USN-6895-4: Linux kernel vulnerabilities

It was discovered that the ATA over Ethernet AoE driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. CVE-2023-6270 It was discovered that the HugeTLB file syst...

OPENSUSE-SU-2024:14238-1 libneatvnc0-0.8.1-1.1 on GA media

These are all security issues fixed in the libneatvnc0-0.8.1-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-6990 vulnerabilities

Vulnerabilities for packages: chromium...

OPENSUSE-SU-2024:14230-1 espeak-ng-1.51.1-1.1 on GA media

These are all security issues fixed in the espeak-ng-1.51.1-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-40464 vulnerabilities

Vulnerabilities for packages: harbor-fips, harbor...

USN-6934-1: MySQL vulnerabilities

Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 8.0.39 in Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS. In addition to security fixes, the updated packages contain bug fixes, new...

BELL-CVE-2024-42063

Bulletin has no description...

Ubuntu 14.04 LTS / 16.04 LTS : Linux kernel vulnerabilities (USN-6938-1)

"The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6938-1 advisory. It was discovered that the device input subsystem in the Linux kernel did not properly handle the case when an event code falls outside of a...

OPENSUSE-SU-2024:14225-1 curl-8.9.0-1.1 on GA media

These are all security issues fixed in the curl-8.9.0-1.1 package on the GA media of openSUSE Tumbleweed...

Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-6927-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6927-1 advisory. Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereferenc...

USN-6925-1: Linux kernel vulnerability

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - IPv4 networking; CVE-2024-26882...

USN-6924-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM SCMI message protocol; - InfiniBand drivers; - TTY drivers; - TLS protocol; CVE-2024-26584, CVE-2024-36016,...

OPENSUSE-SU-2024:14223-1 libwireshark17-4.2.6-3.1 on GA media

These are all security issues fixed in the libwireshark17-4.2.6-3.1 package on the GA media of openSUSE Tumbleweed...

MAL-2024-11708 Malicious code in sklearns (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4e260abb013bb5822352ea0e834c081da4d0ab7c66ac8c853cfd809552d02d1a Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

CVE-2024-7057

An information disclosure vulnerability in GitLab CE/EE affecting all versions starting from 16.7 prior to 17.0.5, starting from 17.1 prior to 17.1.3, and starting from 17.2 prior to 17.2.1 where job artifacts can be inappropriately exposed to users lacking the proper authorization level...

CVE-2024-0231

A resource misdirection vulnerability in GitLab CE/EE versions 12.0 prior to 17.0.5, 17.1 prior to 17.1.3, and 17.2 prior to 17.2.1 allows an attacker to craft a repository import in such a way as to misdirect commits...

CVE-2024-41110 vulnerabilities

Vulnerabilities for packages: chartmuseum, trivy-fips, kargo, kpt, chainctl, helm-operator, skaffold, scorecard, helm-fips, paranoia, buildkitd, melange, cilium-cli, flux-image-reflector-controller, guac, falcoctl-fips, k3d, flux, goreleaser, bom, zarf, apko, opentelemetry-collector, helm, gitsig...

OPENSUSE-SU-2024:14215-1 libQt5Bootstrap-devel-static-32bit-5.15.14+kde143-1.1 on GA media

These are all security issues fixed in the libQt5Bootstrap-devel-static-32bit-5.15.14+kde143-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-4076 vulnerabilities

Vulnerabilities for packages: bind...

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-6896-5)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6896-5 advisory. It was discovered that the ATA over Ethernet AoE driver in the Linux kernel contained a race condition, leading to a use-after-free...