Debian dla-3609 : golang-github-prometheus-alertmanager-dev - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3609 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3609-1 [email protected] https://www.debian.org/lts/security/...

Debian dla-3611 : inetutils - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3611 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3611-1 [email protected]...

Debian dla-3607 : gnome-boxes - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3607 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3607-1 [email protected] https://www.debian.org/lts/security/...

USN-6416-2: Linux kernel vulnerabilities

It was discovered that the IPv6 implementation in the Linux kernel contained a high rate of hash collisions in connection lookup table. A remote attacker could use this to cause a denial of service excessive CPU consumption. CVE-2023-1206 Daniël Trujillo, Johannes Wikner, and Kaveh Razavi...

Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-6416-2)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6416-2 advisory. It was discovered that the IPv6 implementation in the Linux kernel contained a high rate of hash collisions in connection lookup table. A remote attacker...

[SECURITY] [DLA 3603-1] libxpm security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3603-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort October 05, 2023 https://wiki.debian.org/LTS -...

Debian dla-3604 : qemu - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3604 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3604-1 [email protected]...

Debian dla-3602 : libx11-6 - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3602 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3602-1 [email protected]...

Debian dla-3605 : grub-common - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3605 advisory. - ----------------------------------------------------------------------- Debian LTS Advisory DLA-3605-1 [email protected]...

Ubuntu 18.04 ESM / 20.04 LTS : Node.js vulnerabilities (USN-6418-1)

The remote Ubuntu 18.04 ESM / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6418-1 advisory. It was discovered that Node.js incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially...

Debian dla-3603 : libxpm-dev - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3603 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3603-1 [email protected]...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS : jQuery UI vulnerabilities (USN-6419-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6419-1 advisory. Hong Phat Ly discovered that jQuery UI did not properly manage parameters from untrusted sources, which could lead to arbitrary w...

USN-6416-1: Linux kernel vulnerabilities

It was discovered that the IPv6 implementation in the Linux kernel contained a high rate of hash collisions in connection lookup table. A remote attacker could use this to cause a denial of service excessive CPU consumption. CVE-2023-1206 Daniel Trujillo, Johannes Wikner, and Kaveh Razavi...

USN-6415-1: Linux kernel (OEM) vulnerabilities

Daniel Trujillo, Johannes Wikner, and Kaveh Razavi discovered that some AMD processors utilising speculative execution and branch prediction may allow unauthorised memory reads via a speculative side-channel attack. A local attacker could use this to expose sensitive information, including kernel...

USN-6404-1: Firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. CVE-2023-5169, CVE-2023-5170,...

Ubuntu 20.04 LTS / 22.04 LTS / 23.04 : Thunderbird vulnerabilities (USN-6405-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6405-1 advisory. Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsin...

Debian dla-3599 : exim4 - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3599 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3599-1 [email protected]...

Ubuntu 20.04 LTS : Firefox vulnerabilities (USN-6404-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6404-1 advisory. Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially explo...

Debian dla-3600 : libecpg-compat3 - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3600 advisory. - ----------------------------------------------------------------------- Debian LTS Advisory DLA-3600-1 [email protected] https://www.debian.org/lts/security/...

[SECURITY] [DLA 3599-1] exim4 security update

Debian LTS Advisory DLA-3599-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany October 02, 2023 https://wiki.debian.org/LTS Package : exim4 Version : 4.92-8+deb10u8 CVE ID : CVE-2023-42114 CVE-2023-42116 Several vulnerabilities were discovered in Exim, a mail...