Android Security Bulletin—May 2023Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2023-05-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...

Ubuntu: Security Advisory (USN-6049-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apple, Google, and Microsoft Just Fixed Zero-Day Security Flaws

Firefox gets a needed tune-up, SolarWinds squashes two high-severity bugs, Oracle patches 433 vulnerabilities, and more updates you should make now...

Fedora 38 : libsignal-protocol-c (2023-4e094d5297)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-4e094d5297 advisory. Backport a fix for CVE-2022-48468 for protobuf-c, which is bundled in libsignal-protocol-c...

Fedora 36 : libsignal-protocol-c (2023-8b0938312e)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-8b0938312e advisory. Backport a fix for CVE-2022-48468 for protobuf-c, which is bundled in libsignal-protocol-c...

Vulnerabilities fixed in Grafana

Grafana Labs has fixed vulnerabilities in Grafana. A malicious party could exploit the vulnerabilities to cause a denial-of-service, or to gain access to sensitive data. Grafana Labs has released updates to address the vulnerabilities fixes in Grafana. For more information, see:...

SUSE-SU-2023:1992-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-5753: Fixed spectre V1 vulnerability on netlink bsc1209547. - CVE-2017-5753: Fixed spectre vulnerability in prlimit bsc1209256. - CVE-2022-4744: Fixe...

This Week in Spring - April 25th, 2023

Hi, Spring fans! Welcome to another installment of This Week in Spring! How are you? I'm en route to Bangalore, India, via Frankfurt, for the Developer Summit 2023 edition. It's going to be a ton of fun, and I hope you won't miss it! para Spring Boot 3.1.0-RC1 available now One of the most exciti...

Citrix Endpoint Management (aka XenMobile Server) 10.15.0 Rolling Patch 2

Package name: xms10.15.0.10220.bin For: XenMobile Server 10.15.0 Deployment type: On-premises only Replaces: xms10.15.0.10125.bin Date: April 2023 Languages supported: English US Important notes about this update As a best practice, Citrix recommends that you install this and other updates to...

Fedora 38 : insight (2023-8a6a30c142)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-8a6a30c142 advisory. Disable stringop-overflow warnings. Patch bfd-CVE-2023-1972 fixes a security issue in bfd library. Tenable has extracted the preceding description...

Fedora 37 : mingw-binutils (2023-b667dbdb59)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-b667dbdb59 advisory. Backport fix for CVE-2023-1972. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 36 : mingw-binutils (2023-d6560c7198)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-d6560c7198 advisory. Backport fix for CVE-2023-1972. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 36 : suricata (2023-8febb13d07)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-8febb13d07 advisory. Various security, performance, accuracy, and stability issues have been fixed. Tenable has extracted the preceding description block directly from the Fedora...

Fedora 37 : kernel (2023-4f2cf7e5d2)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-4f2cf7e5d2 advisory. The 6.2.12 stable kernel update contains a number of important fixes across the tree. Tenable has extracted the preceding description block directly from the...

Fedora 38 : suricata (2023-43ac51ee44)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-43ac51ee44 advisory. Various security, performance, accuracy, and stability issues have been fixed. Tenable has extracted the preceding description block directly from the Fedora...

Fedora 37 : freeimage / mingw-freeimage (2023-748f1d5710)

The remote Fedora 37 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2023-748f1d5710 advisory. Backport proposed fix for CVE-2021-33367. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note tha...

Fedora 38 : freeimage / mingw-freeimage (2023-bace76409a)

The remote Fedora 38 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2023-bace76409a advisory. Backport proposed fix for CVE-2021-33367. ---- Fix FTBFS. Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 36 : kernel (2023-6325ed25c4)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-6325ed25c4 advisory. The 6.2.12 stable kernel update contains a number of important fixes across the tree. Tenable has extracted the preceding description block directly from the...

Cisco and VMware Release Security Updates to Patch Critical Flaws in their Products

Cisco and VMware have released security updates to address critical security flaws in their products that could be exploited by malicious actors to execute arbitrary code on affected systems. The most severe of the vulnerabilities is a command injection flaw in Cisco Industrial Network Director...

Cisco and VMware Release Security Updates to Patch Critical Flaws in their Products

Cisco and VMware have released security updates to address critical security flaws in their products that could be exploited by malicious actors to execute arbitrary code on affected systems. The most severe of the vulnerabilities is a command injection flaw in Cisco Industrial Network Director...