OPENSUSE-SU-2024:14432-1 java-11-openjdk-11.0.25.0-1.1 on GA media

These are all security issues fixed in the java-11-openjdk-11.0.25.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14433-1 python310-pytest-html-4.1.1-3.1 on GA media

These are all security issues fixed in the python310-pytest-html-4.1.1-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14434-1 python314-3.14.0~a1-1.1 on GA media

These are all security issues fixed in the python314-3.14.0a1-1.1 package on the GA media of openSUSE Tumbleweed...

Fortinet FortiWeb OpenSSH Terrapin attack (CVE-2023-48795) (FG-IR-23-490)

The version of FortiWeb installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-23-490 advisory. - The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote...

CVE-2024-49750 vulnerabilities

Vulnerabilities for packages: airflow...

CVE-2024-6826

An issue has been discovered in GitLab CE/EE affecting all versions from 11.2 before 17.3.6, 17.4 before 17.4.3, and 17.5 before 17.5.1. A denial of service could occur via importing a malicious crafted XML manifest file...

BELL-CVE-2024-47727

Bulletin has no description...

Loft Data Grids - Moderately critical - Multiple vulnerabilities - SA-CONTRIB-2024-054

This module provides serialization formats for use by other modules. The module includes a version of phpoffice/phpspreadsheet which has multiple known security vulnerabilities...

OPENSUSE-SU-2024:14422-1 NetworkManager-applet-libreswan-1.2.24-1.1 on GA media

These are all security issues fixed in the NetworkManager-applet-libreswan-1.2.24-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14423-1 ghostscript-10.04.0-1.1 on GA media

These are all security issues fixed in the ghostscript-10.04.0-1.1 package on the GA media of openSUSE Tumbleweed...

Smartling Connector - Less critical - Multiple vulnerabilities - SA-CONTRIB-2024-053

Smartling module allows you to translate content in Drupal 7 using the Smartling Translation Management Platform. The module includes an outdated version of the Guzzle package guzzlehttp/guzzle 6.3.3, which has known security vulnerabilities...

Ubuntu 22.04 LTS / 24.04 LTS : WebKitGTK vulnerabilities (USN-7079-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7079-1 advisory. Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website,...

USN-7072-2: Linux kernel (GKE) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Watchdog drivers; - Netfilter; - Network traffic control; CVE-2024-38630, CVE-2024-27397, CVE-2024-45016...

OPENSUSE-SU-2024:14415-1 MozillaFirefox-131.0.3-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-131.0.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14416-1 libopenssl-3-devel-3.1.4-15.1 on GA media

These are all security issues fixed in the libopenssl-3-devel-3.1.4-15.1 package on the GA media of openSUSE Tumbleweed...

chromedriver-130.0.6723.58-1.1 on GA media (moderate)

chromedriver-130.0.6723.58-1.1 on GA media Announcement ID: openSUSE-SU-2024:14414-1 Rating: moderate Cross-References: CVE-2024-9602 CVE-2024-9603 CVE-2024-9954 CVE-2024-9955 CVE-2024-9956 CVE-2024-9957 CVE-2024-9958 CVE-2024-9959 CVE-2024-9960 CVE-2024-9961 CVE-2024-9962 CVE-2024-9963...

buildah-1.37.4-2.1 on GA media (moderate)

buildah-1.37.4-2.1 on GA media Announcement ID: openSUSE-SU-2024:14405-1 Rating: moderate Cross-References: CVE-2024-9675 CVSS scores: CVE-2024-9675 SUSE : 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N CVE-2024-9675 SUSE : 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N...

CVE-2024-38820

The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase has some Locale dependent exceptions that could potentially result in fields not protected as expected...

OPENSUSE-SU-2024:14413-1 python3-virtualbox-7.1.4-1.1 on GA media

These are all security issues fixed in the python3-virtualbox-7.1.4-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2023-39593

Insecure permissions in the sysexec function of MariaDB v10.5 allows authenticated attackers to execute arbitrary commands with elevated privileges. NOTE: this is disputed by the MariaDB Foundation because no privilege boundary is crossed...