Security Bulletin: Vulnerability in Apache HTTP Server (CVE-2023-38709) affects Power HMC.

Summary The Apache HTTP Server library is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2023-38709 DESCRIPTION: Apache HTTP Server is vulnerable to HTTP response splitting attacks, caused by improper input validation in the...

CGA-CRQG-M8C2-W7JJ

Bulletin has no description...

SUSE-SU-2024:4317-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52524: net: nfc: llcp: Add lock when modifying device list bsc1220927. - CVE-2024-49925: fbdev: efifb: Register sysfs groups through driver core...

SUSE-SU-2024:4313-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52524: Fixed possible corruption in nfc/llcp bsc1220927. - CVE-2024-49925: fbdev: efifb: Register sysfs groups through driver core bsc1232224 -...

Vulnerability fixed in Schneider Electric Modicon

Schneider Electric has fixed a vulnerability in devices that use the Modbus protocol. The vulnerability is in how devices using the Modbus protocol validate input. When an unauthenticated and customized Modbus packet is sent to the device, it can result in a denial-of-service, compromising both t...

CGA-WVCW-8J3M-9V73

Bulletin has no description...

CGA-83P4-J7XG-58PG

Bulletin has no description...

CGA-QR7P-RGFG-R5MM

Bulletin has no description...

Microsoft Security Update Validation Report December 2024

Microsoft’s December 2024 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing softwa...

Important Photon OS Security Update - PHSA-2024-5.0-0427

Updates of 'cpio' packages of Photon OS have been released...

Fedora 40 : matrix-synapse (2024-995720f767)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-995720f767 advisory. CVE-2024-52805, CVE-2024-52815, CVE-2024-53863 ---- Backport fixes from v1.120.1 Tenable has extracted the preceding description block directly from...

CGA-Q82V-6GFQ-87GP

Bulletin has no description...

CVE-2024-54811

creationtimestamp| type| source ---|---|--- 2024-12-12 18:28:51+00:00| seen| https://infosec.exchange/users/cve/statuses/113641267578732747 2024-12-12 21:21:57+00:00| seen| https://t.me/cvedetector/12806...

CGA-C9GG-R469-C9MM

Bulletin has no description...

Update now! Apple releases new security patches for vulnerabilities in iPhones, Macs, and more

Apple has released security patches for most of its operating systems, including iOS, Mac, iPadOS, Safari, and visionOS. To check if you’re using the latest software version, go to Settings or System Settings General Software Update. It’s also worth turning on Automatic Updates if you haven’t...

Apple Releases Security Updates for Multiple Products

Apple released security updates to address vulnerabilities in multiple Apple products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following advisories and apply necessary updates:...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.16.26 bug fix and security update

Red Hat OpenShift Container Platform release 4.16.26 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.16. Red Hat Product Security has rated this update as having a...

PT-2024-36596 · Xwiki · Xwiki Platform

Name of the Vulnerable Software and Affected Versions: XWiki Platform versions 9.7-rc-1 through 15.10.10 XWiki Platform versions 16.4.0 through 16.4.0 XWiki Platform versions 16.5.0 is not affected, instead versions prior to 16.5.0 are affected, so the correct range is: XWiki Platform versions...

Remote Desktop Client for Windows Remote Code Execution (December 2024)

The Remote Desktop Client for Windows installed on the remote host is missing security updates. It is, therefore, affected by a remote code execution vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

CVE-2024-47539

GStreamer is a library for constructing graphs of media-handling components. An out-of-bounds write vulnerability was identified in the converttos3341a function in isomp4/qtdemux.c. The vulnerability arises due to a discrepancy between the size of memory allocated to the storage array and the loo...