KB5032383: Servicing stack update for Windows Server 2008 R2 SP1: November 14, 2023

KB5032383: Servicing stack update for Windows Server 2008 R2 SP1: November 14, 2023 REMINDER As of January 10, 2023, Microsoft no longer provides security updates or technical support for Windows 7 Service Pack 1 SP1. We recommend that you upgrade to a supported version of Windows.Upgrade to...

pytest-embedded-serial-esp (>=0.6.0, <=0.7.1), teramesh-hardware-tester (>=0.1.0, <=0.9.0) potentially affected by CVE-2023-46894 via esptool (3.3.3)

esptool PYPI version 3.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on esptool and may be impacted: - pytest-embedded-serial-esp =0.6.0, =0.1.0, =0.9.0 Source cves: CVE-2023-46894 Source advisory: OSV:GHSA-3F38-96QM-R3FW...

org.wildfly.core:wildfly-deployment-scanner (1.0.0.beta6), org.wildfly.core:wildfly-domain-http-interface (1.0.0.beta6) +19 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (1.0.0.beta6)

org.wildfly.core:wildfly-controller MAVEN version 1.0.0.beta6 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 1.0.0.beta6 -...

org.wildfly.arquillian:wildfly-arquillian-common (1.0.0.cr1), org.wildfly.arquillian:wildfly-arquillian-container-embedded (1.0.0.cr1) +25 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (1.0.0.cr2)

org.wildfly.core:wildfly-controller MAVEN version 1.0.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.arquillian:wildfly-arquillian-common 1.0.0.cr1 -...

org.wildfly.core:wildfly-deployment-scanner (1.0.0.beta3), org.wildfly.core:wildfly-domain-http-interface (1.0.0.beta3) +18 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (1.0.0.beta3)

org.wildfly.core:wildfly-controller MAVEN version 1.0.0.beta3 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 1.0.0.beta3 -...

org.wildfly.core:wildfly-deployment-scanner (1.0.0.cr3), org.wildfly.core:wildfly-domain-http-interface (1.0.0.cr3) +19 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (1.0.0.cr3)

org.wildfly.core:wildfly-controller MAVEN version 1.0.0.cr3 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 1.0.0.cr3 -...

org.wildfly.core:wildfly-deployment-scanner (1.0.0.cr4), org.wildfly.core:wildfly-domain-http-interface (1.0.0.cr4) +19 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (1.0.0.cr4)

org.wildfly.core:wildfly-controller MAVEN version 1.0.0.cr4 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 1.0.0.cr4 -...

org.wildfly.core:wildfly-deployment-scanner (2.0.0.alpha1), org.wildfly.core:wildfly-domain-http-interface (2.0.0.alpha1) +19 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (2.0.0.alpha1)

org.wildfly.core:wildfly-controller MAVEN version 2.0.0.alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 2.0.0.alpha1 -...

org.hawkular.agent:hawkular-dmr-client (>=0.1.0, <=0.3.0), org.hawkular.agent:hawkular-monitor (>=0.1.0, <=0.3.0) +73 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (1.0.0.cr6)

org.wildfly.core:wildfly-controller MAVEN version 1.0.0.cr6 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.hawkular.agent:hawkular-dmr-client =0.1.0, =0.1.0, =0.1.0, =0.1.0, =8.0.0.beta1,...

org.wildfly.core:wildfly-deployment-scanner (2.0.0.alpha3), org.wildfly.core:wildfly-domain-http-interface (2.0.0.alpha3) +44 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (2.0.0.alpha3)

org.wildfly.core:wildfly-controller MAVEN version 2.0.0.alpha3 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 2.0.0.alpha3 -...

Micrium uC-HTTP Buffer Error Vulnerability

Micrium uC-HTTP is a software from Micrium USA that provides TCP/IP functionality for devices. The software is designed for embedded applications with a compact, reliable, high-performance TCP/IP stack with dual support for IPv4 and IPv6. A buffer error vulnerability exists in Micrium uC-HTTP...

[SECURITY] Fedora 39 Update: mbedtls-2.28.5-1.fc39

Mbed TLS is a light-weight open source cryptographic and SSL/TLS library written in C. Mbed TLS makes it easy for developers to include cryptographic and SSL/TLS capabilities in their embedded applications with as little hassle as possible...

You’d be surprised to know what devices are still using Windows CE

Windows CE -- an operating system that, despite being out for 27 years, never had an official explanation for why it was called "CE" -- finally reached its official end-of-life period this week. This was Microsofts first operating system for embedded and pocket devices, making an appearance on...

[SECURITY] Fedora 37 Update: mbedtls-2.28.5-1.fc37

Mbed TLS is a light-weight open source cryptographic and SSL/TLS library written in C. Mbed TLS makes it easy for developers to include cryptographic and SSL/TLS capabilities in their embedded applications with as little hassle as possible...

Linux ENE USB Storage Heap Buffer Overflow DoS

The vulnerability of the mslibprocessbootblock function in the drivers/usb/storage/eneub6250.c file of the eneusb6250 driver for the ENE SD/MS embedded system in the Linux operating system is related to access to memory beyond the allocated buffer. Exploiting this vulnerability could allow a...

OESA-2023-1747 xerces-j2 security update

Security Fixes: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: JAXP. Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attack...

OESA-2023-1746 xerces-j2 security update

Security Fixes: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: JAXP. Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attack...

Adobe Bridge Memory Use After Free Unauthorized Access

The vulnerability of the Adobe Bridge file manager is related to the use of memory after it is freed during the processing of embedded fonts. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information by opening a specially created file or a malicious...

Adobe Bridge Buffer Overflow Unauthorized Access

The vulnerability of the Adobe Bridge file manager is related to the issue where operations are performed outside the buffer in memory when processing embedded fonts. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information by opening a specially...

Debian dla-3620 : gir1.2-poppler-0.18 - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3620 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3620-1 [email protected]...