USN-6924-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM SCMI message protocol; - InfiniBand drivers; - TTY drivers; - TLS protocol; CVE-2024-26584, CVE-2024-36016,...

OPENSUSE-SU-2024:14223-1 libwireshark17-4.2.6-3.1 on GA media

These are all security issues fixed in the libwireshark17-4.2.6-3.1 package on the GA media of openSUSE Tumbleweed...

MAL-2024-11708 Malicious code in sklearns (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4e260abb013bb5822352ea0e834c081da4d0ab7c66ac8c853cfd809552d02d1a Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

CVE-2024-7057

An information disclosure vulnerability in GitLab CE/EE affecting all versions starting from 16.7 prior to 17.0.5, starting from 17.1 prior to 17.1.3, and starting from 17.2 prior to 17.2.1 where job artifacts can be inappropriately exposed to users lacking the proper authorization level...

CVE-2024-0231

A resource misdirection vulnerability in GitLab CE/EE versions 12.0 prior to 17.0.5, 17.1 prior to 17.1.3, and 17.2 prior to 17.2.1 allows an attacker to craft a repository import in such a way as to misdirect commits...

CVE-2024-41110 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, up, tekton-chains-fips, guac, traefik-fips, neuvector-scanner-fips, scorecard, chainctl, nerdctl, kaniko, melange, loki-fips, kots, opentelemetry-collector-contrib-fips, crossplane, helm-push, cri-tools, cosign, argo-workflows-fips, harbor, flux,...

OPENSUSE-SU-2024:14215-1 libQt5Bootstrap-devel-static-32bit-5.15.14+kde143-1.1 on GA media

These are all security issues fixed in the libQt5Bootstrap-devel-static-32bit-5.15.14+kde143-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-4076 vulnerabilities

Vulnerabilities for packages: bind...

Slackware Linux 15.0 / current aaa_glibc-solibs Multiple Vulnerabilities (SSA:2024-205-02)

The version of aaaglibc-solibs installed on the remote host is prior to 2.33 / 2.40. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2024-205-02 advisory. New glibc packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted...

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-6896-5)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6896-5 advisory. It was discovered that the ATA over Ethernet AoE driver in the Linux kernel contained a race condition, leading to a use-after-free...

USN-6903-1: Thunderbird vulnerabilities

Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, bypass security restrictions, cross-site tracing,...

OPENSUSE-SU-2024:14213-1 java-22-openjdk-22.0.2.0-1.1 on GA media

These are all security issues fixed in the java-22-openjdk-22.0.2.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14211-1 gh-2.53.0-1.1 on GA media

These are all security issues fixed in the gh-2.53.0-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-3WF2-2PQ4-4RVC Woodpecker's custom environment variables allow to alter execution flow of plugins

Impact The server allow to create any user who can trigger a pipeline run malicious workflows: - Those workflows can either lead to a host takeover that runs the agent executing the workflow. - Or allow to extract the secrets who would be normally provided to the plugins who's entrypoint are...

OPENSUSE-SU-2024:14209-1 python310-sentry-sdk-2.10.0-1.1 on GA media

These are all security issues fixed in the python310-sentry-sdk-2.10.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14200-1 OpenImageIO-2.5.13.1-1.1 on GA media

These are all security issues fixed in the OpenImageIO-2.5.13.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14203-1 python310-Django-5.0.7-2.1 on GA media

These are all security issues fixed in the python310-Django-5.0.7-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14202-1 java-17-openjdk-17.0.12.0-1.1 on GA media

These are all security issues fixed in the java-17-openjdk-17.0.12.0-1.1 package on the GA media of openSUSE Tumbleweed...

USN-6896-3: Linux kernel vulnerabilities

It was discovered that the ATA over Ethernet AoE driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. CVE-2023-6270 It was discovered that the Atheros 802.11ac...

USN-6900-1: Linux kernel vulnerabilities

It was discovered that the ATA over Ethernet AoE driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. CVE-2023-6270 It was discovered that the HugeTLB file syst...