About the security content of watchOS 10.4

About the security content of watchOS 10.4 This document describes the security content of watchOS 10.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are availabl...

Apple Rolls Out Critical Updates to Address Zero-Day Flaws

Summary: Apple has addressed two zero-day vulnerabilities in iOS, namely CVE-2024-23225 and CVE-2024-23296. These vulnerabilities were exploited in attacks targeting Mobile devices, providing attackers with arbitrary kernel read and write privileges, enabling them to bypass kernel memory...

BIT-WORDPRESS-2023-22622

WordPress through 6.1.1 depends on unpredictable client visits to cause wp-cron.php execution and the resulting security updates, and the source code describes "the scenario where a site may not receive enough visits to execute scheduled tasks in a timely manner," but neither the installation gui...

Urgent: Apple Issues Critical Updates for Actively Exploited Zero-Day Flaws

Apple has released security updates to address several security flaws, including two vulnerabilities that it said have been actively exploited in the wild. The shortcomings are listed below - CVE-2024-23225 - A memory corruption issue in Kernel that an attacker with arbitrary kernel read and writ...

Citrix Endpoint Management (aka XenMobile Server) 10.15.0 Rolling Patch 6

Package name: xms10.15.0.10624.bin For: XenMobile Server 10.15.0 Deployment type: On-premises only Replaces: xms10.15.0.10517.bin, xms10.15.0.10417.bin, xms10.15.0.10327.bin, xms10.15.0.10220.bin, and xms10.15.0.10125.bin Date: March 2024 Languages supported: English US Important notes about this...

FreeBSD : Django -- multiple vulnerabilities (0ef3398e-da21-11ee-b23a-080027a5b8e9)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 0ef3398e-da21-11ee-b23a-080027a5b8e9 advisory. - Django reports: CVE-2024-27351: Potential regular expression denial-of-service in...

Stable Channel Update for ChromeOS / ChromeOS Flex

The Stable channel is being updated to 122.0.6045.214 Platform version: 15753.38.0 for most ChromeOS devices and will be rolled out over the coming days. This build contains a number of bug fixes and security updates. If you find new issues, please let us know one of the following ways: File a bu...

conmon security update

conmon 2.1.3-8 - address CVE-2023-39326 cri-o 1.25.5-1 - Added Oracle Specifile Files for cri-o cri-tools 1.25.0-3 - Resolve CVE-2023-39326 flannel-cni-plugin 1.0.1-4 - Resolve CVE-2023-39326 helm 3.11.1-3 - address CVE-2023-39326 istio 1.16.7-3 - Updated Golang to 1.20.12 to address CVE...

HP ThinPro 8.0 SP 8 Security Updates

...

kernel: Fix of 7 CVEs

KVM: nSVM: avoid picking up unsupported bits from L2 in intctl CVE-2021-3653 CVE-2021-3653 - xen/netfront: fix leaking data in shared pages CVE-2022-33740 - xfs: fix up non-directory creation in SGID directories CVE-2021-4037 - netsched: clsroute: remove from list when handle is 0 CVE-2022-2588 -...

CentOS 9 : cups-2.3.3op2-19.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the cups-2.3.3op2-19.el9 build changelog. - heap buffer overflow may lead to DoS CVE-2023-32324 - use-after-free in cupsdAcceptClient in scheduler/client.c CVE-2023-34241 Note that...

CentOS 9 : glib2-2.68.4-8.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the glib2-2.68.4-8.el9 build changelog. - Rejected reason: Rejected by upstream. CVE-2023-24593, CVE-2023-25180 Note that Nessus has not tested for these issues but has instead...

CentOS 9 : libtpms-0.9.1-2.20211126git1ff6fe1f43.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the libtpms-0.9.1-2.20211126git1ff6fe1f43.el9 build changelog. - out-of-bounds access when trying to resume the state of the vTPM CVE-2021-3623 - out-of-bounds access via specially...

CentOS 9 : glib2-2.68.4-9.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the glib2-2.68.4-9.el9 build changelog. - Rejected reason: Rejected by upstream. CVE-2023-24593, CVE-2023-25180 Note that Nessus has not tested for these issues but has instead...

February 29, 2024—KB5034848 (OS Builds 22621.3235 and 22631.3235) Preview

None None...

CentOS 9 : vim-8.2.2637-16.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the vim-8.2.2637-16.el9 build changelog. - Use of Out-of-range Pointer Offset in vim prior CVE-2022-0554 - Heap-based Buffer Overflow occurs in vim CVE-2022-0943 Note that Nessus h...

RHEL 8 : gimp:2.8 (RHSA-2024:1007)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1007 advisory. The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox,...

Fedora 38 : dhcpcd (2024-2bb2bb2467)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-2bb2bb2467 advisory. Finished security issue handling broken DHCP packets. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

Fedora 39 : mingw-qt5-qt3d / mingw-qt5-qtactiveqt / mingw-qt5-qtbase / etc (2024-a8cdce27ac)

The remote Fedora 39 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-a8cdce27ac advisory. Update to qt-5.15.12. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

Fedora 38 : expat (2024-8a2c093df5)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-8a2c093df5 advisory. Rebase to version 2.6.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...