About the security content of macOS Sonoma 14.7

About the security content of macOS Sonoma 14.7 This document describes the security content of macOS Sonoma 14.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases ar...

About the security content of Safari 18

About the security content of Safari 18 This document describes the security content of Safari 18. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

About the security content of macOS Sequoia 15

About the security content of macOS Sequoia 15 This document describes the security content of macOS Sequoia 15. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

Fedora 39 : mingw-expat (2024-e86a48cd72)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-e86a48cd72 advisory. Update to expat-2.6.3. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 39 : thunderbird (2024-e77ad5f585)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-e77ad5f585 advisory. Update to 115.15.0 https://www.thunderbird.net/en-US/thunderbird/115.15.0esr/releasenotes/ Tenable has extracted the preceding description block...

RHSA-2016:2847 Red Hat Security Advisory: Red Hat Ceph Storage 1.3 security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2017:1461 Red Hat Security Advisory: openstack-keystone security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2017:0282 Red Hat Security Advisory: openstack-cinder, openstack-glance, and openstack-nova security update

Bulletin has no description...

RHSA-2016:0441 Red Hat Security Advisory: openstack-heat bug fix and security advisory

Bulletin has no description...

RHSA-2016:0212 Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

Bulletin has no description...

USN-7007-1: Linux kernel vulnerabilities

Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2024-23848 Chenyuan Yang discovered that the USB Gadget subsystem in...

Vulnerabilities fixed in GitLab Enterprise Edition and Community Edition

GitLab has fixed vulnerabilities in Enterprise Edition EE and Community Edition CE. A malicious party could exploit the vulnerabilities to cause a Denial-of-Service, or to grant themselves elevated privileges and perform actions in the context of another user, potentially including users with...

Vulnerabilities fixed in Cisco IOS XR

Cisco has fixed vulnerabilities in IOS XR. A malicious party could exploit the vulnerabilities to cause a Denial-of-Service, or execute arbitrary code on the vulnerable system. To cause a Denial-of-Service, the malicious party does not need prior authentication. To execute arbitrary code, the...

RHSA-2013:1527 Red Hat Security Advisory: rhev-hypervisor6 security and bug fix update

Bulletin has no description...

RHSA-2012:0422 Red Hat Security Advisory: rhev-hypervisor6 security and bug fix update

Bulletin has no description...

RHSA-2012:0670 Red Hat Security Advisory: kernel-rt security and bug fix update

Bulletin has no description...

Oracle Linux 7 : httpd (ELSA-2024-4943)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-4943 advisory. - Opt-ins for unsafe prefixstat and %3f Orabug: 36904263CVE-2024-38474CVE-2024-38475 Tenable has extracted the preceding description block directly fro...

Microsoft Security Update Validation Report September 2024

Microsoft’s September 2024 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing...

Urgent: GitLab Patches Critical Flaw Allowing Unauthorized Pipeline Job Execution

GitLab on Wednesday released security updates to address 17 security vulnerabilities, including a critical flaw that allows an attacker to run pipeline jobs as an arbitrary user. The issue, tracked as CVE-2024-6678, carries a CVSS score of 9.9 out of a maximum of 10.0 "An issue was discovered in...

Cisco Releases Security Updates for IOS XR Software

Cisco released security updates to address vulnerabilities in Cisco ISO XR software. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following advisories and apply the necessary updates:...