USN-7289-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - x86 architecture; - Block layer subsystem; - ACPI drivers; - GPU drivers; - HID subsystem; -...

USN-7285-1: nginx vulnerability

It was discovered that nginx incorrectly handled when multiple server blocks are configured to share the same IP address and port. An attacker could use this issue to use session resumption to bypass client certificate authentication requirements on these servers. This issue only affected Ubuntu...

USN-7269-2: Intel Microcode vulnerabilities

USN-7269-1 fixed vulnerabilities in Intel Microcode. This update provides the corresponding updates for Ubuntu 24.04 LTS. Original advisory details: Ke Sun, Paul Grosen and Alyssa Milburn discovered that some Intel® Processors did not properly implement Finite State Machines FSMs in Hardware Logi...

USN-7284-1 netty vulnerabilities

Jonathan Leitschuh discovered that Netty did not correctly handle file permissions when writing temporary files. An attacker could possibly use this issue to leak sensitive information. CVE-2022-24823 It was discovered that Netty did not correctly handle limiting the number of fields when decodin...

Ubuntu 22.04 LTS : Linux kernel vulnerabilities (USN-7288-1)

"The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7288-1 advisory. Attila Szsz discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a...

Ubuntu 24.04 LTS : Intel Microcode vulnerabilities (USN-7269-2)

The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7269-2 advisory. USN-7269-1 fixed vulnerabilities in Intel Microcode. This update provides the corresponding updates for Ubuntu 24.04 LTS. Tenable has extracted the...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : Netty vulnerabilities (USN-7284-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7284-1 advisory. Jonathan Leitschuh discovered that Netty did not correctly handle file permissions when writing...

Ubuntu 22.04 LTS : Linux kernel vulnerabilities (USN-7289-1)

"The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7289-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws i...

Ubuntu 16.04 LTS : Linux kernel (KVM) vulnerabilities (USN-7262-2)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7262-2 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...

[SECURITY] [DLA 4065-1] krb5 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4065-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès February 23, 2025 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 4063-1] gnutls28 security update

Debian LTS Advisory DLA-4063-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin February 21, 2025 https://wiki.debian.org/LTS Package : gnutls28 Version : 3.7.1-5+deb11u7 CVE ID : CVE-2024-12243 Bing Shi discovered that GnuTLS, a portable library which implements th...

[SECURITY] [DLA 4062-1] python-werkzeug security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4062-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb February 21, 2025 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 4052-2] postgresql-13 regression update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4052-2 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort February 21, 2025 https://wiki.debian.org/LTS -...

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : GnuTLS vulnerability (USN-7281-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7281-1 advisory. Bing Shi discovered that GnuTLS incorrectly handled decoding certain DER-encoded certificates. A remote attacker could possibly us...

Ubuntu 24.04 LTS : Libtasn1 vulnerability (USN-7275-2)

The remote Ubuntu 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7275-2 advisory. USN-7275-1 fixed vulnerabilities in Libtasn1. This update provides the corresponding updates for Ubuntu 24.04 LTS. Tenable has extracted the preceding description...

Ubuntu 16.04 LTS : tomcat7 vulnerabilities (USN-7282-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7282-1 advisory. It was discovered that Tomcat incorrectly handled being configured with HTTP PUTs enabled. A remote attacker could use this issue to upload a JSP file to...

USN-7278-1: OpenSSL vulnerabilities

George Pantelakis and Alicja Kario discovered that OpenSSL had a timing side-channel when performing ECDSA signature computations. A remote attacker could possibly use this issue to recover private data. CVE-2024-13176 It was discovered that OpenSSL incorrectly handled certain memory operations...

[SECURITY] [DLA 4059-1] mosquitto security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4059-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA February 20, 2025 https://wiki.debian.org/LTS -...

USN-7274-1: Atril vulnerabilities

It was discovered that Atril incorrectly handled certain PDF files. An attacker could possibly use this issue to cause a denial of service or to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS. CVE-2019-1010006 Andy Nguyen discovered that Atril incorrectly handled certain images...

Debian dla-4057 : openssh-client - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4057 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4057-1 [email protected] https://www.debian.org/lts/security/...