USN-7134-1: Firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. CVE-2024-11692, CVE-2024-11694,...

USN-7133-1: HAProxy vulnerability

Yuki Mogi discovered that HAProxy incorrectly handled the interpretation of certain HTTP requests. A remote attacker could possibly use this issue to perform a request smuggling attack and obtain sensitive information...

Ubuntu 24.04 LTS : HAProxy vulnerability (USN-7133-1)

The remote Ubuntu 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7133-1 advisory. Yuki Mogi discovered that HAProxy incorrectly handled the interpretation of certain HTTP requests. A remote attacker could possibly use this issue to perform a...

Ubuntu 20.04 LTS : Firefox vulnerabilities (USN-7134-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7134-1 advisory. Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially explo...

[SECURITY] [DLA 3981-1] simplesamlphp security update

Debian LTS Advisory DLA-3981-1 [email protected] https://www.debian.org/lts/security/ Santiago Ruano Rincón December 02, 2024 https://wiki.debian.org/LTS Package : simplesamlphp Version : 1.19.0-1+deb11u1 CVE ID : CVE-2024-52596 It was discovered that in SimpleSAMLphp, an implementation...

USN-7132-1: PostgreSQL vulnerabilities

It was discovered that PostgreSQL incorrectly tracked tables with row security. A remote attacker could possibly use this issue to perform forbidden reads and modifications. CVE-2024-10976 Jacob Champion discovered that PostgreSQL clients used untrusted server error messages. An attacker that is...

Debian dla-3980 : idle-python3.9 - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3980 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3980-1 [email protected]...

Ubuntu 16.04 LTS / 18.04 LTS : Ansible regression (USN-6846-2)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6846-2 advisory. USN-6846-1 fixed vulnerabilities in ansible. The update introduced a regression in ansible. This update fixes the problem. We apologize for the...

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : PostgreSQL vulnerabilities (USN-7132-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7132-1 advisory. It was discovered that PostgreSQL incorrectly tracked tables with row security. A remote attacker could possibly use this...

[SECURITY] [DLA 3979-1] lemonldap-ng security update

Debian LTS Advisory DLA-3979-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin November 30, 2024 https://wiki.debian.org/LTS Package : lemonldap-ng Version : 2.0.11+ds-4+deb11u6 CVE ID : CVE-2024-48933 CVE-2024-52946 CVE-2024-52947 Debian Bug : 1084979 Multiple...

[SECURITY] [DLA 3977-1] xfpt security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3977-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz November 30, 2024 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3973-1] redis security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3973-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk November 28, 2024 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3971-1] firefox-esr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3971-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort November 28, 2024 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3969-1] thunderbird security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3969-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort November 28, 2024 https://wiki.debian.org/LTS -...

Ubuntu: Security Advisory (USN-7127-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3968-1] netatalk security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3968-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz November 28, 2024 https://wiki.debian.org/LTS -...

USN-7092-2: mpg123 vulnerability

USN-7092-1 fixed a vulnerability in mpg123. Bastien Roucariès discovered that the fix was incomplete on Ubuntu 20.04 LTS. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that mpg123 incorrectly handled certain mp3 files. If a user or...

Ubuntu 20.04 LTS : mpg123 vulnerability (USN-7092-2)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7092-2 advisory. USN-7092-1 fixed a vulnerability in mpg123. Bastien Roucaris discovered that the fix was incomplete on Ubuntu 20.04 LTS. This update fixes the problem. We apologi...

Denial of service vulnerability in bundled json-lib

Jenkins uses the library https://github.com/jenkinsci/json-liborg.kohsuke.stapler:json-lib to process JSON. This library is the Jenkins project's fork of https://search.maven.org/artifact/net.sf.json-lib/json-libnet.sf.json-lib:json-lib, which has since been renamed to...

USN-7130-1: GitHub CLI vulnerability

It was discovered that GitHub CLI incorrectly handled username validation. An attacker could possibly use this issue to perform remote code execution if the user connected to a malicious server. CVE-2024-52308...