OPENSUSE-SU-2024:14537-1 ansible-core-2.17-2.17.6-1.1 on GA media

These are all security issues fixed in the ansible-core-2.17-2.17.6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14535-1 python-2.7.18-51.1 on GA media

These are all security issues fixed in the python-2.7.18-51.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14534-1 gimp-2.10.38-4.1 on GA media

These are all security issues fixed in the gimp-2.10.38-4.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-52003 vulnerabilities

Vulnerabilities for packages: traefik...

GHSA-Q59J-VV4J-V33C vulnerabilities

Vulnerabilities for packages: pulumi, amazon-cloudwatch-agent-operator, promxy...

[SECURITY] [DLA 3970-1] twisted security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3970-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler November 28, 2024 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5821-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5821-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 27, 2024 https://www.debian.org/security/faq -...

OPENSUSE-SU-2024:14531-1 libjxl-devel-0.11.1-1.1 on GA media

These are all security issues fixed in the libjxl-devel-0.11.1-1.1 package on the GA media of openSUSE Tumbleweed...

gitea -- multiple vulnerabilities

Problem Description: Fix delete branch perm checking Upgrade crypto library...

OPENSUSE-SU-2024:14532-1 libsndfile-devel-1.2.2-3.1 on GA media

These are all security issues fixed in the libsndfile-devel-1.2.2-3.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-10240

An issue has been discovered in GitLab EE affecting all versions starting from 17.3 before 17.3.7, all versions starting from 17.4 before 17.4.4, all versions starting from 17.5 before 17.5.2 in which an unauthenticated user may be able to read some information about an MR in a private project,...

CVE-2024-8177

An issue was discovered in GitLab CE/EE affecting all versions starting from 15.6 prior to 17.4.5, starting from 17.5 prior to 17.5.3, starting from 17.6 prior to 17.6.1 which could cause Denial of Service via integrating a malicious harbor registry...

CVE-2024-11828

A denial of service DoS condition was discovered in GitLab CE/EE affecting all versions from 13.2.4 before 17.4.5, 17.5 before 17.5.3, and 17.6 before 17.6.1. By leveraging this vulnerability an attacker could create a DoS condition by sending crafted API calls. This was a regression of an earlie...

CVE-2024-8114

An issue has been discovered in GitLab CE/EE affecting all versions from 8.12 before 17.4.5, 17.5 before 17.5.3, and 17.6 before 17.6.1. This issue allows an attacker with access to a victim's Personal Access Token PAT to escalate privileges...

CVE-2024-11669

An issue was discovered in GitLab CE/EE affecting all versions from 16.9.8 before 17.4.5, 17.5 before 17.5.3, and 17.6 before 17.6.1. Certain API endpoints could potentially allow unauthorized access to sensitive data due to overly broad application of token scopes...

CVE-2024-11705

creationtimestamp| type| source ---|---|--- 2024-11-26 14:22:04+00:00| seen| https://infosec.exchange/users/cve/statuses/113549700230486413...

CVE-2024-11703 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

CVE-2024-11704 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

CISA Releases Six Industrial Control Systems Advisories

CISA released six Industrial Control Systems ICS advisories on November 26, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-331-01 Schneider Electric PowerLogic PM55xx and PowerLogic PM8ECC ICSA-24-331-02...

Mozilla Firefox < 133.0

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 133.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2024-63 advisory. - A double-free issue could have occurred in secpkcs7decoderstartdecrypt when handling an error path. Under...