Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Django vulnerability (USN-5837-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5837-1 advisory. Nick Pope discovered that Django incorrectly handled certain Accept-Language headers. A remote attacker could possibly use this issue to...

Security Bulletin: IBM Sterling Secure Proxy vulnerable to multiple issues

Summary Multiple vulnerabilities affect IBM Sterling Secure Proxy 6.0.3.0 and are addressed in the latest iFix. Vulnerability Details CVEID:CVE-2022-23437 DESCRIPTION: Apache Xerces2 Java XML Parser is vulnerable to a denial of service, caused by an infinite loop in the XML parser. By persuading ...

Ubuntu 20.04 LTS / 22.04 LTS : OpenStack Glance vulnerability (USN-5835-2)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5835-2 advisory. Guillaume Espanel, Pierre Libeau, Arnaud Morin, and Damien Rannou discovered that OpenStack Glance incorrectly handled VMDK image processing. An...

Debian dla-3296 : libhtml-stripscripts-perl - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3296 advisory. - ----------------------------------------------------------------------- Debian LTS Advisory DLA-3296-1 [email protected] https://www.debian.org/lts/security/...

Debian dla-3303 : ruby-git - security update

The remote Debian 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3303 advisory. - ----------------------------------------------------------------------- Debian LTS Advisory DLA-3303-1 [email protected]...

Debian dla-3304 : fig2dev - security update

The remote Debian 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3304 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3304-1 [email protected]...

Debian dla-3298 : ruby-rack - security update

The remote Debian 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3298 advisory. - ----------------------------------------------------------------------- Debian LTS Advisory DLA-3298-1 [email protected]...

Debian dla-3302 : nova-api - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3302 advisory. - ----------------------------------------------------------------------- Debian LTS Advisory DLA-3302-1 [email protected] https://www.debian.org/lts/security/...

Debian dla-3291 : node-object-path - security update

The remote Debian 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3291 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3291-1 [email protected]...

Debian dla-3285 : libapache-session-browseable-perl - security update

The remote Debian 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3285 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3285-1 [email protected]...

Debian dla-3284 : libapache-session-ldap-perl - security update

The remote Debian 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3284 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3284-1 [email protected]...

Debian dla-3300 : glance - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3300 advisory. - ----------------------------------------------------------------------- Debian LTS Advisory DLA-3300-1 [email protected] https://www.debian.org/lts/security/...

Ubuntu 20.04 LTS / 22.04 LTS : Cinder vulnerability (USN-5835-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5835-1 advisory. Guillaume Espanel, Pierre Libeau, Arnaud Morin, and Damien Rannou discovered that Cinder incorrectly handled VMDK image processing. An authenticated...

Debian dla-3301 : cinder-api - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3301 advisory. - ----------------------------------------------------------------------- Debian LTS Advisory DLA-3301-1 [email protected] https://www.debian.org/lts/security/...

Debian dla-3297 : libtiff-dev - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3297 advisory. - ----------------------------------------------------------------------- Debian LTS Advisory DLA-3297-1 [email protected] https://www.debian.org/lts/security/...

Debian dla-3293 : modsecurity-crs - security update

The remote Debian 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3293 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3293-1 [email protected]...

Ubuntu 20.04 LTS / 22.04 LTS : Nova vulnerability (USN-5835-3)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5835-3 advisory. Guillaume Espanel, Pierre Libeau, Arnaud Morin, and Damien Rannou discovered that Nova incorrectly handled VMDK image processing. An authenticated...

[SECURITY] [DLA 3303-1] ruby-git security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-3303-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta January 31, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3300-1] glance security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-3300-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta January 31, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3299-1] node-qs security update

Debian LTS Advisory DLA-3299-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin January 30, 2023 https://wiki.debian.org/LTS Package : node-qs Version : 6.5.2-1+deb10u1 CVE ID : CVE-2022-24999 Nathanael Braun and Johan Brissaud discovered a prototype poisoning...