USN-7022-2: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - Modular ISDN driver; - MMC subsystem; - SCSI drivers; - F2FS file system; - GFS2 file system; -...

USN-7003-5: Linux kernel vulnerabilities

It was discovered that the JFS file system contained an out-of-bounds read vulnerability when printing xattr debug information. A local attacker could use this to cause a denial of service system crash. CVE-2024-40902 Several security issues were discovered in the Linux kernel. An attacker could...

CVE-2023-3441

An issue has been discovered in GitLab EE/CE affecting all versions starting from 8.0 before 16.4. The product did not sufficiently warn about security implications of granting merge rights to protected branches...

ASB-A-359692902

Bulletin has no description...

OPENSUSE-SU-2024:14376-1 php8-8.3.12-1.1 on GA media

These are all security issues fixed in the php8-8.3.12-1.1 package on the GA media of openSUSE Tumbleweed...

Unspecified vulnerability in Linux kernel (CNVD-2024-40293)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not checking whether the denominator is zero. No details of the vulnerability are provided at this time...

OPENSUSE-SU-2024:14374-1 argocd-cli-2.12.4-1.1 on GA media

These are all security issues fixed in the argocd-cli-2.12.4-1.1 package on the GA media of openSUSE Tumbleweed...

BELL-CVE-2024-46804

Bulletin has no description...

OPENSUSE-SU-2024:14372-1 maven-archetype-3.3.0-1.1 on GA media

These are all security issues fixed in the maven-archetype-3.3.0-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-8974

Information disclosure in Gitlab EE/CE affecting all versions from 15.6 prior to 17.2.8, 17.3 prior to 17.3.4, and 17.4 prior to 17.4.1 in specific conditions it was possible to disclose to an unauthorised user the path of a private project."...

CVE-2024-8118 vulnerabilities

Vulnerabilities for packages: grafana...

[SECURITY] [DSA 5775-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5775-1 [email protected] https://www.debian.org/security/ Andres Salomon September 26, 2024 https://www.debian.org/security/faq -...

USN-7039-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - Input Device Tablet drivers; - Modular ISDN driver; - Multiple devices driver; - Network drivers; -...

Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-7003-4)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7003-4 advisory. It was discovered that the JFS file system contained an out-of-bounds read vulnerability when printing xattr debug information. A local attacker could us...

traefik2-2.11.10-1.1 on GA media (moderate)

traefik2-2.11.10-1.1 on GA media Announcement ID: openSUSE-SU-2024:14367-1 Rating: moderate Cross-References: CVE-2024-45410 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

RHEL 7 : kernel-rt (RHSA-2024:6995)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:6995 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

SUSE-SU-2024:3405-1 Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-1505005531 fixes several issues. The following security issues were fixed: - CVE-2023-52846: Prevent use after free in prpcreatetaggedframe bsc1225099. - CVE-2022-48662: Fixed a general protection fault GPF in i915perfopenioctl bsc1223521. - CVE-2022-48662...

USN-7020-2: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - Network drivers; - SCSI drivers; - F2FS file system; - BPF subsystem; - IPv4 networking;...

Authorization Bypass

Sentry is vulnerable to Authorization Bypass. The vulnerability is due to improper scoping of authorization checks on requests to mute alert rules, which allows authenticated users to mute alerts without being members of the organization or having the required permissions on the project...

Microsoft Edge Cross-Site Scripting Vulnerability (CNVD-2024-39366)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. Microsoft Edge suffers from a cross-site scripting vulnerability that stems from the presence of a spoofing vulnerability. No detailed vulnerability details are provided at this time...