CVE-2023-41260

Best Practical Request Tracker RT before 4.4.7 and 5.x before 5.0.5 allows Information Exposure in responses to mail-gateway REST API calls...

CVE-2023-41259

Best Practical Request Tracker RT before 4.4.7 and 5.x before 5.0.5 allows Information Disclosure via fake or spoofed RT email headers in an email message or a mail-gateway REST API call...

CVE-2023-41259

Best Practical Request Tracker RT before 4.4.7 and 5.x before 5.0.5 allows Information Disclosure via fake or spoofed RT email headers in an email message or a mail-gateway REST API call...

CVE-2023-45024

Best Practical Request Tracker RT 5 before 5.0.5 allows Information Disclosure via a transaction search in the transaction query builder...

Best Practical Request Tracker Security Vulnerability

Best Practical Request Tracker is an event tracking system written in Perl. A security vulnerability exists in versions of Best Practical Request Tracker prior to 4.4.3-2+deb10u3, which originates from a vulnerability that can easily disclose information via response messages returned from reques...

Best Practical Request Tracker Security Vulnerability

Best Practical Request Tracker is an event tracking system written in Perl. A security vulnerability exists in versions prior to Best Practical Request Tracker 4.4.3-2+deb10u3, which stems from the ease of accepting unvalidated RT email headers in incoming emails and mail gateway REST interfaces...

Debian: Security Advisory (DSA-5541-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-5541-1 : request-tracker5 - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5541 advisory. - Request Tracker reports: CVE-2023-41259 SECURITY: RT is vulnerable to unvalidated email headers in incoming email and the mail-gateway REST interface...

Debian dla-3642 : request-tracker4 - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3642 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3642-1 [email protected]...

DLA-3642-1 request-tracker4 - security update

Bulletin has no description...

[SECURITY] [DLA 3641-1] jetty9 security update

Debian LTS Advisory DLA-3641-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany October 30, 2023 https://wiki.debian.org/LTS Package : jetty9 Version : 9.4.50-4+deb10u1 CVE ID : CVE-2020-27218 CVE-2023-36478 CVE-2023-44487 Debian Bug : 976211 Two remotely exploitab...

[SECURITY] [DLA 3639-1] distro-info-data database update

Debian LTS Advisory DLA-3639-1 [email protected] https://www.debian.org/lts/security/ Stefano Rivera October 30, 2023 https://wiki.debian.org/LTS Package : distro-info-data Version : 0.41+deb10u8 This is a routine update of the distro-info-data database for Debian LTS users. It includes...

PT-2023-6733 · Best Practical +2 · Request Tracker +2

Name of the Vulnerable Software and Affected Versions: Best Practical Request Tracker RT versions 4.4.6 and earlier Best Practical Request Tracker RT versions 5.0.4 and earlier Description: The issue allows Information Disclosure via fake or spoofed RT email headers in an email message or a...

PT-2023-29363 · Best Practical · Request Tracker

Name of the Vulnerable Software and Affected Versions: Best Practical Request Tracker RT versions 5.0.0 through 5.0.4 Description: The issue allows Information Disclosure via a transaction search in the transaction query builder. Recommendations: For versions 5.0.0 through 5.0.4, update to versio...

PT-2023-6715 · Unknown +2 · Request Tracker +2

Name of the Vulnerable Software and Affected Versions: Request Tracker RT versions 4.4.6 and earlier Request Tracker RT versions 5.x prior to 5.0.5 Description: The issue allows information exposure in responses to mail-gateway REST API calls. This is due to excessive data output by the applicati...

[SECURITY] [DLA 3634-1] nss security update

Debian LTS Advisory DLA-3634-1 [email protected] https://www.debian.org/lts/security/ Sean Whitton October 28, 2023 https://wiki.debian.org/LTS Package : nss Version : 2:3.42.1-1+deb10u7 CVE ID : CVE-2020-25648 CVE-2023-4421 Multiple vulnerabilities were found in nss, a set of libraries...

[SECURITY] [DLA 3633-1] gst-plugins-bad1.0 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3633-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz October 28, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5535-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5535-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 25, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5533-1] gst-plugins-bad1.0 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5533-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 24, 2023 https://www.debian.org/security/faq -...

Updated libcue packages fix a security vulnerability

Versions 2.2.1 and prior are vulnerable to out-of-bounds array access. A user of the GNOME desktop environment can be exploited by downloading a cue sheet from a malicious webpage. Because the file is saved to /Downloads, it is then automatically scanned by tracker-miners. And because it has a .c...