[SECURITY] Fedora 38 Update: java-latest-openjdk-portable-20.0.2.0.9-1.rolling.fc38

The OpenJDK 20 runtime environment - portable edition...

ALSA-2023:4642 Important: .NET 7.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.110 and .NET Runtime 7.0.10...

Fedora: Security Advisory for java-11-openjdk (FEDORA-2023-30c8205a73)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ALSA-2023:4644 Important: .NET 6.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.121 and .NET Runtime 6.0.21...

[SECURITY] Fedora 38 Update: java-11-openjdk-11.0.20.0.8-1.fc38

The OpenJDK 11 runtime environment...

[SECURITY] Fedora 37 Update: java-11-openjdk-portable-11.0.20.0.8-1.fc37

The OpenJDK 11 runtime environment - portable edition...

.NET Information Disclosure Vulnerability

Microsoft Security Advisory CVE-2023-35391: .NET Information Disclosure Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET core 2.1, .NET 6.0 and, .NET 7.0. This advisory also provides guidance on what developers c...

Security Bulletin: Multiple vulnerabilities may affect CICS Transaction Gateway for Multiplatforms and CICS Transaction Gateway Desktop Edition.

Summary IBM® Runtime Environment Java™ is used by CICS Transaction Gateway for Multiplatforms and CICS Transaction Gateway Desktop Edition. The fix updates the Java Runtime Environment to resolve the following vulnerabilities. Vulnerability Details CVEID:CVE-2022-40609 DESCRIPTION: IBM SDK, Java...

Security Bulletin: Multiple vulnerabilities may affect CICS Transaction Gateway for Multiplatforms and CICS Transaction Gateway Desktop Edition.

Summary IBM® Runtime Environment Java™ is used by CICS Transaction Gateway for Multiplatforms and CICS Transaction Gateway Desktop Edition. The fix updates the Java Runtime Environment to resolve the following vulnerabilities. Vulnerability Details CVEID:CVE-2022-40609 DESCRIPTION: IBM SDK, Java...

.NET Denial of Service Vulnerability

Microsoft Security Advisory CVE-2023-38178: .NET Denial of Service Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 7.0. This advisory also provides guidance on what developers can do to update their applications to...

Security Bulletin: Multiple Vulnerabilities in IBM® Java SDK affect IBM WebSphere Application Server shipped with IBM Business Automation Workflow containers - April 2023 CPU

Summary IBM Business Automation Workflow containers package IBM® Java SDK 8 V21.0.3 or IBM® Semeru Runtime 11 V23.0.1. Information about security vulnerabilities in these Java runtumes have been published. Vulnerability Details CVEID:CVE-2023-21930 DESCRIPTION: An unspecified vulnerability in...

[SECURITY] Fedora 38 Update: java-17-openjdk-17.0.8.0.7-1.fc38

The OpenJDK 17 runtime environment...

Security Updates for Microsoft Office Products C2R (August 2023)

The Microsoft Office Products are missing a security update. It is, therefore, affected by multiple vulnerabilities, as follows: - A remote code execution vulnerability. CVE-2023-36895 - A runtime spoofing vulnerability. CVE-2023-36897 The missing office update will also enhances security as a...

USN-6278-1: .NET vulnerabilities

It was discovered that .NET did not properly handle the execution of certain commands. An attacker could possibly use this issue to achieve remote code execution. CVE-2023-35390 Benoit Foucher discovered that .NET did not properly implement the QUIC stream limit in HTTP/3. An attacker could...

CVE-2023-36897

Visual Studio Tools for Office Runtime Spoofing Vulnerability...

CVE-2023-36897

Visual Studio Tools for Office Runtime Spoofing Vulnerability...

CVE-2023-36897

Visual Studio Tools for Office Runtime Spoofing Vulnerability...

Spoofing

Visual Studio Tools for Office Runtime Spoofing Vulnerability...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS in .NET Kestrel where a malicious client can bypass QUIC stream limit in HTTP/3 in both ASP.NET and .NET runtimes, resulting in exploitation of this vulnerability. Note: .NET 6 included HTTP/3 support as a preview...

Denial of Service (DoS)

Overview Microsoft.AspNetCore.App.Runtime.win-arm is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Denial of Service DoS in .NET Kestrel where a malicious...