Security Bulletin: A vulnerability in Apache Xerces C++ XML parser may affect IBM Storage Protect HSM for Windows

Summary IBM Storage Protect HSM for Windows can be affected by a security flaw in Apache Xerces C++ XML parser. The flaw can lead to arbitrary code execution, as described in the "Vulnerability Details" section. CVE-2024-23807. Vulnerability Details CVEID:CVE-2024-23807 DESCRIPTION: Apache Xerces...

Important Photon OS Security Update - PHSA-2024-5.0-91-0293

Updates of 'glibc' packages of Photon OS have been released...

cdr0-sg security vulnerability

cdr0-sg is an application by Brian C Sparks Personal Developer. A security vulnerability exists in cdr0 sg version 1.0.10, which originates from allowing an attacker to execute arbitrary code...

The vulnerability of the erofs_kill_sb() function in the EROFS file system, a enhanced read-only file system, in the Linux operating system, allows a malicious actor to trigger a service failure.

The vulnerability of the erofskillsb function in the fs/erofs/super.c file of the EROFS file system’s kernel for Linux operating systems is related to the release of previously unallocated memory. Exploiting this vulnerability could allow an attacker to trigger a service failure...

CVE-2024-38443

C/sorting/binaryinsertionsort.c in The Algorithms - C through e5dad3f has a segmentation fault for deep recursion, which may affect common use cases such as sorting an array of 50 elements...

PT-2024-28005 · Unknown · The Algorithms

Name of the Vulnerable Software and Affected Versions: The Algorithms - C versions through e5dad3f Description: The issue is related to a segmentation fault caused by deep recursion in the binary insertion sort.c file. This may impact common use cases, such as sorting an array of 50 elements...

OPENSUSE-SU-2024:11720-1 cargo-c-0.8.1~git0.cce1b08-2.1 on GA media

These are all security issues fixed in the cargo-c-0.8.1git0.cce1b08-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13540-1 libxerces-c-3_2-3.2.5-1.1 on GA media

These are all security issues fixed in the libxerces-c-32-3.2.5-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12885-1 libprotobuf-c-devel-1.4.1-4.1 on GA media

These are all security issues fixed in the libprotobuf-c-devel-1.4.1-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10039-1 libxerces-c-3_1-3.1.4-1.3 on GA media

These are all security issues fixed in the libxerces-c-31-3.1.4-1.3 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12175-1 libprotobuf-c-devel-1.4.0-3.1 on GA media

These are all security issues fixed in the libprotobuf-c-devel-1.4.0-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12674-1 c-ares-devel-1.19.0-2.1 on GA media

These are all security issues fixed in the c-ares-devel-1.19.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10013-1 libjson-c-devel-0.12.1-1.3 on GA media

These are all security issues fixed in the libjson-c-devel-0.12.1-1.3 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12951-1 c-ares-devel-1.19.1-1.1 on GA media

These are all security issues fixed in the c-ares-devel-1.19.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13722-1 c-ares-devel-1.27.0-1.1 on GA media

These are all security issues fixed in the c-ares-devel-1.27.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10668-1 c-ares-devel-1.17.2-2.2 on GA media

These are all security issues fixed in the c-ares-devel-1.17.2-2.2 package on the GA media of openSUSE Tumbleweed...

RLSA-2024:2853 Important: nodejs:20 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: c-ares: Out of bounds read in aresreadline CVE-2024-25629 nghttp2: CONTINUATION frames DoS CVE-2024-28182 nodejs: using the fetch function to...

c-ares bug fix and enhancement update

An update is available for c-ares. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8.10...

Rocky Linux 9 : nodejs:20 (RLSA-2024:2853)

The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:2853 advisory. c-ares: Out of bounds read in aresreadline CVE-2024-25629 nghttp2: CONTINUATION frames DoS CVE-2024-28182 nodejs: using the fetch function to retrieve...

Rocky Linux 9 : nodejs (RLSA-2024:2910)

The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:2910 advisory. nodejs: CONTINUATION frames DoS CVE-2024-27983 nodejs: using the fetch function to retrieve content from an untrusted URL leads to denial of service...