SUSE: Security Advisory (SUSE-SU-2023:0867-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: tun: avoid double free in tunfreenetdev CVE-2022-4744 ALSA: pcm: Move rwsem lock inside sndctlelemread to prevent UAF CVE-2023-0266 kernel: net: CPU soft lockup in TC mirred...

SUSE-SU-2023:1572-1 Security update for dpdk

This update of dpdk fixes the following issues: - rebuild the package with the new secure boot key bsc1209188...

PT-2023-36129 · Dpdk · Dpdk

Name of the Vulnerable Software and Affected Versions: dpdk affected versions not specified Description: The issue is related to the rebuild of the package with a new secure boot key. There is no information provided about the estimated number of potentially affected devices or real-world inciden...

SUSE-SU-2023:0884-1 Security update for grub2

This update of grub2 fixes the following issues: - rebuild the package with the new secure boot key bsc1209188...

SUSE-SU-2023:0882-1 Security update for grub2

This update of grub2 fixes the following issues: - rebuild the package with the new secure boot key bsc1209188...

SUSE-SU-2023:0881-1 Security update for grub2

This update of grub2 fixes the following issues: - rebuild the package with the new secure boot key bsc1209188...

SUSE-SU-2023:0880-1 Security update for grub2

This update of grub2 fixes the following issues: - rebuild the package with the new secure boot key bsc1209188...

PT-2023-36128 · Grub2 · Grub2

Name of the Vulnerable Software and Affected Versions: grub2 affected versions not specified Description: The issue with grub2 is related to secure boot. The package has been rebuilt with a new secure boot key. Recommendations: At the moment, there is no information about a newer version that...

PT-2023-36125 · Grub2 · Grub2

Name of the Vulnerable Software and Affected Versions: grub2 affected versions not specified Description: The issue with grub2 is related to rebuilding the package with a new secure boot key. Recommendations: At the moment, there is no information about a newer version that contains a fix for thi...

CVE-2023-20082 Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches Secure Boot Bypass Vulnerability

A vulnerability in Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust. This...

PT-2023-36126 · Grub2 · Grub2

Name of the Vulnerable Software and Affected Versions: grub2 affected versions not specified Description: The issue concerns a problem with the secure boot key in grub2, which has been addressed by rebuilding the package with a new secure boot key. Recommendations: At the moment, there is no...

Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches Secure Boot Bypass Vulnerability

A vulnerability in Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust. This...

SUSE-SU-2023:0867-1 Security update for oracleasm

This update of oracleasm fixes the following issues: - rebuild the package with the new secure boot key bsc1209188...

CVE-2023-28005

A vulnerability in Trend Micro Endpoint Encryption Full Disk Encryption version 6.0.0.3204 and below could allow an attacker with physical access to an affected device to bypass Microsoft Windows� Secure Boot process in an attempt to execute other attacks to obtain access to the contents of the...

CVE-2023-28005

A vulnerability in Trend Micro Endpoint Encryption Full Disk Encryption version 6.0.0.3204 and below could allow an attacker with physical access to an affected device to bypass Microsoft Windows� Secure Boot process in an attempt to execute other attacks to obtain access to the contents of the...

Design/Logic Flaw

A vulnerability in Trend Micro Endpoint Encryption Full Disk Encryption version 6.0.0.3204 and below could allow an attacker with physical access to an affected device to bypass Microsoft Windows? Secure Boot process in an attempt to execute other attacks to obtain access to the contents of the...

Important: grub2

Issue Overview: A flaw was found in grub 2, where a crafted 16-bit grayscale PNG image may lead to an out-of-bounds write. This flaw allows an attacker to corrupt the data on the heap portion of the grub2's memory, leading to possible code execution and the circumvention of the secure boot...

PT-2023-36124 · Oracle · Oracleasm

Name of the Vulnerable Software and Affected Versions: oracleasm affected versions not specified Description: The issue is related to the oracleasm package, which has been rebuilt with a new secure boot key. Recommendations: At the moment, there is no information about a newer version that contai...