Input validation

Tauri is a framework for building binaries for all major desktop platforms. The 1.4.0 release includes a regression on the Filesystem scope check for dotfiles on Unix. Previously dotfiles were not implicitly allowed by the glob wildcard scopes eg. $HOME/, but a regression was introduced when a...

USN-6161-2 dotnet6, dotnet7 regression

USN-6161-1 fixed vulnerabilities in .NET. The update introduced a regression with regards to how the runtime imported X.509 certificates. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that .NET did not properly enforce certain...

.NET 7.0 Update - June 22, 2023 (KB5028614)

None None...

.NET 6.0 Update - June 22, 2023 (KB5028613)

None None...

USN-6060-3: MySQL regression

USN-6060-1 fixed vulnerabilities in MySQL. The new upstream 8.0.33 version introduced a regression on the armhf architecture. This update fixes the problem. Original advisory details: Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix the...

Ubuntu: Security Advisory (USN-6055-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2023:0668-2 Security update for libX11

This update for libX11 fixes the following issues: - Fixed a regression introduced with security update for CVE-2022-3555 bsc1204425, bsc1208881...

USN-6010-3 firefox regressions

USN-6010-1 fixed vulnerabilities and USN-6010-2 fixed minor regressions in Firefox. The update introduced several minor regressions. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple security issues were discovered in Firefox. If a user were...

SUSE-SU-2023:0683-1 Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: - Fixed a regression introduced with security update for CVE-2022-46340 bsc1205874...

SUSE-SU-2023:0667-1 Security update for libX11

This update for libX11 fixes the following issues: - Fixed regression introduced with security update for CVE-2022-3555 bsc1204425, bsc1208881...

SUSE-SU-2023:0655-1 Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: - Fixed a regression introduced with security update for CVE-2022-46340 bsc1205874...

SUSE-SU-2023:0654-1 Security update for xwayland

This update for xwayland fixes the following issues: - Fixed a regression introduced with security update for CVE-2022-46340 bsc1205874...

SUSE-SU-2023:0653-1 Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: - Fixed a regression introduced with security update for CVE-2022-46340 bsc1205874...

SUSE-SU-2023:0587-1 Security update for rubygem-activerecord-4_2

This update for rubygem-activerecord-42 contains the following fixes: - CVE-2022-44566: Fixed a potential denial of service due to an inefficient comparison between integer and numeric values. bsc1207450 - fixed regression caused by fix for CVE-2022-44566. bsc1207450...

SUSE CVE-2010-0382

ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta handles out-of-bailiwick data accompanying a secure response without re-fetching from the original source, which allows remote attackers to have an unspecified impact via a crafted response...

SUSE CVE-2018-8016

The default configuration in Apache Cassandra 3.8 through 3.11.1 binds an unauthenticated JMX/RMI interface to all network interfaces, which allows remote attackers to execute arbitrary Java code via an RMI request. This issue is a regression of CVE-2015-0225. The regression was introduced in...

USN-5825-2 pam regressions

USN-5825-1 fixed vulnerabilities in PAM. Unfortunately that update was incomplete and could introduce a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that PAM did not correctly restrict login from an IP address that is...

USN-5638-3 expat vulnerability

USN-5638-1 fixed a vulnerability in Expat. This update provides the corresponding updates for Ubuntu 16.04 ESM, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 22.10. CVE-2022-43680 This update also fixes a minor regression introduced in Ubuntu 18.04 LTS. We apologize for the...

Oracle Linux 8 : device-mapper-multipath (ELSA-2022-7928)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-7928 advisory. 0.8.4-28.1 - Add 0111-multipathd-ignore-duplicated-multipathd-command-keys.patch - Resolves: bz 2133995 Tenable has extracted the preceding description block...

device-mapper-multipath: Regression of CVE-2022-41974 fix in Red Hat Enterprise Linux

A vulnerability was found in the device-mapper-multipath. The device-mapper-multipath allows local users to obtain root access, exploited alone or in conjunction with CVE-2022-41973. Local users that are able to write to UNIX domain sockets can bypass access controls and manipulate the multipath...