[SECURITY] [DLA 3672-1] postgresql-multicorn PEP440 update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3672-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès November 28, 2023 https://wiki.debian.org/LTS -...

WordPress Credit Tracker Plugin <= 1.1.17 is vulnerable to Cross Site Scripting (XSS)

Software Credit Tracker Type Plugin Vulnerable versions = 1.1.17 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-49152 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID d02d7a19b39d Credits Ngô Thiên An ancorn from VNPT-VCI Requir...

[SECURITY] [DLA 3666-1] reportbug PEP440 version update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3666-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès November 26, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5566-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5566-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 26, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3665-1] node-json5 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3665-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès November 25, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3661-1] firefox-esr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3661-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort November 23, 2023 https://wiki.debian.org/LTS -...

Ubuntu: Security Advisory (USN-6504-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3660-1] gnutls28 security update

Debian LTS Advisory DLA-3660-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany November 22, 2023 https://wiki.debian.org/LTS Package : gnutls28 Version : 3.6.7-4+deb10u11 CVE ID : CVE-2023-5981 Debian Bug : 1056188 A vulnerability was found in GnuTLS, a secure...

USN-6504-1: tracker-miners vulnerability

It was discovered that tracker-miners incorrectly handled sandboxing. If a second security issue was discovered in tracker-miners, an attacker could possibly use this issue in combination with it to escape the sandbox...

USN-6504-1 tracker-miners vulnerability

It was discovered that tracker-miners incorrectly handled sandboxing. If a second security issue was discovered in tracker-miners, an attacker could possibly use this issue in combination with it to escape the sandbox...

Ubuntu 22.04 LTS / 23.04 / 23.10 : tracker-miners vulnerability (USN-6504-1)

The remote Ubuntu 22.04 LTS / 23.04 / 23.10 host has packages installed that are affected by a vulnerability as referenced in the USN-6504-1 advisory. It was discovered that tracker-miners incorrectly handled sandboxing. If a second security issue was discovered in tracker-miners, an attacker cou...

[SECURITY] [DLA 3658-1] wordpress security update

Debian LTS Advisory DLA-3658-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany November 20, 2023 https://wiki.debian.org/LTS Package : wordpress Version : 5.0.20+dfsg1-0+deb10u1 CVE ID : CVE-2023-5561 CVE-2023-39999 Several security vulnerabilities have been...

[SECURITY] [DLA 3650-1] audiofile security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3650-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès November 12, 2023 https://wiki.debian.org/LTS -...

Exploit for Out-of-bounds Write in Google Chrome

level 1: craft.c - bad.webp bash exist: docker 813b6b757...

[SECURITY] [DSA 5551-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5551-1 [email protected] https://www.debian.org/security/ Andres Salomon November 09, 2023 https://www.debian.org/security/faq -...

mariadb: segmentation fault in Exec_time_tracker::get_loops/Filesort_tracker::report_use/filesort

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Exectimetracker::getloops/Filesorttracker::reportuse/filesort...

mariadb: server crash at Item_subselect::init_expr_cache_tracker

MariaDB v10.2 to v10.6.1 was discovered to contain a segmentation fault via the component Itemsubselect::initexprcachetracker...

kernel: Linux kernel: Denial of Service due to xfrm resource leak

A flaw was found in the Linux kernel. A local attacker with low privileges could exploit a resource leak vulnerability within the xfrm subsystem. This occurs because a network device netdev reference tracker is incorrectly released during direction checks. Successful exploitation can lead to a...

CVE-2023-46851 Apache Allura: sensitive information exposure via import

Allura Discussion and Allura Forum importing does not restrict URL values specified in attachments. Project administrators can run these imports, which could cause Allura to read local files and expose them. Exposing internal files then can lead to other exploits, like session hijacking, or remot...

Fedora 39 : libcue (2023-f4e74a94a2)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-f4e74a94a2 advisory. This update backports the fix for a serious security issue that could cause arbitrary code execution, tracked as CVE-2023-43641. See this write-up by Kevin...