6633 matches found
USN-6263-2: OpenJDK regression
USN-6263-1 fixed vulnerabilities in OpenJDK. Unfortunately, that update introduced a regression when opening APK, ZIP or JAR files in OpenJDK 11 and OpenJDK 17. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Motoyasu Saburi discovered that OpenJDK...
USN-6263-2 openjdk-lts, openjdk-17 regression
USN-6263-1 fixed vulnerabilities in OpenJDK. Unfortunately, that update introduced a regression when opening APK, ZIP or JAR files in OpenJDK 11 and OpenJDK 17. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Motoyasu Saburi discovered that OpenJDK...
SUSE-SU-2023:3401-1 Security update for erlang
This update for erlang fixes the following issues: - Replaced the CVE-2022-37026 patch with the one released by the upstream to fix a regression in the previous one. bsc1205318...
[SECURITY] [DLA 3538-1] zabbix security update
Debian LTS Advisory DLA-3538-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost August 22, 2023 https://wiki.debian.org/LTS Package : zabbix Version : 1:4.0.4+dfsg-1+deb10u2 CVE ID : CVE-2013-7484 CVE-2019-17382 CVE-2022-35229 CVE-2022-43515 CVE-2023-29450...
Debian: Security Advisory (DLA-3538-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
OPENSUSE-SU-2023:0225-1 Security update for perl-Cpanel-JSON-XS
This update for perl-Cpanel-JSON-XS fixes the following issues: perl-Cpanel-JSON-XS was updated to 4.36 see /usr/share/doc/packages/perl-Cpanel-JSON-XS/Changes 4.36 2023-03-02 rurban - remove the SAVESTACKPOS noop. Merged from JSON-XS-3.02, removed there with 4.0. requested to remove with L 4.35...
[SECURITY] [DLA 3426-3] netatalk regression update
Debian LTS Advisory DLA-3426-3 [email protected] https://www.debian.org/lts/security/ Markus Koschany August 13, 2023 https://wiki.debian.org/LTS Package : netatalk Version : 3.1.12ds-3+deb10u3 CVE ID : CVE-2022-23123 Debian Bug : 1043504 Another regression was identified in Netatalk, t...
DLA-3426-3 netatalk - regression update
Bulletin has no description...
[SECURITY] [DLA 3495-2] php-dompdf regression update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3495-2 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès August 10, 2023 https://wiki.debian.org/LTS -...
USN-6237-2: curl regression | Cloud Foundry
Severity Unknown Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 22.04 Description USN-6237-1 fixed vulnerabilities in curl. The update caused a certificate wildcard handling regression on Ubuntu 22.04 LTS. This update fixes the problem. We apologize for the inconvenience. Original...
DLA-3495-2 php-dompdf - regression update
Bulletin has no description...
USN-6243-2: Graphite-Web regression
USN-6243-1 fixed vulnerabilities in Graphite-Web. It was discovered that the applied fix was incomplete. This update fixes the problem. Original advisory details: It was discovered that Graphite-Web incorrectly handled certain inputs. If a user or an automated system were tricked into opening a...
USN-6243-2 graphite-web regression
USN-6243-1 fixed vulnerabilities in Graphite-Web. It was discovered that the applied fix was incomplete. This update fixes the problem. Original advisory details: It was discovered that Graphite-Web incorrectly handled certain inputs. If a user or an automated system were tricked into opening a...
Ubuntu 18.04 ESM : Graphite-Web regression (USN-6243-2)
The remote Ubuntu 18.04 ESM host has a package installed that is affected by a vulnerability as referenced in the USN-6243-2 advisory. USN-6243-1 fixed vulnerabilities in Graphite-Web. It was discovered that the applied fix was incomplete. This update fixes the problem. Tenable has extracted the...
Important: Red Hat Security Advisory: kernel security and bug fix update
An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
Design/Logic Flaw
cypress-image-snapshot shows visual regressions in Cypress with jest-image-snapshot. Prior to version 8.0.2, it's possible for a user to pass a relative file path for the snapshot name and reach outside of the project directory into the machine running the test. This issue has been patched in...
CVE-2023-38695 cypress-image-snapshot vulnerable to insecure snapshot file names
cypress-image-snapshot shows visual regressions in Cypress with jest-image-snapshot. Prior to version 8.0.2, it's possible for a user to pass a relative file path for the snapshot name and reach outside of the project directory into the machine running the test. This issue has been patched in...
CVE-2023-38695
CVE-2023-38695 affects the cypress-image-snapshot plugin (used with Cypress). The vulnerability allows a user to pass a relative file path as the snapshot name, enabling path traversal outside the project directory on the machine running tests. This is mitigated by upgrading to version 8.0.2 or l...
SUSE-SU-2023:3179-1 Security update for openssl-1_1
This update for openssl-11 fixes the following issues: - CVE-2022-4304: Reworked the fix for the Timing-Oracle in RSA decryption. The previous fix for this timing side channel turned out to cause a severe 2-3x performance regression in the typical use case bsc1207534. - CVE-2023-3446: Fixed DHche...
SUSE-SU-2023:3096-1 Security update for compat-openssl098
This update for compat-openssl098 fixes the following issues: - CVE-2022-4304: Reworked the fix for the Timing-Oracle in RSA decryption. The previous fix for this timing side channel turned out to cause a severe 2-3x performance regression in the typical use case bsc1207534. - CVE-2023-3446: Fixe...