Updated libssh packages fix security vulnerabilities

New version 0.10.6 for fixing security vulnerabilities of CVE-2023-6004, CVE-2023-48795 Prefix Truncation Attacks in SSH Specification Terrapin Attack and CVE-2023-6918...

MGASA-2023-0357 Updated libssh packages fix security vulnerabilities

New version 0.10.6 for fixing security vulnerabilities of CVE-2023-6004, CVE-2023-48795 Prefix Truncation Attacks in SSH Specification Terrapin Attack and CVE-2023-6918...

Microsoft Windows 10 1507 SEoL

Microsoft Windows 10 version 1507 is running on the remote host. Microsoft ended support for Windows 10 version 1507 on May 9, 2017. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities...

GHSA-PFH2-HFMQ-PHG5 vulnerabilities

Vulnerabilities for packages: trino, solr, hadoop-fips...

GHSA-PFH2-HFMQ-PHG5 vulnerabilities

Vulnerabilities for packages: solr, trino...

CVE-2018-8823

creationtimestamp| type| source ---|---|--- 2023-12-22 17:57:58+00:00| seen| https://t.me/arpsyndicate/2061 2023-12-22 18:52:54+00:00| seen| https://t.me/arpsyndicate/2062 2024-11-26 09:06:49+00:00| seen| MISP/d0f67a25-b270-45aa-a235-c5da1f5eb45f...

MGASA-2023-0354 Updated gstreamer packages fix many security vulnerabilities

Updated gstreamer packages fix many security issues see the references below. Apart from the listed CVEs, ZDI-CAN-22300 is also fixed...

[SECURITY] [DSA 5586-1] openssh security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5586-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 22, 2023 https://www.debian.org/security/faq -...

CISA Releases Two Industrial Control Systems Advisories

CISA released two Industrial Control Systems ICS advisories on December 21, 2023. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-23-355-01 FXC AE1021/AE1021PE ICSA-23-355-02 QNAP VioStor NVR CISA encourages users and...

SUSE-SU-2023:4936-1 Security update for docker, rootlesskit

This update for docker, rootlesskit fixes the following issues: docker: - Update to Docker 24.0.7-ce. See upstream changelong online at https://docs.docker.com/engine/release-notes/24.0/2407. bsc1217513 Deny containers access to /sys/devices/virtual/powercap by default. - CVE-2020-8694 bsc1170415...

Security Bulletin: Netcool Operations Insights 1.6.11 addresses multiple security vulnerabilities.

Summary Netcool Operations Insight v1.6.11 addresses multiple security vulnerabilities, listed in the CVEs below. Vulnerability Details CVEID:CVE-2023-34453 DESCRIPTION: snappy-java is vulnerable to a denial of service, caused by an integer overflow in the shuffle function. By sending a specially...

SUSE-SU-2023:4929-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 115.6.0 ESR changelog-entry bsc1217974 CVE-2023-6856: Heap-buffer-overflow affecting WebGL DrawElementsInstanced method with Mesa VM driver bmo1843782. CVE-2023-6857: Symlinks may resolve to smaller than...

SUSE-SU-2023:4928-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 115.6.0 ESR changelog-entry bsc1217974. CVE-2023-6856: Heap-buffer-overflow affecting WebGL DrawElementsInstanced method with Mesa VM driver bmo1843782. CVE-2023-6857: Symlinks may resolve to smaller tha...

PipeViewer - A Tool That Shows Detailed Information About Named Pipes In Windows

A GUI tool for viewing Windows Named Pipes and searching for insecure permissions. The tool was published as part of a research about Docker named pipes: "Breaking Docker Named Pipes SYSTEMatically: Docker Desktop Privilege Escalation – Part 1" "Breaking Docker Named Pipes SYSTEMatically: Docker...

FreeBSD : slurm-wlm -- Several security issues (76c2110b-9e97-11ee-ae23-a0f3c100ae18)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 76c2110b-9e97-11ee-ae23-a0f3c100ae18 advisory. - An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. There is Improper...

Security Vulnerabilities fixed in Firefox ESR 115.6 — Mozilla

The WebGL DrawElementsInstanced method was susceptible to a heap buffer overflow when used on systems with the Mesa VM driver. This issue could allow an attacker to perform remote code execution and sandbox escape. EncryptingOutputStream was susceptible to exposing uninitialized data. This issue...

Avalanche 6.4.2 Security Hardening and CVEs addressed

Last Modified Date Aug 24, 2026 12:31:46 AM...

Updated golang packages fix security vulnerabilities

Update to upstream golang 1.21.5 to fix CVE-2023-39326 and CVE-2023-452835 In Mageia 8, this update also allows build nodes to build docker stack...

MGASA-2023-0349 Updated golang packages fix security vulnerabilities

Update to upstream golang 1.21.5 to fix CVE-2023-39326 and CVE-2023-452835 In Mageia 8, this update also allows build nodes to build docker stack...

MGASA-2023-0346 Updated gimp packages fix security vulnerabilities

GIMP has been updated to version 2.10.36 to fix several security issues. CVE-2023-44441: GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CVE-2023-44442: GIMP PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CVE-2023-44443: GIMP P...