[SECURITY] [DLA 3270-1] net-snmp security update

Debian LTS Advisory DLA-3270-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin January 15, 2023 https://wiki.debian.org/LTS Package : net-snmp Version : 5.7.3+dfsg-5+deb10u4 CVE ID : CVE-2022-44792 CVE-2022-44793 Debian Bug : 1024020 menglong2234 discovered NULL...

Debian dla-3270 : libsnmp-base - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3270 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3270-1 [email protected]...

Debian dla-3271 : node-minimatch - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3271 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3271-1 [email protected] https://www.debian.org/lts/security/...

Debian dla-3269 : libapache2-mod-apreq2 - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3269 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3269-1 [email protected] https://www.debian.org/lts/security/...

Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-5804-2)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5804-2 advisory. It was discovered that the NFSD implementation in the Linux kernel did not properly handle some RPC messages, leading to a buffer overflow. A remote...

Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-5804-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5804-1 advisory. It was discovered that the NFSD implementation in the Linux kernel did not properly handle some RPC messages, leading to a buffer...

[SECURITY] [DLA 3267-1] libxstream-java security update

Debian LTS Advisory DLA-3267-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany January 11, 2023 https://wiki.debian.org/LTS Package : libxstream-java Version : 1.4.11.1-1+deb10u4 CVE ID : CVE-2022-41966 Debian Bug : 1027754 XStream serializes Java objects to XML a...

USN-5799-1: Linux kernel (OEM) vulnerability

Kyle Zeng discovered that the sysctl implementation in the Linux kernel contained a stack-based buffer overflow. A local attacker could use this to cause a denial of service system crash or execute arbitrary code...

Debian dla-3265 : exiv2 - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3265 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3265-1 [email protected]...

Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel kmsbd multiple vulnerabilities

The remote Ubuntu 20.04 LTS / 22.04 LTS host is running a ksmbd server that is affected by multiple vulnerabilities: - An unauthenticated remote code execution vulnerability in the ksmbd component of the Linux kernel. CVE-2022-47939 - An authenticated remote code execution vulnerability in the...

USN-5798-1: .NET 6 vulnerability

Johan Gorter discovered that .NET 6 incorrectly processed certain invalid HTTP requests. An attacker could possibly use this issue to cause a denial of service condition for an exposed endpoint...

Ubuntu 20.04 LTS : Linux kernel (Azure) vulnerabilities (USN-5791-2)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5791-2 advisory. It was discovered that a race condition existed in the Android Binder IPC subsystem in the Linux kernel, leading to a use-after-free vulnerability. A loc...

Debian dla-3264 : ruby-rack-protection - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3264 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3264-1 [email protected] https://www.debian.org/lts/security/...

KB5022297: Windows 10 LTS 1507 Security Update (January 2023)

The remote Windows host is missing security update 5022297. It is, therefore, affected by multiple vulnerabilities - Microsoft ODBC Driver Remote Code Execution Vulnerability CVE-2023-21732 - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2023-21681 - Window...

Debian dla-3263 : libtasn1-6 - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3263 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3263-1 [email protected] https://www.debian.org/lts/security/...

Ubuntu: Security Advisory (USN-5795-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5791-2: Linux kernel (Azure) vulnerabilities

It was discovered that a race condition existed in the Android Binder IPC subsystem in the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2022-20421 David Leadbeater...

[SECURITY] [DLA 3263-1] libtasn1-6 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3263-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb January 09, 2023 https://wiki.debian.org/LTS -...

Unbreakable Enterprise kernel security update

4.14.35-2047.521.4 - tcp: Tunables for TCP delayed ack min and max timers Venkat Venkatsubra Orabug: 34883100 4.14.35-2047.521.3 - Revert 'random: use expired timer rather than wq for mixing fast pool' Saeed Mirzamohammadi Orabug: 34918228 4.14.35-2047.521.2 - RDS/IB: Fix the misplaced counter...

Debian dla-3262 : smarty3 - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3262 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3262-1 [email protected] https://www.debian.org/lts/security/...