Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-7007-2)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7007-2 advisory. Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to caus...

OPENSUSE-SU-2024:14361-1 libecpg6-17~rc1-1.1 on GA media

These are all security issues fixed in the libecpg6-17rc1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14356-1 system-user-zabbix-6.0.33-1.1 on GA media

These are all security issues fixed in the system-user-zabbix-6.0.33-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14355-1 stgit-2.4.12-1.1 on GA media

These are all security issues fixed in the stgit-2.4.12-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE SLES15 Security Update : kernel (Live Patch 12 for SLE 15 SP5) (SUSE-SU-2024:3348-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3348-1 advisory. This update for the Linux Kernel 5.14.21-1505005559 fixes several issues. The following security issues were fixed: - CVE-2023-52846: Prevent u...

[SECURITY] [DSA 5773-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5773-1 [email protected] https://www.debian.org/security/ Andres Salomon September 19, 2024 https://www.debian.org/security/faq -...

CISA Releases Six Industrial Control Systems Advisories

CISA released six Industrial Control Systems ICS advisories on September 19, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-263-01 Rockwell Automation RSLogix 5 and RSLogix 500 ICSA-24-263-02 IDEC PLCs...

OPENSUSE-SU-2024:14349-1 postgresql13-13.16-1.1 on GA media

These are all security issues fixed in the postgresql13-13.16-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14348-1 postgresql12-12.20-1.1 on GA media

These are all security issues fixed in the postgresql12-12.20-1.1 package on the GA media of openSUSE Tumbleweed...

USN-7020-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - Network drivers; - SCSI drivers; - F2FS file system; - BPF subsystem; - IPv4 networking;...

Chrome Introduces One-Time Permissions and Enhanced Safety Check for Safer Browsing

Google has announced that it's rolling out a new set of features to its Chrome browser that gives users more control over their data when surfing the internet and protects them against online threats. "With the newest version of Chrome, you can take advantage of our upgraded Safety Check, opt out...

OPENSUSE-SU-2024:14342-1 assimp-devel-5.4.3-2.1 on GA media

These are all security issues fixed in the assimp-devel-5.4.3-2.1 package on the GA media of openSUSE Tumbleweed...

GHSA-64VR-G452-QVP3 vulnerabilities

Vulnerabilities for packages: vite...

GHSA-9CWX-2883-4WFX vulnerabilities

Vulnerabilities for packages: vite...

USN-7010-1: DCMTK vulnerabilities

Jinsheng Ba discovered that DCMTK incorrectly handled certain requests. If a user or an automated system were tricked into opening a certain specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 20.04 LTS...

OPENSUSE-SU-2024:14341-1 libwireshark18-4.4.0-2.1 on GA media

These are all security issues fixed in the libwireshark18-4.4.0-2.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-4283

An issue has been discovered in GitLab EE affecting all versions starting from 11.1 before 17.1.7, 17.2 before 17.2.5, and 17.3 before 17.3.2. Under certain conditions an open redirect vulnerability could allow for an account takeover by breaking the OAuth flow...

CVE-2024-6685

An issue was discovered in GitLab CE/EE affecting all versions starting from 16.7 prior to 17.1.7, 17.2 prior to 17.2.5, and 17.3 prior to 17.3.2, where group runners information was disclosed to unauthorised group members...

USN-7005-2: Linux kernel vulnerabilities

Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2024-23848 It was discovered that the JFS file system contained an...

USN-7008-1: Linux kernel vulnerabilities

Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2024-23848 It was discovered that the JFS file system contained an...