OPENSUSE-SU-2024:14448-1 java-17-openjdk-17.0.13.0-1.1 on GA media

These are all security issues fixed in the java-17-openjdk-17.0.13.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14449-1 java-23-openjdk-23.0.1.0-1.1 on GA media

These are all security issues fixed in the java-23-openjdk-23.0.1.0-1.1 package on the GA media of openSUSE Tumbleweed...

Ubuntu 22.04 LTS / 24.04 LTS : Linux kernel kernel vulnerabilities (USN-7089-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7089-1 advisory. Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2024-072 (ALASKERNEL-5.10-2024-072)

The version of kernel installed on the remote host is prior to 5.10.227-219.884. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2024-072 advisory. In the Linux kernel, the following vulnerability has been resolved: inet: inetdefrag: prevent sk release...

ASB-A-363850556

Bulletin has no description...

OPENSUSE-SU-2024:14447-1 govulncheck-vulndb-0.0.20241030T212825-1.1 on GA media

These are all security issues fixed in the govulncheck-vulndb-0.0.20241030T212825-1.1 package on the GA media of openSUSE Tumbleweed...

USN-7088-1: Linux kernel vulnerabilities

Ziming Zhang discovered that the VMware Virtual GPU DRM driver in the Linux kernel contained an integer overflow vulnerability. A local attacker could use this to cause a denial of service system crash. CVE-2022-36402 Several security issues were discovered in the Linux kernel. An attacker could...

SUSE-SU-2024:3848-1 Security update for the Linux Kernel (Live Patch 45 for SLE 15 SP2)

This update for the Linux Kernel 5.3.18-15020024178 fixes several issues. The following security issues were fixed: - CVE-2021-47600: dm btree remove: fix use after free in rebalancechildren bsc1227472. - CVE-2021-47598: schcake: do not call cakedestroy from cakeinit bsc1227471. - CVE-2023-52752:...

SUSE SLES15 Security Update : kernel (Live Patch 50 for SLE 15 SP2) (SUSE-SU-2024:3768-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3768-1 advisory. This update for the Linux Kernel 5.3.18-15020024197 fixes several issues. The following security issues were fixed: - CVE-2021-47600: dm btree...

Slackware: Security Advisory (SSA:2024-304-03)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-7076-2)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7076-2 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...

MozillaThunderbird-128.4.0-1.1 on GA media (moderate)

MozillaThunderbird-128.4.0-1.1 on GA media Announcement ID: openSUSE-SU-2024:14438-1 Rating: moderate Cross-References: CVE-2024-10458 CVE-2024-10459 CVE-2024-10460 CVE-2024-10461 CVE-2024-10462 CVE-2024-10463 CVE-2024-10464 CVE-2024-10465 CVE-2024-10466 CVE-2024-10467 CVSS scores: CVE-2024-10458...

python310-Werkzeug-3.0.6-1.1 on GA media (moderate)

python310-Werkzeug-3.0.6-1.1 on GA media Announcement ID: openSUSE-SU-2024:14437-1 Rating: moderate Cross-References: CVE-2024-49767 CVSS scores: CVE-2024-49767 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2024-49767 SUSE : 6.9...

OPENSUSE-SU-2024:14445-1 python310-waitress-3.0.1-1.1 on GA media

These are all security issues fixed in the python310-waitress-3.0.1-1.1 package on the GA media of openSUSE Tumbleweed...

FreeBSD : forgejo -- multiple vulnerabilities (f07c8f87-8e65-11ef-81b8-659bf0027d16)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the f07c8f87-8e65-11ef-81b8-659bf0027d16 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's...

OPENSUSE-SU-2024:14441-1 chromedriver-130.0.6723.69-1.1 on GA media

These are all security issues fixed in the chromedriver-130.0.6723.69-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-F748-7HPG-88CH vulnerabilities

Vulnerabilities for packages: nvidia-gpu-operator-validator, nvidia-container-toolkit...

CVE-2024-10467 vulnerabilities

Vulnerabilities for packages: firefox-esr, firefox...

EUVD-2024-44956

In JetBrains YouTrack before 2024.3.47707 reflected XSS was possible in Widget API...

[SECURITY] [DSA 5799-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5799-1 [email protected] https://www.debian.org/security/ Andres Salomon October 28, 2024 https://www.debian.org/security/faq -...