USN-5703-1: Linux kernel (Intel IoTG) vulnerabilities

Selim Enes Karaduman discovered that a race condition existed in the General notification queue implementation of the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2022-188...

[SECURITY] [DLA 3162-1] libdatetime-timezone-perl new timezone database

------------------------------------------------------------------------- Debian LTS Advisory DLA-3162-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort October 26, 2022 https://wiki.debian.org/LTS -...

Debian dla-3161 : tzdata - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3161 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3161-1 [email protected] https://www.debian.org/lts/security/...

Debian dla-3162 : libdatetime-timezone-perl - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3162 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3162-1 [email protected] https://www.debian.org/lts/security/...

Debian dla-3160 : libtomcat9-embed-java - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3160 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3160-1 [email protected]...

Ubuntu: Security Advisory (USN-5696-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian dla-3158 : wkhtmltopdf - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3158 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3158-1 [email protected] https://www.debian.org/lts/security/...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Barbican vulnerability (USN-5697-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5697-1 advisory. Douglas Mendizabal discovered that Barbican incorrectly handled certain query strings. A remote attacker could possibly use this issue to...

Debian dla-3159 : libbluray-bdj - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3159 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3159-1 [email protected] https://www.debian.org/lts/security/...

[SECURITY] [DLA 3158-1] wkhtmltopdf security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3158-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort October 24, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3157-1] bluez security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3157-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler October 24, 2022 https://wiki.debian.org/LTS -...

Debian dla-3157 : bluetooth - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3157 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3157-1 [email protected]...

USN-5694-1 libreoffice vulnerabilities

It was discovered that LibreOffice incorrectly handled links using the Office URI Schemes. If a user were tricked into opening a specially crafted document, a remote attacker could use this issue to execute arbitrary scripts. CVE-2022-3140 Thomas Florian discovered that LibreOffice incorrectly...

Debian dla-3156 : firefox-esr - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3156 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3156-1 [email protected]...

USN-5693-1: Linux kernel (OEM) vulnerabilities

David Bouman and Billy Jheng Bing Jhong discovered that a race condition existed in the iouring subsystem in the Linux kernel, leading to a use- after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2022-2602...

Agent-to-controller security bypass vulnerabilities in Jenkins Compuware Topaz for Total Test Plugin

Jenkins Compuware Topaz for Total Test Plugin 2.4.8 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to obtain the values of Java system properties from the Jenkins controller process. These...

GHSA-XP3R-9WX8-Q2MM Agent-to-controller security bypass vulnerabilities in Jenkins Compuware Topaz for Total Test Plugin

Jenkins Compuware Topaz for Total Test Plugin 2.4.8 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to obtain the values of Java system properties from the Jenkins controller process. These...

Agent-to-controller security bypass vulnerability in Jenkins BMC Compuware Source Code Download for Endevor, PDS, and ISPW Plugin

BMC Compuware Source Code Download for Endevor, PDS, and ISPW Plugin 2.0.12 and earlier implements an agent/controller message that does not limit where it can be executed. It allows attackers able to control agent processes to obtain the values of Java system properties from the Jenkins controll...

GHSA-2X49-WJ38-78Q9 Agent-to-controller security bypass vulnerability in Jenkins Compuware Topaz Utilities Plugin

Compuware Topaz Utilities Plugin 1.0.8 and earlier implements an agent/controller message that does not limit where it can be executed. It allows attackers able to control agent processes to obtain the values of Java system properties from the Jenkins controller process. This vulnerability is onl...

Agent-to-controller security bypass vulnerability in Jenkins Compuware Topaz Utilities Plugin

Compuware Topaz Utilities Plugin 1.0.8 and earlier implements an agent/controller message that does not limit where it can be executed. It allows attackers able to control agent processes to obtain the values of Java system properties from the Jenkins controller process. This vulnerability is onl...