SUSE-SU-2024:4329-1 Security update for aws-iam-authenticator

This update for aws-iam-authenticator fixes the following issues: - CVE-2022-1996: Fixed CORS bypass bsc1200528...

Fedora 41 : golang-x-crypto (2024-c33c95804e)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-c33c95804e advisory. Fix CVE-2024-45337 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 40 : golang-x-crypto (2024-8f83d0ed92)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-8f83d0ed92 advisory. Fix CVE-2024-45337 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Oracle Linux 7 : gimp:2.8.22 (ELSA-2024-10666)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-10666 advisory. - Fix CVE-2023-44442 Orabug: 37344570 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note tha...

Security Bulletin: Vulnerability in Apache HTTP Server (CVE-2023-38709) affects Power HMC.

Summary The Apache HTTP Server library is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2023-38709 DESCRIPTION: Apache HTTP Server is vulnerable to HTTP response splitting attacks, caused by improper input validation in the...

CGA-CRQG-M8C2-W7JJ

Bulletin has no description...

SUSE-SU-2024:4317-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52524: net: nfc: llcp: Add lock when modifying device list bsc1220927. - CVE-2024-49925: fbdev: efifb: Register sysfs groups through driver core...

SUSE-SU-2024:4313-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52524: Fixed possible corruption in nfc/llcp bsc1220927. - CVE-2024-49925: fbdev: efifb: Register sysfs groups through driver core bsc1232224 -...

Vulnerability fixed in Schneider Electric Modicon

Schneider Electric has fixed a vulnerability in devices that use the Modbus protocol. The vulnerability is in how devices using the Modbus protocol validate input. When an unauthenticated and customized Modbus packet is sent to the device, it can result in a denial-of-service, compromising both t...

CGA-WVCW-8J3M-9V73

Bulletin has no description...

CGA-83P4-J7XG-58PG

Bulletin has no description...

CGA-QR7P-RGFG-R5MM

Bulletin has no description...

Microsoft Security Update Validation Report December 2024

Microsoft’s December 2024 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing softwa...

Important Photon OS Security Update - PHSA-2024-5.0-0427

Updates of 'cpio' packages of Photon OS have been released...

Fedora 40 : matrix-synapse (2024-995720f767)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-995720f767 advisory. CVE-2024-52805, CVE-2024-52815, CVE-2024-53863 ---- Backport fixes from v1.120.1 Tenable has extracted the preceding description block directly from...

CGA-Q82V-6GFQ-87GP

Bulletin has no description...

CVE-2024-54811

creationtimestamp| type| source ---|---|--- 2024-12-12 18:28:51+00:00| seen| https://infosec.exchange/users/cve/statuses/113641267578732747 2024-12-12 21:21:57+00:00| seen| https://t.me/cvedetector/12806...

CGA-C9GG-R469-C9MM

Bulletin has no description...

Update now! Apple releases new security patches for vulnerabilities in iPhones, Macs, and more

Apple has released security patches for most of its operating systems, including iOS, Mac, iPadOS, Safari, and visionOS. To check if you’re using the latest software version, go to Settings or System Settings General Software Update. It’s also worth turning on Automatic Updates if you haven’t...

Apple Releases Security Updates for Multiple Products

Apple released security updates to address vulnerabilities in multiple Apple products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following advisories and apply necessary updates:...