SUSE-SU-2024:4409-1 Recommended update for vim

This update for vim fixes the following issues: - CVE-2024-47814: Fixed use-after-free when closing buffers in Vim bsc1231373 - CVE-2024-43374: Fixed use-after-free in alistadd bsc1229238 Other fixes: - Remove patch that introduced a bug caused significantly more CPU usage bsc1220618 - Updated to...

Citrix Cloud Azure Questions on MCS Disk Network Access

Security alerts are receiving for VM disks on our Citrix Cloud Azure environment and is raising Security concerns. Currently, all our VDIs have two disks, an Identity and Data disk. These disks are created with the default Azure setting of “Enable public access from all networks”. We are...

Amazon Linux 2 : expat (ALAS-2024-2710)

The version of expat installed on the remote host is prior to 2.1.0-15. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2710 advisory. An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XMLParseBuffer. CVE-2024-45490...

libparaview5_12-5.12.1-2.1 on GA media (moderate)

libparaview512-5.12.1-2.1 on GA media Announcement ID: openSUSE-SU-2024:14609-1 Rating: moderate Cross-References: CVE-2024-50602 CVSS scores: CVE-2024-50602 SUSE : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2024-50602 SUSE : 5.6...

OPENSUSE-SU-2024:14608-1 govulncheck-vulndb-0.0.20241220T214820-1.1 on GA media

These are all security issues fixed in the govulncheck-vulndb-0.0.20241220T214820-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14609-1 libparaview5_12-5.12.1-2.1 on GA media

These are all security issues fixed in the libparaview512-5.12.1-2.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-11607

The GTPayment Donations WordPress plugin through 1.0.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

CGA-R98X-C7CH-HJ4F

Bulletin has no description...

OPENSUSE-SU-2024:14607-1 chromedriver-131.0.6778.204-1.1 on GA media

These are all security issues fixed in the chromedriver-131.0.6778.204-1.1 package on the GA media of openSUSE Tumbleweed...

USN-7179-1: Linux kernel vulnerabilities

Andy Nguyen discovered that the Bluetooth L2CAP implementation in the Linux kernel contained a type-confusion error. A physically proximate remote attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2020-12351 Andy Nguyen discovered that the...

GHSA-27HP-XHWR-WR2M vulnerabilities

Vulnerabilities for packages: thingsboard...

GHSA-27HP-XHWR-WR2M vulnerabilities

Vulnerabilities for packages: thingsboard...

OPENSUSE-SU-2024:14606-1 teleport-17.1.0-1.1 on GA media

These are all security issues fixed in the teleport-17.1.0-1.1 package on the GA media of openSUSE Tumbleweed...

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-7173-2)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7173-2 advisory. Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointe...

Ubuntu 20.04 LTS : Linux kernel (HWE) vulnerabilities (USN-7166-3)

"The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7166-3 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws i...

govulncheck-vulndb-0.0.20241218T202206-1.1 on GA media (moderate)

govulncheck-vulndb-0.0.20241218T202206-1.1 on GA media Announcement ID: openSUSE-SU-2024:14603-1 Rating: moderate Cross-References: CVE-2024-12289 CVE-2024-28053 CVE-2024-45338 CVE-2024-48872 CVE-2024-54083 CVE-2024-54682 CVE-2024-55885 CVE-2024-55949 Affected Products: openSUSE Tumbleweed An...

GHSA-M3V4-V2RP-HFM9

creationtimestamp| type| source ---|---|--- 2024-12-19 19:20:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113681106537514551 2024-12-19 19:23:42+00:00| seen| https://infosec.exchange/users/cve/statuses/113681119432889668...

CISA Releases Eight Industrial Control Systems Advisories

CISA released eight Industrial Control Systems ICS advisories on December 19, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-354-01 Hitachi Energy RTU500 series CMU ICSA-24-354-02 Hitachi Energy SDM600...

OPENSUSE-SU-2024:14605-1 tuned-2.24.1.0+git.90c24ee-1.1 on GA media

These are all security issues fixed in the tuned-2.24.1.0+git.90c24ee-1.1 package on the GA media of openSUSE Tumbleweed...

Ubuntu: Security Advisory (USN-7166-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...