USN-7261-2 vim vulnerability

USN-7261-1 fixed vulnerabilities in Vim. This update provides the corresponding updates for Ubuntu 24.04 LTS. Original advisory details: It was discovered that Vim incorrectly handled certain internal calls when scrolling a window. An attacker could possibly use this issue to cause a denial of...

[SECURITY] [DLA 4105-1] tzdata new timezone database

------------------------------------------------------------------------- Debian LTS Advisory DLA-4105-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort April 01, 2025 https://wiki.debian.org/LTS -...

Debian dla-4104 : freetype2-demos - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4104 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4104-1 [email protected] https://www.debian.org/lts/security/...

Ubuntu 24.04 LTS / 24.10 : Smarty vulnerability (USN-7377-1)

The remote Ubuntu 24.04 LTS / 24.10 host has a package installed that is affected by a vulnerability as referenced in the USN-7377-1 advisory. It was discovered that Smarty did not properly sanitize template file names. An attacker could possibly use this issue to cause Smarty to crash, resulting...

Ubuntu 22.04 LTS : Linux kernel (HWE) vulnerabilities (USN-7403-1)

"The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7403-1 advisory. Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker...

Ubuntu 18.04 LTS : Linux kernel (AWS) vulnerabilities (USN-7401-1)

"The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7401-1 advisory. Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cau...

Ubuntu 24.04 LTS : Linux kernel (OEM) vulnerabilities (USN-7386-1)

"The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7386-1 advisory. Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker...

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-7391-1)

"The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7391-1 advisory. Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use...

Ubuntu 24.04 LTS : Linux kernel (OEM) vulnerabilities (USN-7382-1)

"The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7382-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws i...

USN-7400-1: PHP vulnerabilities

It was discovered that PHP incorrectly handle certain inputs. An attacker could possibly use this issue to cause a crash or execute arbitrary code. CVE-2024-11235 It was discovered that PHP incorrectly handle certain folded headers. An attacker could possibly use this issue to cause a crash or...

[SECURITY] [DLA 4100-1] libdata-entropy-perl security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4100-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk March 31, 2025 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 4098-1] amd64-microcode security update

Debian LTS Advisory DLA-4098-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost March 31, 2025 https://wiki.debian.org/LTS Package : amd64-microcode Version : 3.20250311.1deb11u1 CVE ID : CVE-2024-56161 Debian Bug : 1095470 A potential vulnerability has been found for...

XWiki Standard 14.10 Remote Code Execution

XWiki Standard version 14.10 proof of concept remote code execution exploit. Exploit Title: CVE-2023-48292 Remote Code Execution Exploit Google Dork: N/A Date: 23 March 2025 Exploit Author: Mehran Seifalinia Vendor Homepage: https://www.xwiki.org/ Software Link:...

Ubuntu 16.04 LTS : Doorkeeper vulnerabilities (USN-7394-1)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7394-1 advisory. Jonathan Clem and Justin Bull discovered that Doorkeeper could allow arbitrary token revocation and replay attacks. An attacker could possibly use this...

Ubuntu 22.04 LTS / 24.04 LTS / 24.10 : WebKitGTK vulnerabilities (USN-7395-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7395-1 advisory. Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious...

[SECURITY] [DLA 4097-1] vim security update

Debian LTS Advisory DLA-4097-1 [email protected] https://www.debian.org/lts/security/ Sean Whitton March 30, 2025 https://wiki.debian.org/LTS Package : vim Version : 2:8.2.2434-3+deb11u3 CVE ID : CVE-2021-3872 CVE-2021-4019 CVE-2021-4173 CVE-2021-4187 CVE-2022-0261 CVE-2022-0351...

Debian dla-4097 : vim - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4097 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4097-1 [email protected]...

USN-7393-1: Linux kernel (FIPS) vulnerabilities

Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2024-23848 Attila Szász discovered that the HFS+ file system...

USN-7387-3: Linux kernel (Real-time) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - RISC-V architecture; - S390 architecture; - Supe...

Debian dla-4093 : libsaml-dev - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4093 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4093-1 [email protected] https://www.debian.org/lts/security/...