DLA-4010-1 python-django - security update

Bulletin has no description...

CVE-2024-11842 DN Shipping by Weight for WooCommerce < 1.2 - Settings Update via CSRF

The DN Shipping by Weight for WooCommerce WordPress plugin before 1.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

chromedriver-131.0.6778.204-1.1 on GA media (moderate)

chromedriver-131.0.6778.204-1.1 on GA media Announcement ID: openSUSE-SU-2024:14607-1 Rating: moderate Cross-References: CVE-2024-12692 CVE-2024-12693 CVE-2024-12694 CVE-2024-12695 Affected Products: openSUSE Tumbleweed An update that solves 4 vulnerabilities can now be installed. Description:...

mpg123:1.32.9 security update

1.32.9-1 - Rebase to 1.32.9, includes patch for CVE-2024-10573 Resolves: RHEL-65445 1.26.2-6 - Add patch for CVE-2024-10573 Resolves: RHEL-65445...

tailscale-1.78.3-2.1 on GA media (moderate)

tailscale-1.78.3-2.1 on GA media Announcement ID: openSUSE-SU-2024:14602-1 Rating: moderate Cross-References: CVE-2024-45337 CVSS scores: CVE-2024-45337 SUSE : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now b...

openSUSE Security Advisory (SUSE-SU-2024:4329-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

libmozjs-128-0-128.5.1-2.1 on GA media (moderate)

libmozjs-128-0-128.5.1-2.1 on GA media Announcement ID: openSUSE-SU-2024:14588-1 Rating: moderate Cross-References: CVE-2024-50602 CVSS scores: CVE-2024-50602 SUSE : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2024-50602 SUSE : 5.6...

docker-stable-24.0.9_ce-4.1 on GA media (moderate)

docker-stable-24.0.9ce-4.1 on GA media Announcement ID: openSUSE-SU-2024:14571-1 Rating: moderate Cross-References: CVE-2024-23653 CVSS scores: CVE-2024-23653 SUSE : 7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can n...

python36:3.6 security update

python36 python-distro python-docs python-docutils python-nose python-pygments python-pymongo python-PyMySQL python-sqlalchemy python-virtualenv 15.1.0-23 - Security fix for CVE-2024-53899 Resolves: RHEL-68876 python-wheel scipy...

python3.9:3.9.21 security update

3.9.21-1 - Update to 3.9.21 - Security fix for CVE-2024-11168 and CVE-2024-9287 Resolves: RHEL-64888 Resolves: RHEL-67259...

CVE-2024-47705 affecting package kernel for versions less than 5.15.173.1-1

CVE-2024-47705 affecting package kernel for versions less than 5.15.173.1-1. An upgraded version of the package is available that resolves this issue...

Moderate: php:7.4 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: 1-byte array overrun in common path resolve code CVE-2023-0568 php: Passwordverify always return true with some hash CVE-2023-0567 php: Missing error check and insufficient random bytes in...

python310-Django4-4.2.17-1.1 on GA media (moderate)

python310-Django4-4.2.17-1.1 on GA media Announcement ID: openSUSE-SU-2024:14565-1 Rating: moderate Cross-References: CVE-2024-53907 CVE-2024-53908 CVSS scores: CVE-2024-53907 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2024-53908 SUSE : 9.1...

DLA-3988-1 jinja2 - security update

Bulletin has no description...

SUSE-SU-2024:4217-1 Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-15060021 fixes several issues. The following security issues were fixed: - CVE-2024-36904: tcp: Use refcountincnotzero in tcptwskunique bsc1225733. - CVE-2024-43861: Fix memory leak for not ip packets bsc1229553. - CVE-2024-35949: btrfs: make sure that WRITT...

ALSA-2024:10779 Moderate: python3:3.6.8 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

Fedora 41 : qbittorrent (2024-1c74fc369b)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-1c74fc369b advisory. - Update to 5.0.2 fix rhbz2326888 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...

tomcat-9.0.97-1.1 on GA media (moderate)

tomcat-9.0.97-1.1 on GA media Announcement ID: openSUSE-SU-2024:14525-1 Rating: moderate Cross-References: CVE-2024-52316 CVSS scores: CVE-2024-52316 SUSE : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2024-52316 SUSE : 10 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H...

Fedora 40 : cobbler (2024-76d8603c78)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-76d8603c78 advisory. Update to 3.3.7 - CVE-2024-47533 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

ALSA-2024:10218 Moderate: perl-App-cpanminus security update

Why? It's dependency free, requires zero configuration, and stands alone but it's maintainable and extensible with plug-ins and friendly to shell scripting. When running, it requires only 10 MB of RAM. Security Fixes: perl-App-cpanminus: Insecure HTTP in App::cpanminus Allows Code Execution...