PT-2024-40985 · Kubevirt · Kubevirt

Name of the Vulnerable Software and Affected Versions: kubevirt and related containers affected versions not specified Description: The issue is related to a rebuild against current security updates. Additionally, there are mentions of installing qemu-hw-usb-host to enable USB passthrough, groupi...

Fedora 39 : chromium (2024-39b249a59c)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-39b249a59c advisory. update to 123.0.6312.105 High CVE-2024-3156: Inappropriate implementation in V8 High CVE-2024-3158: Use after free in Bookmarks High CVE-2024-3159:...

BELL-CVE-2024-26757

Bulletin has no description...

Fedora 38 : chromium (2024-5e32ce95a3)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-5e32ce95a3 advisory. update to 123.0.6312.105 High CVE-2024-3156: Inappropriate implementation in V8 High CVE-2024-3158: Use after free in Bookmarks High CVE-2024-3159:...

Vulnerabilities fixed in IBM DB2

IBM has fixed vulnerabilities in DB2. A malicious party could exploit the exploit the vulnerabilities to cause a denial-of-service, or to gain access to sensitive data. IBM has released updates to fix the vulnerabilities in IBM DB2. For more information, see:...

Wednesday, April 3, 2024 Security Releases

Wednesday, April 3, 2024 Security Releases Security releases available Updates are now available for the v18.x, v20.x and 21.x Node.js release lines for the following issues. This security release includes the following dependency updates to address public vulnerabilities: llhttp version 9.2.1 on...

RHEL 8 : curl (RHSA-2024:1601)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1601 advisory. The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTT...

PUB-A-303107287

Bulletin has no description...

Fedora 38 : seamonkey (2024-ad50671f6c)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-ad50671f6c advisory. Update to 2.53.18.2 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for thi...

CVE-2024-1522

CVE-2024-1522 affects the parisneo/lollms-webui project. The vulnerability is a CSRF in the /execute_code endpoint that fails to validate requests, allowing an attacker to craft a malicious page that submits commands to the victim's local lollms-webui instance and execute arbitrary OS commands. T...

Fedora 39 : suricata (2024-99337cc4a1)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-99337cc4a1 advisory. These are bug fix and security releases including MODERATE, HIGH, and CRITICAL issues. Tenable has extracted the preceding description block directly from th...

MGASA-2024-0098 Updated tcpreplay packages fix security vulnerabilities

Within tcpreplay's tcprewrite, a double free vulnerability has been identified in the tcpeditdltcleanup function within plugins/dltplugins.c. This vulnerability can be exploited by supplying a specifically crafted file to the tcprewrite binary. This flaw enables a local attacker to initiate a...

Fedora 39 : ofono (2024-4e5613bcb3)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-4e5613bcb3 advisory. Backport upstream fixes for CVE-2023-4233 and CVE-2023-4234 Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 38 : ofono (2024-e8a02e129e)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-e8a02e129e advisory. Backport upstream fixes for CVE-2023-4233 and CVE-2023-4234 Tenable has extracted the preceding description block directly from the Fedora security...

Apple Released Security Updates for Safari and macOS

Apple released security updates to address a vulnerability CVE-2024-1580 in Safari and macOS. A cyber threat actor could exploit this vulnerability to take control of an affected system. CISA encourages users and administrators to review the following advisories and apply the necessary updates:...

Fedora 38 : perl-Data-UUID (2024-08bb549a36)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-08bb549a36 advisory. This update fixes CVE-2013-4184 possible symlink attack due to use of predictable temporary file names. The module no longer saves state in temporary files a...

MGASA-2024-0089 Updated gnutls packages fix security vulnerabilities

The Minerva attack is a cryptographic vulnerability that exploits deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such as when using the GNUTLSPRIVKEYFLAGREPRODUCIBLE flag, it can result in a noticeable step in nonce size from 513 to 512 bits,...

March 26, 2024—KB5035942 (OS Builds 22621.3374 and 22631.3374) Preview

None None...

About the security content of macOS Ventura 13.6.6

About the security content of macOS Ventura 13.6.6 This document describes the security content of macOS Ventura 13.6.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

Fedora 39 : clojure (2024-270cd506bb)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-270cd506bb advisory. Security fix for CVE-2024-22871 Update to upstream release 1.11.2 Tenable has extracted the preceding description block directly from the Fedora...