CVE-2024-43044 vulnerabilities

Vulnerabilities for packages: jenkins...

[SECURITY] [DSA 5740-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5740-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 07, 2024 https://www.debian.org/security/faq -...

Security Bulletin: NVIDIA Mellanox OS, ONYX, Skyway, MetroX - August 2024

NVIDIA has released a firmware update for NVIDIA Mellanox OS, ONYX, Skyway, and MetroX. This update addresses security issues that may lead to the issues noted below. To protect your system, download and install this firmware update from the NVIDIA Enterprise Support Portal. Go to NVIDIA Product...

SUSE SLES15: kernel-livepatch-5_3_18-150200_24_160-default / etc (SUSE-SU-2024:2771-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2771-1 advisory. This update for the Linux Kernel 5.3.18-15020024160 fixes several issues. The following security issues were fixed: - CVE-2024-27398: Fixed...

CVE-2024-7527 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

USN-6895-4: Linux kernel vulnerabilities

It was discovered that the ATA over Ethernet AoE driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. CVE-2023-6270 It was discovered that the HugeTLB file syst...

OPENSUSE-SU-2024:14238-1 libneatvnc0-0.8.1-1.1 on GA media

These are all security issues fixed in the libneatvnc0-0.8.1-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-6990 vulnerabilities

Vulnerabilities for packages: chromium...

OPENSUSE-SU-2024:14230-1 espeak-ng-1.51.1-1.1 on GA media

These are all security issues fixed in the espeak-ng-1.51.1-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-40464 vulnerabilities

Vulnerabilities for packages: harbor, harbor-fips...

USN-6934-1: MySQL vulnerabilities

Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 8.0.39 in Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS. In addition to security fixes, the updated packages contain bug fixes, new...

BELL-CVE-2024-42063

Bulletin has no description...

Ubuntu 14.04 LTS / 16.04 LTS : Linux kernel vulnerabilities (USN-6938-1)

"The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6938-1 advisory. It was discovered that the device input subsystem in the Linux kernel did not properly handle the case when an event code falls outside of a...

OPENSUSE-SU-2024:14225-1 curl-8.9.0-1.1 on GA media

These are all security issues fixed in the curl-8.9.0-1.1 package on the GA media of openSUSE Tumbleweed...

Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-6927-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6927-1 advisory. Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereferenc...

USN-6925-1: Linux kernel vulnerability

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - IPv4 networking; CVE-2024-26882...

USN-6924-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM SCMI message protocol; - InfiniBand drivers; - TTY drivers; - TLS protocol; CVE-2024-26584, CVE-2024-36016,...

OPENSUSE-SU-2024:14223-1 libwireshark17-4.2.6-3.1 on GA media

These are all security issues fixed in the libwireshark17-4.2.6-3.1 package on the GA media of openSUSE Tumbleweed...

MAL-2024-11708 Malicious code in sklearns (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4e260abb013bb5822352ea0e834c081da4d0ab7c66ac8c853cfd809552d02d1a Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

CVE-2024-7057

An information disclosure vulnerability in GitLab CE/EE affecting all versions starting from 16.7 prior to 17.0.5, starting from 17.1 prior to 17.1.3, and starting from 17.2 prior to 17.2.1 where job artifacts can be inappropriately exposed to users lacking the proper authorization level...