RHEL 9 : python3.9:3.9.21 (RHSA-2024:10983)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:10983 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...

SUSE SLES15 Security Update : SUSE Manager Salt Bundle (SUSE-SU-2024:4021-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:4021-1 advisory. venv-salt-minion: - Security fixes on Python 3.11 interpreter: CVE-2024-7592: Fixed quadratic complexity in parsing -quoted cookie values with...

GHSA-H97M-WW89-6JMQ vulnerabilities

Vulnerabilities for packages: helix, rye, atuin, sdp-k8s-injector, wizer, oranda, zellij, rust-analyzer, deno, linkerd2, sccache, shadowsocks-rust, qdrant, samply, wasmtime, parseable, bat, netavark, lychee, buck2, convco, wash, xh, tealdeer, rustup, pixi, nushell, linkerd2-proxy, geckodriver,...

Updated rootcerts, nss & firefox packages fix security vulnerabilities

Select list elements could be shown over another site. CVE-2024-11692 CSP Bypass and XSS Exposure via Web Compatibility Shims. CVE-2024-11694 URL Bar Spoofing via Manipulated Punycode and Whitespace Characters. CVE-2024-11695 Unhandled Exception in Add-on Signature Verification. CVE-2024-11696...

GHSA-Q3V6-HM2V-PW99 vulnerabilities

Vulnerabilities for packages: thingsboard...

RHEL 9 : tuned (RHSA-2024:10384)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:10384 advisory. The tuned packages provide a service that tunes system settings according to a selected profile. Security Fixes: tuned: scriptpre and...

CVE-2023-32188 vulnerabilities

Vulnerabilities for packages: neuvector-controller...

CVE-2024-45409 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ee-fips, gitlab-rails-ee...

CVE-2024-6232 vulnerabilities

Vulnerabilities for packages: python...

MGASA-2024-0281 Updated quictls packages fix security vulnerabilities

The updated packages fix security vulnerabilities...

MGASA-2024-0278 Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.6.43 fix bugs and vulnerabilities. For information about the vulnerabilities see the links...

CVE-2024-7520 vulnerabilities

Vulnerabilities for packages: firefox...

[slackware-security] glibc

New glibc packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/aaaglibc-solibs-2.33-i586-7slack15.0.txz: Rebuilt. patches/packages/glibc-2.33-i586-7slack15.0.txz: Rebuilt. This update fixes security...

GHSA-9PHM-FM57-RHG8 vulnerabilities

Vulnerabilities for packages: hugo, ollama, hugo-extended...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: fluent-bit-plugin-loki, argo-workflows, hugo, tkn-fips, rekor, policy-controller-fips, policy-controller, py3-azure-identity, flux, request-1276, k8sgpt, thanos, wal-g, zot, step, thanos-fips, terragrunt, prometheus-operator-fips, argo-cd, trino, cortex-fips,...

MGASA-2024-0176 Updated sssd packages fix security vulnerability

A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately. CVE-2023-3758...

GHSA-PPF8-HHPP-F5HJ vulnerabilities

Vulnerabilities for packages: hugo-extended...

MGASA-2024-0142 Updated kernel-linus packages fix security vulnerabilities

Upstream kernel version 6.6.28 fix bugs and vulnerabilities. For information about the vulnerabilities see the links...

GHSA-C9H6-V78W-52WJ vulnerabilities

Vulnerabilities for packages: keycloak...

MGASA-2024-0132 Updated php packages fix security vulnerabilities

Core: - Corrupted memory in destructor with weak references - GC does not scale well with a lot of objects created in destructor DOM: - Add some missing ZPP checks. - Fix potential memory leak in XPath evaluation results. FPM: - Fix incorrect check in fpmshmfree. Gettext: - Fixed sigabrt raised...