CVE-2024-46761 pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv

In the Linux kernel, the following vulnerability has been resolved: pci/hotplug/pnvphp: Fix hotplug driver crash on Powernv The hotplug driver for powerpc pci/hotplug/pnvphp.c causes a kernel crash when we try to hot-unplug/disable the PCIe switch/bridge from the PHB. The crash occurs because...

CVE-2024-46730

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Ensure array index tginst won't be -1 WHY & HOW tginst will be a negative if timinggeneratorcount equals 0, which should be checked before used. This fixes 2 OVERRUN issues reported by Coverity...

CVE-2024-46720

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix dereference after null check check the pointer hive before use...

CVE-2024-45811 server.fs.deny bypassed when using ?import&raw in vite

Vite a frontend build tooling framework for javascript. In affected versions the contents of arbitrary files can be returned to the browser. @fs denies access to files outside of Vite serving allow list. Adding ?import&raw to the URL bypasses this limitation and returns the file content if it...

CVE-2024-45605 Improper authorization on deletion of user issue alert notifications in sentry

Sentry is a developer-first error tracking and performance monitoring platform. An authenticated user delete the user issue alert notifications for arbitrary users given a know alert ID. A patch was issued to ensure authorization checks are properly scoped on requests to delete user alert...

RHSA-2018:2097 Red Hat Security Advisory: patch security update

Bulletin has no description...

RHSA-2023:0854 Red Hat Security Advisory: kernel-rt security and bug fix update

Bulletin has no description...

RHSA-2018:1188 Red Hat Security Advisory: java-1.8.0-openjdk security update

Bulletin has no description...

CGA-Q4H9-P729-MRPX

Bulletin has no description...

RHSA-2017:2683 Red Hat Security Advisory: kernel security update

Bulletin has no description...

RHSA-2016:1301 Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2010:0986 Red Hat Security Advisory: java-1.4.2-ibm-sap security update

Bulletin has no description...

CVE-2024-6197 affecting package curl for versions less than 8.8.0-2

CVE-2024-6197 affecting package curl for versions less than 8.8.0-2. A patched version of the package is available...

PT-2024-6332

Name of the Vulnerable Software and Affected Versions Spring Framework versions 5.3.0 through 5.3.39 Spring Framework versions 6.0.0 through 6.0.23 Spring Framework versions 6.0.24 through 6.1.12 Spring Framework versions 6.1.13 and earlier Description The vulnerability is related to path travers...

Updated microcode package fix security vulnerabilities

Improper isolation in the IntelR CoreTM Ultra Processor stream cache mechanism may allow an authenticated user to potentially enable escalation of privilege via local access. CVE-2023-42667 Improper isolation in some IntelR Processors stream cache mechanism may allow an authenticated user to...

can: mcp251xfd: fix infinite loop when xmit fails

...

filelock: fix potential use-after-free in posix_lock_inode

...

PT-2024-7700 · Tp Link · Tp-Link Tl-Wdr5620

Name of the Vulnerable Software and Affected Versions: TP-LINK TL-WDR5620 version 2.3 Description: A remote code execution RCE vulnerability exists in TP-LINK TL-WDR5620 via the httpProcDataSrv function. This issue allows a remote attacker to execute arbitrary code. The vulnerability occurs due t...

Photon OS 5.0: Linux PHSA-2024-5.0-0370

An update of the linux package has been released. File data PhotonOSPHSA-2024-50-0370linux.nasl...

CVE-2024-45591

XWiki Platform is a generic wiki platform. The REST API exposes the history of any page in XWiki of which the attacker knows the name. The exposed information includes for each modification of the page the time of the modification, the version number, the author of the modification both username...