Security Bulletin: IBM App Connect Enterprise Certified Container IntegrationServer operands that process yaml files may be vulnerable to denial of service due to CVE-2022-25857

Summary SnakeYAML is used by IBM App Connect Enterprise Certified Container for parsing YAML files, including IntegrationServer configuration files. IBM App Connect Enterprise Certified Container IntegrationServer operands may be vulnerable to denial of service. This bulletin provides patch...

Security Bulletin: IBM App Connect Enterprise Certified Container operands may be vulnerable to bypassing of security restrictions due to CVE-2021-44533

Summary Node.js is used by all operands in IBM App Connect Enterprise Certified Container. IBM App Connect Enterprise Certified Container operands may be vulnerable to bypassing of security restrictions. This bulletin provides patch information to address the reported vulnerability CVE-2021-44533...

[SECURITY] [] python-django security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3177-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb November 04, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3171-1] distro-info-data database update

Debian LTS Advisory DLA-3171-1 [email protected] https://www.debian.org/lts/security/ Stefano Rivera October 30, 2022 https://wiki.debian.org/LTS Package : distro-info-data Version : 0.41+deb10u6 This is a routine update of the distro-info-data database for Debian LTS users. It includes...

USN-5713-1: Python vulnerability

Devin Jeanpierre discovered that Python incorrectly handled sockets when the multiprocessing module was being used. A local attacker could possibly use this issue to execute arbitrary code and escalate privileges...

Ubuntu 18.04 LTS / 20.04 LTS : Firefox vulnerabilities (USN-5709-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5709-1 advisory. Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could...

Debian dla-3174 : python-sha3 - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3174 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3174-1 [email protected] https://www.debian.org/lts/security/...

Debian dla-3175 : idle-python3.7 - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3175 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3175-1 [email protected] https://www.debian.org/lts/security/...

Debian dla-3169 : libbatik-java - security update

The remote Debian 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3169 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3169-1 [email protected]...

Debian dla-3171 : distro-info-data - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3171 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3171-1 [email protected] https://www.debian.org/lts/security/...

[SECURITY] [DLA 3170-1] thunderbird security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3170-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort October 30, 2022 https://wiki.debian.org/LTS -...

Debian dla-3167 : lib32ncurses-dev - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3167 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3167-1 [email protected] https://www.debian.org/lts/security/...

Debian dla-3170 : thunderbird - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3170 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3170-1 [email protected]...

Debian dla-3168 : openvswitch-common - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3168 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3168-1 [email protected] https://www.debian.org/lts/security/...

[SECURITY] [DLA 3164-1] python-django security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3164-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb October 28, 2022 https://wiki.debian.org/LTS -...

Ubuntu 20.04 LTS : Linux kernel (Azure CVM) vulnerabilities (USN-5706-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5706-1 advisory. It was discovered that the BPF verifier in the Linux kernel did not properly handle internal data structures. A local attacker could use this to expose...

Debian dla-3164 : python-django - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3164 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3164-1 [email protected]...

Debian dla-3166 : ruby-rack-protection - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3166 advisory. - ----------------------------------------------------------------------- Debian LTS Advisory DLA-3166-1 [email protected] https://www.debian.org/lts/security/...

Debian: Security Advisory (DLA-3163-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian dla-3163 : wordpress - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3163 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3163-1 [email protected] https://www.debian.org/lts/security/...