVE-2021-33844 was incomplete. This update fixes t...

Ubuntu 20.04 LTS : Ruby vulnerability (USN-5806-3)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5806-3 advisory. USN-5806-1 fixed vulnerabilities in Ruby. This update fixes the problem for Ubuntu 20.04 LTS. Tenable has extracted the preceding description block directly from...

Ubuntu: Security Advisory (USN-5963-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5806-3: Ruby vulnerability

USN-5806-1 fixed vulnerabilities in Ruby. This update fixes the problem for Ubuntu 20.04 LTS. Original advisory details: Hiroshi Tokumaru discovered that Ruby did not properly handle certain user input for applications which generate HTTP responses using cgi gem. An attacker could possibly use th...

[SECURITY] [DLA 3315-2] sox regression update

Debian LTS Advisory DLA-3315-2 [email protected] https://www.debian.org/lts/security/ Helmut Grohne March 20, 2023 https://wiki.debian.org/LTS Package : sox Version : 14.4.2+git20190427-1+deb10u2 Debian Bug : 1032082 One of the security fixes released as DLA 3315 introduced a regression...

Debian: Security Advisory (DLA-3365-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian dla-3355 : libxapian-dev - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3355 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3355-1 [email protected] https://www.debian.org/lts/security/...

[SECURITY] [DLA 3364-1] firefox-esr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3364-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort March 17, 2023 https://wiki.debian.org/LTS -...

Unbreakable Enterprise kernel security update

4.14.35-2047.523.4.1 - mm: kvmalloc does not fallback to vmalloc for incompatible gfp flags Michal Hocko Orabug: 35164196 4.14.35-2047.523.4 - rds: ib: Keep IB MRs on cleanlist unless we are tearing down the pool Hakon Bugge Orabug: 34987235 - rds: ib: Add FRWR related statistics counters Hakon...

Unbreakable Enterprise kernel-container security update

4.14.35-2047.523.4.1 - mm: kvmalloc does not fallback to vmalloc for incompatible gfp flags Michal Hocko Orabug: 35164196 4.14.35-2047.523.4 - rds: ib: Keep IB MRs on cleanlist unless we are tearing down the pool Hakon Bugge Orabug: 34987235 - rds: ib: Add FRWR related statistics counters Hakon...

Debian dla-3364 : firefox-esr - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3364 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3364-1 [email protected]...

USN-5962-1: Linux kernel (Intel IoTG) vulnerabilities

It was discovered that the Upper Level Protocol ULP subsystem in the Linux kernel did not properly handle sockets entering the LISTEN state in certain protocols, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execut...

USN-5961-1: abcm2ps vulnerabilities

It was discovered that abcm2ps incorrectly handled memory when parsing specially crafted ABC files. An attacker could use this issue to cause abcm2ps to crash, leading to a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 16.04 ESM and Ubuntu 18.04 LTS...

USN-5961-1 abcm2ps vulnerabilities

It was discovered that abcm2ps incorrectly handled memory when parsing specially crafted ABC files. An attacker could use this issue to cause abcm2ps to crash, leading to a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 16.04 ESM and Ubuntu 18.04 LTS...

Ubuntu 16.04 ESM / 18.04 LTS / 20.04 ESM / 22.04 ESM : abcm2ps vulnerabilities (USN-5961-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 ESM / 22.04 ESM host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5961-1 advisory. It was discovered that abcm2ps incorrectly handled memory when parsing specially crafted ABC files. An attacker could...