Slackware: Security Advisory (SSA:2024-270-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[slackware-security] boost

New boost packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/boost-1.78.0-i586-3slack15.0.txz: Rebuilt. Get rid of hardcoded temporary paths in the cmake files. Since these paths point to a locati...

RHSA-2013:0668 Red Hat Security Advisory: boost security update

Bulletin has no description...

RHSA-2012:0305 Red Hat Security Advisory: boost security and bug fix update

Bulletin has no description...

OPENSUSE-SU-2024:0274-1 Security update for cacti, cacti-spine

This update for cacti, cacti-spine fixes the following issues: - cacti 1.2.27: CVE-2024-34340: Authentication Bypass when using using older password hashes boo1224240 CVE-2024-25641: RCE vulnerability when importing packages boo1224229 CVE-2024-31459: RCE vulnerability when plugins include files...

PT-2024-38047

Name of the Vulnerable Software and Affected Versions The Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popups Builder plugin for WordPress versions up to, and including, 1.19.0 Description The issue is related to Stored Cross-Site Scripting via the close text...

OSV-2024-914 UNKNOWN READ in boost::re_detail_500::basic_regex_formatter<std::__1::ostream_iterator<char, cha

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66851 Crash type: UNKNOWN READ Crash state: boost::redetail500::basicregexformatter boost::red...

CVE-2024-40975

CVE-2024-40975 affects the Linux kernel in platform/x86/x86-android-tablets code. The issue arises when a device is unregistered while consumers still hold references, with the regulator subsystem given as a concrete example. If a regulator is unregistered prematurely, a WARN() can be triggered (...

CBL Mariner 2.0 Security Update: blosc / boost / cloud-hypervisor / cloud-hypervisor-cvm / keras / nmap / rust (CVE-2023-45853)

The version of blosc / boost / cloud-hypervisor / cloud-hypervisor-cvm / keras / nmap / rust installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-45853 advisory. - MiniZip in zlib through 1.3 has an...

CBL Mariner 2.0 Security Update: boost / cloud-hypervisor-cvm / cmake / erlang / grpc / mariadb / nmap / qt5-qtbase / teckit (CVE-2018-25032)

The version of boost / cloud-hypervisor-cvm / cmake / erlang / grpc / mariadb / nmap / qt5-qtbase / teckit installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2018-25032 advisory. - zlib before 1.2.12 allo...

Malicious code in discord-boost (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-5057 Malicious code in discord-boost (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-4827 Malicious code in boost-tool-api (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-4826 Malicious code in boost-tool (PyPI)

--- -= Per source details. Do not edit below this line.=-...

SUSE CVE-2023-52775

In the Linux kernel, the following vulnerability has been resolved: net/smc: avoid data corruption caused by decline We found a data corruption issue during testing of SMC-R on Redis applications. The benchmark has a low probability of reporting a strange error as shown below. "Error: Protocol...

PT-2024-24188 · Unknown · Phone Cleaner: Boost & Clean

Name of the Vulnerable Software and Affected Versions: Phone Cleaner: Boost & Clean version 2.2.0 Description: The issue is related to incorrect access control in the fingerprint authentication mechanism, allowing attackers to bypass fingerprint authentication due to the use of a deprecated API...

CVE-2024-31682: Incorrect Authorization

Incorrect access control in the fingerprint authentication mechanism of Phone Cleaner: Boost & Clean v2.2.0 allows attackers to bypass fingerprint authentication due to the use of a deprecated API...

CVE-2024-33218

A security vulnerability exists in the AsUpIO64.sys component of the ASUSTeK Computer Inc ASUS USB 3.0 Boost Storage Driver version 5.30.20.0 . The root cause is an exposed IOCTL with insufficient access control , which allows an attacker to escalate privileges and execute arbitrary code by sendi...

CVE-2024-33218: Exposed IOCTL with Insufficient Access Control

An issue in the component AsUpIO64.sys of ASUSTeK Computer Inc ASUS USB 3.0 Boost Storage Driver 5.30.20.0 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests...

Security Bulletin: Multiple security vulnerabilities have been identified in IBM Db2 shipped with IBM Security Guardium Key Lifecycle Manager (April 2024)

Summary IBM Db2 is shipped as a component of IBM Security Key Lifecycle Manager SKLM/GKLM. Information about multiple security vulnerabilities affecting IBM Db2 has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...