USN-6873-1: Linux kernel vulnerabilities

It was discovered that the Intel Data Streaming and Intel Analytics Accelerator drivers in the Linux kernel allowed direct access to the devices for unprivileged users and virtual machines. A local attacker could use this to cause a denial of service. CVE-2024-21823 Several security issues were...

USN-6872-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystem: - Netfilter; CVE-2024-26809, CVE-2024-26643, CVE-2024-26925, CVE-2024-26924...

USN-6871-1: Linux kernel (HWE) vulnerabilities

It was discovered that the ATA over Ethernet AoE driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. CVE-2023-6270 It was discovered that the Atheros 802.11ac...

OPENSUSE-SU-2024:14095-1 MozillaThunderbird-115.12.2-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-115.12.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14099-1 gomuks-0.3.0-3.1 on GA media

These are all security issues fixed in the gomuks-0.3.0-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14105-1 teleport-15.4.7-1.1 on GA media

These are all security issues fixed in the teleport-15.4.7-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14098-1 go1.22-1.22.5-1.1 on GA media

These are all security issues fixed in the go1.22-1.22.5-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14100-1 libvpx-devel-1.14.1-1.1 on GA media

These are all security issues fixed in the libvpx-devel-1.14.1-1.1 package on the GA media of openSUSE Tumbleweed...

Ubuntu 16.04 LTS / 18.04 LTS : Linux kernel (Azure) vulnerabilities (USN-6866-2)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6866-2 advisory. It was discovered that the ext4 file system implementation in the Linux kernel did not properly validate data state on write operations. An...

Ubuntu 20.04 LTS : Linux kernel (HWE) vulnerabilities (USN-6871-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6871-1 advisory. It was discovered that the ATA over Ethernet AoE driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An...

USN-6866-1: Linux kernel vulnerabilities

It was discovered that the ext4 file system implementation in the Linux kernel did not properly validate data state on write operations. An attacker could use this to construct a malicious ext4 file system image that, when mounted, could cause a denial of service system crash. CVE-2021-33631 It w...

USN-6862-1: Firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. CVE-2024-5689, CVE-2024-5690,...

OPENSUSE-SU-2024:14094-1 python310-yt-dlp-2024.07.01-1.1 on GA media

These are all security issues fixed in the python310-yt-dlp-2024.07.01-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14093-1 libpoppler-cpp1-24.07.0-1.1 on GA media

These are all security issues fixed in the libpoppler-cpp1-24.07.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14091-1 go1.21-1.21.12-1.1 on GA media

These are all security issues fixed in the go1.21-1.21.12-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14092-1 golang-github-prometheus-prometheus-2.53.0-2.1 on GA media

These are all security issues fixed in the golang-github-prometheus-prometheus-2.53.0-2.1 package on the GA media of openSUSE Tumbleweed...

Ubuntu 14.04 LTS / 16.04 LTS : Linux kernel vulnerabilities (USN-6865-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6865-1 advisory. It was discovered that the ext4 file system implementation in the Linux kernel did not properly validate data state on write operations. An...

OPENSUSE-SU-2024:14085-1 fiona-fio-1.9.6-1.1 on GA media

These are all security issues fixed in the fiona-fio-1.9.6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14084-1 nodejs-electron-29.4.3-1.1 on GA media

These are all security issues fixed in the nodejs-electron-29.4.3-1.1 package on the GA media of openSUSE Tumbleweed...

Google to Block Entrust Certificates in Chrome Starting November 2024

Google has announced that it's going to start blocking websites that use certificates from Entrust starting around November 1, 2024, in its Chrome browser, citing compliance failures and the certificate authority's inability to address security issues in a timely manner. "Over the past several...