[SECURITY] [DLA 3128-1] node-thenify security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3128-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta October 01, 2022 https://wiki.debian.org/LTS -...

USN-5649-1: Firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, bypass Content Security Policy CSP or other security restrictions, conduct session fixation attacks, or...

[SECURITY] [DLA 3127-1] libhttp-daemon-perl security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3127-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz September 30, 2022 https://wiki.debian.org/LTS -...

Debian dla-3129 : gdal-bin - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3129 advisory. - ----------------------------------------------------------------------- Debian LTS Advisory DLA-3129-1 [email protected]...

Debian dla-3125 : libvncclient1 - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3125 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3125-1 [email protected]...

Debian dla-3128 : node-thenify - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3128 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3128-1 [email protected] https://www.debian.org/lts/security/...

Ubuntu 20.04 LTS : Linux kernel (GKE) vulnerabilities (USN-5648-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5648-1 advisory. It was discovered that the framebuffer driver on the Linux kernel did not verify size limits when changing font or screen size, leading to an out-of-...

Debian dla-3126 : libsndfile1 - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3126 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3126-1 [email protected] https://www.debian.org/lts/security/...

Debian dla-3124 : gir1.2-javascriptcoregtk-4.0 - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3124 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3124-1 [email protected] https://www.debian.org/lts/security/...

USN-5523-2: LibTIFF vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description USN-5523-1 fixed several vulnerabilities in LibTIFF. This update provides the fixes for CVE-2022-0907, CVE-2022-0908, CVE-2022-0909, CVE-2022-0924 and CVE-2022-22844 for Ubuntu 18.04 LTS and Ubuntu 20.04...

USN-5647-1: Linux kernel (GCP) vulnerabilities

It was discovered that the framebuffer driver on the Linux kernel did not verify size limits when changing font or screen size, leading to an out-of- bounds write. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2021-33655 Moshe Ko...

Ubuntu 20.04 LTS : Linux kernel (GCP) vulnerabilities (USN-5647-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5647-1 advisory. It was discovered that the framebuffer driver on the Linux kernel did not verify size limits when changing font or screen size, leading to an out-of-...

Debian dla-3123 : thunderbird - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3123 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3123-1 [email protected]...

[SECURITY] [DLA 3123-1] thunderbird security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3123-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort September 27, 2022 https://wiki.debian.org/LTS -...

Security Bulletin: IBM MQ is vulnerable to an issue within the Zlib library (CVE-2018-25032)

Summary An issue was identified within the Zlib library that affects IBM MQ. IBM MQ uses Zlib to perform message compression. Vulnerability Details CVEID:CVE-2018-25032 DESCRIPTION: Zlib is vulnerable to a denial of service, caused by a memory corruption in the deflate operation. By using many...

USN-5643-1: Ghostscript vulnerabilities

It was discovered that GhostScript incorrectly handled certain PDF files. If a user or automated system were tricked into opening a specially crafted PDF file, a remote attacker could use this issue to cause GhostScript to crash, resulting in a denial of service, or possibly execute arbitrary cod...

Debian: Security Advisory (DLA-3121-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 20.04 LTS : Linux kernel (GCP) vulnerabilities (USN-5644-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5644-1 advisory. It was discovered that the framebuffer driver on the Linux kernel did not verify size limits when changing font or screen size, leading to an out-of-...

USN-5642-1: WebKitGTK vulnerabilities

Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service attacks, and...

USN-5641-1: Squid vulnerabilities

Mikhail Evdokimov discovered that Squid incorrectly handled cache manager ACLs. A remote attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. CVE-2022-41317 It was discovered that Squid incorrectly handled SSPI an...