USN-7089-4: Linux kernel vulnerabilities

Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing. A local attacker could possibly use this to cause a denial of service. CVE-2024-25741 Several security issues were discovered in the Linux kernel. An...

OPENSUSE-SU-2024:14489-1 libsoup-2_4-1-2.74.3-4.1 on GA media

These are all security issues fixed in the libsoup-24-1-2.74.3-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14491-1 libnghttp2-14-1.64.0-1.1 on GA media

These are all security issues fixed in the libnghttp2-14-1.64.0-1.1 package on the GA media of openSUSE Tumbleweed...

openSUSE Security Advisory (SUSE-SU-2024:3980-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-33660

creationtimestamp| type| source ---|---|--- 2024-11-12 15:26:05+00:00| seen| https://infosec.exchange/users/cve/statuses/113470679623102730 2024-11-12 17:12:49+00:00| seen| https://t.me/cvedetector/10627...

USN-7100-2: Linux kernel vulnerabilities

Supraja Sridhara, Benedict Schlüter, Mark Kuhne, Andrin Bertschi, and Shweta Shinde discovered that the Confidential Computing framework in the Linux kernel for x86 platforms did not properly handle 32-bit emulation on TDX and SEV. An attacker with access to the VMM could use this to cause a deni...

USN-7102-1: MySQL vulnerabilities

Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 8.0.40 in Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 24.10. In addition to security fixes, the updated packages contain bug...

BELL-CVE-2024-50247

Bulletin has no description...

OPENSUSE-SU-2024:14486-1 switchboard-plug-bluetooth-8.0.1-1.1 on GA media

These are all security issues fixed in the switchboard-plug-bluetooth-8.0.1-1.1 package on the GA media of openSUSE Tumbleweed...

MozillaFirefox-132.0.1-1.1 on GA media (moderate)

MozillaFirefox-132.0.1-1.1 on GA media Announcement ID: openSUSE-SU-2024:14483-1 Rating: moderate Cross-References: CVE-2024-10458 CVE-2024-10459 CVE-2024-10460 CVE-2024-10461 CVE-2024-10462 CVE-2024-10463 CVE-2024-10464 CVE-2024-10465 CVE-2024-10466 CVE-2024-10467 CVE-2024-10468 CVSS scores:...

Ubuntu 22.04 LTS : Linux kernel vulnerabilities (USN-7100-2)

"The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7100-2 advisory. Supraja Sridhara, Benedict Schlter, Mark Kuhne, Andrin Bertschi, and Shweta Shinde discovered that the Confidential Computing framework in the Linux...

USN-7100-1: Linux kernel vulnerabilities

Supraja Sridhara, Benedict Schlüter, Mark Kuhne, Andrin Bertschi, and Shweta Shinde discovered that the Confidential Computing framework in the Linux kernel for x86 platforms did not properly handle 32-bit emulation on TDX and SEV. An attacker with access to the VMM could use this to cause a deni...

USN-7096-1: OpenJDK 8 vulnerabilities

Andy Boothe discovered that the Networking component of OpenJDK 8 did not properly handle access under certain circumstances. An unauthenticated attacker could possibly use this issue to cause a denial of service. CVE-2024-21208 It was discovered that the Hotspot component of OpenJDK 8 did not...

Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-7100-1)

"The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7100-1 advisory. Supraja Sridhara, Benedict Schlter, Mark Kuhne, Andrin Bertschi, and Shweta Shinde discovered that the Confidential Computing framework in t...

OPENSUSE-SU-2024:14482-1 govulncheck-vulndb-0.0.20241108T172500-1.1 on GA media

These are all security issues fixed in the govulncheck-vulndb-0.0.20241108T172500-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14481-1 coredns-1.11.3+git129.387f34d-1.1 on GA media

These are all security issues fixed in the coredns-1.11.3+git129.387f34d-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14476-1 curl-8.11.0-1.1 on GA media

These are all security issues fixed in the curl-8.11.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14480-1 xstream-1.4.21-1.1 on GA media

These are all security issues fixed in the xstream-1.4.21-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14475-1 Mesa-24.2.6-392.1 on GA media

These are all security issues fixed in the Mesa-24.2.6-392.1 package on the GA media of openSUSE Tumbleweed...

RockyLinux 8 : kernel-rt (RLSA-2024:8870)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:8870 advisory. kernel: net/bluetooth: race condition in conninfomin,maxageset CVE-2024-24857 kernel: dmaengine: fix NULL pointer in channel unregistration function...