[SECURITY] Debian 10 LTS will reach end-of-life on June 30th, 2024

Dear Debian LTS users, This is a gentle reminder that Debian 10 "buster" will reach end of support as the LTS release on June 30, 2024. Users are encouraged to upgrade to Debian 11 "bullseye". Starting in July, Debian will not provide further security updates for Debian 10. A subset of buster...

[SECURITY] Debian 10 LTS will reach end-of-life on June 30th, 2024

Dear Debian LTS users, This is a gentle reminder that Debian 10 "buster" will reach end of support as the LTS release on June 30, 2024. Users are encouraged to upgrade to Debian 11 "bullseye". Starting in July, Debian will not provide further security updates for Debian 10. A subset of buster...

Fedora 40 : stalld (2024-d198253c42)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-d198253c42 advisory. address issues found in Static Application Security testing Fix a service startup issue Fix file open issue when kernel lockdown is in effect Tenable has...

The UK Bans Default Passwords

The UK is the first country to ban default passwords on IoT devices. On Monday, the United Kingdom became the first country in the world to ban default guessable usernames and passwords from these IoT devices. Unique passwords installed by default are still permitted. The Product Security and...

Vulnerabilities fixed in Cisco IP phones

Cisco has fixed vulnerabilities in the firmware of several IP Phone systems. A malicious party could exploit the vulnerabilities to cause a denial-of-service, or gain access to sensitive data on the vulnerable device and thus potentially manipulate phone calls. Cisco has released updates to fix t...

RHEL 8 : kernel (RHSA-2024:2674)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:2674 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security fixes: kernel: mlxsw: spectrumacltcam: Fix...

Fedora 40 : tpm2-tools / tpm2-tss (2024-0c9d3b51d4)

The remote Fedora 40 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2024-0c9d3b51d4 advisory. tpm2-tss: Fixed CVE-2024-29040 tpm2-tools: Fixed CVE-2024-29038 Fixed CVE-2024-29039 Tenable has extracted the preceding description block directly...

Vulnerabilities fixed in ArubaOS and Aruba SD-WAN

Aruba Networks has fixed vulnerabilities in ArubaOS and SD-WAN as used by Aruba Mobility Conductor former Mobility Master, Mobility Controllers, WLAN Gateways and SD-WAN Gateways. A malicious party can exploit the vulnerabilities to launch a denial-of-service DoS, gain access to sensitive data or...

MGASA-2024-0155 Updated mediawiki packages fix security vulnerabilities

Mediawiki v1.40.0 does not validate namespaces used in XML files. Therefore, if the instance administrator allows XML file uploads, a remote attacker with a low-privileged user account can use this exploit to become an administrator by sending a malicious link to the instance administrator...

RHEL 9 : libXpm (RHSA-2024:2146)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:2146 advisory. X.Org X11 libXpm runtime library. Security Fixes: libXpm: out of bounds read in XpmCreateXpmImageFromBuffer CVE-2023-43788 libXpm: out of...

RHEL 9 : kernel-rt (RHSA-2024:2628)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:2628 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

RHEL 9 : motif (RHSA-2024:2217)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:2217 advisory. The motif packages include the Motif shared libraries needed to run applications which are dynamically linked against Motif, as well as MWM,...

RHEL 9 : squashfs-tools (RHSA-2024:2396)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:2396 advisory. SquashFS is a highly compressed read-only file system for Linux. These packages contain the utilities for manipulating squashfs file systems...

RHEL 9 : grafana (RHSA-2024:2568)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:2568 advisory. Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: grafana:...

RHEL 9 : freeglut (RHSA-2024:2366)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:2366 advisory. freeglut is a completely open source alternative to the OpenGL Utility Toolkit GLUT library with an OSI approved free software license...

RHEL 9 : libvirt (RHSA-2024:2560)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:2560 advisory. The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems...

Fedora 40 : libuev (2024-40fbf3ee48)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-40fbf3ee48 advisory. Security fix for CVE-2022-48620 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

Fedora 37 : php (2023-5732365005)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-5732365005 advisory. PHP version 8.1.14 05 Jan 2023 Core: Fixed bug GH-9905 constant behaves inconsistent when class is undefined. cmb Fixed bug GH-9918 License...

Fedora 40 : iperf3 (2023-6edfbd5d17)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-6edfbd5d17 advisory. Automatic update for iperf3-3.15-1.fc40. Changelog Tue Oct 17 2023 Jonathan Wright - 3.15-1 - Update to 3.15 rhbz2239199 rhbz2244708 Tenable has extracted th...

Fedora 40 : gh (2023-684eb03db0)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-684eb03db0 advisory. Automatic update for gh-2.33.0-1.fc40. Changelog Wed Aug 23 2023 Mikel Olasagasti Uranga - 2.33.0-1 - Update to 2.33.0 - Closes rhbz2233559 rhbz2229593 Tenab...