PT-2023-36139 · Conmon · Conmon

Name of the Vulnerable Software and Affected Versions: conmon affected versions not specified Description: The issue concerns a rebuild of conmon against a supported version of Go, specifically Go 1.19. There are no functional changes in this update. Recommendations: At the moment, there is no...

SUSE-SU-2023:1967-1 Security update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container

This update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container fixes the following issues: - CVE-2023-26484: Limit operator secrets permission. bsc1209359 kubevirt is also rebuilt...

MGASA-2023-0150 Updated squirrel/supertux packages fix security vulnerability

sqclass.cpp in Squirrel 3.1 allows an out-of-bounds read in the core interpreter that can lead to Code Execution. If a victim executes an attacker-controlled squirrel script, it is possible for the attacker to break out of the squirrel script sandbox even if all dangerous functionality such as Fi...

PT-2023-36140 · Amazon · Amazon-Ssm-Agent

Name of the Vulnerable Software and Affected Versions: amazon-ssm-agent affected versions not specified Description: The issue is related to security problems that were fixed by rebuilding the software using go1.19.7, which resolved bugs and security issues. Recommendations: At the moment, there ...

PT-2023-36138 · Conmon · Conmon

Name of the Vulnerable Software and Affected Versions: conmon affected versions not specified Description: The issue with conmon involves a rebuild against supported go 1.19. There are no functional changes. Recommendations: At the moment, there is no information about a newer version that contai...

SUSE-SU-2023:1789-1 Security update for conmon

This update for conmon fixes the following issues: - rebuild against supported go 1.19 bsc1209307 - no functional changes...

SUSE-SU-2023:1758-1 Security update for drbd

This update of drbd fixes the following issues: - rebuild the package with the new secure boot key bsc1209188...

PT-2023-36135 · Oracle · Oracleasm

Name of the Vulnerable Software and Affected Versions: oracleasm affected versions not specified Description: The issue concerns a rebuild of the oracleasm package with a new secure boot key. There is no information provided about the estimated number of potentially affected devices or real-world...

Security Bulletin: Trusteer SDK for Mobile vulnerable to file upload (CVE-2022-42443)

Summary Security improvements were made to the Trusteer Mobile SDKs for iOS and Android. No code changes are required to take advantage of the improvements, but mobile application creators must rebuild using the latest SDK version and redeploy their mobile apps to take advantage of these...

SUSE-SU-2023:1691-1 Security update for grub2

This update of grub2 fixes the following issues: - rebuild the package with the new secure boot key bsc1209188...

CVE-2023-1612

A vulnerability, which was classified as critical, was found in Rebuild up to 3.2.3. This affects an unknown part of the file /files/list-file. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. It...

CVE-2023-1613

A vulnerability has been found in Rebuild up to 3.2.3 and classified as problematic. This vulnerability affects unknown code of the file /feeds/post/publish. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may ...

Sql injection

A vulnerability, which was classified as critical, was found in Rebuild up to 3.2.3. This affects an unknown part of the file /files/list-file. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. It...

Cross site scripting

A vulnerability has been found in Rebuild up to 3.2.3 and classified as problematic. This vulnerability affects unknown code of the file /feeds/post/publish. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may ...

CVE-2023-1613 Rebuild publish cross site scripting

A vulnerability has been found in Rebuild up to 3.2.3 and classified as problematic. This vulnerability affects unknown code of the file /feeds/post/publish. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may ...

CVE-2023-1613 Rebuild publish cross site scripting

A vulnerability has been found in Rebuild up to 3.2.3 and classified as problematic. This vulnerability affects unknown code of the file /feeds/post/publish. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may ...

CVE-2023-1613

Summary: CVE-2023-1613 affects Rebuild up to 3.2.3, with a cross-site scripting flaw in the /feeds/post/publish handler. The issue enables remote manipulation and is publicly disclosed. Impact and details provided: The vulnerability is described across multiple connected records as affecting unkn...

CVE-2023-1613 Rebuild publish cross site scripting

A vulnerability has been found in Rebuild up to 3.2.3 and classified as problematic. This vulnerability affects unknown code of the file /feeds/post/publish. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may ...

CVE-2023-1612 Rebuild list-file sql injection

A vulnerability, which was classified as critical, was found in Rebuild up to 3.2.3. This affects an unknown part of the file /files/list-file. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. It...

CVE-2023-1612 Rebuild list-file sql injection

A vulnerability, which was classified as critical, was found in Rebuild up to 3.2.3. This affects an unknown part of the file /files/list-file. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. It...