CVE-2024-50116 nilfs2: fix kernel bug due to missing clearing of buffer delay flag

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix kernel bug due to missing clearing of buffer delay flag Syzbot reported that after nilfs2 reads a corrupted file system image and degrades to read-only, the BUGON check for the buffer delay flag in submitbhwbc may fai...

CVE-2024-50107 platform/x86/intel/pmc: Fix pmc_core_iounmap to call iounmap for valid addresses

In the Linux kernel, the following vulnerability has been resolved: platform/x86/intel/pmc: Fix pmccoreiounmap to call iounmap for valid addresses Commit 50c6dbdfd16e "x86/ioremap: Improve iounmap address range checks" introduces a WARN when adrress ranges of iounmap are invalid. On Thinkpad P1 G...

CVE-2024-50096

CVE-2024-50096 affects the Linux kernel’s nouveau/dmem migrate_to_ram path. A copy error can cause nouveau_dmem_copy_one to report success even when the firmware/ hardware copy fails, leading migrate_to_ram to return a dirty HIGH_USER page to the user. The fix allocates a zero page so that, in er...

CVE-2024-50090

CVE-2024-50090 is tied to the Linux kernel DRM XE driver. The Connected document describes a bug in __xe_bb_create_job() where a buffer copy operation lacks input data validation, enabling a vulnerability that could trigger a service failure. The Initial description also notes a separate issue in...

kernel: netfilter: flowtable: initialise extack before use

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: initialise extack before use Fix missing initialisation of extack in flow offload...

Oracle Linux 8 : grafana-pcp (ELSA-2024-8847)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-8847 advisory. 5.1.1-9 - Resolves RHEL-61780: CVE-2024-9355 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Debian dla-3946 : context - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-3946 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3946-1 [email protected] https://www.debian.org/lts/security/...

SUSE SLES15 Security Update : kernel (Live Patch 4 for SLE 15 SP6) (SUSE-SU-2024:3885-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2024:3885-1 advisory. This update for the Linux Kernel 6.4.0-1506002322 fixes one issue. The following security issue was fixed: - CVE-2023-52752: smb: client: fix...

RHEL 7 : openstack-nova (RHSA-2018:2332)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:2332 advisory. OpenStack Compute nova launches and schedules large networks of virtual machines, creating a redundant and scalable cloud computing platform. Compute...

CVE-2024-51500

Meshtastic firmware is a device firmware for the Meshtastic project. The Meshtastic firmware does not check for packets claiming to be from the special broadcast address 0xFFFFFFFF which could result in unexpected behavior and potential for DDoS attacks on the network. A malicious actor could cra...

Updated buildah, podman, skopeo packages fix security vulnerabilities

A flaw was found in Buildah and subsequently Podman Build which allows containers to mount arbitrary locations on the host filesystem into build containers. A malicious Containerfile can use a dummy image with a symbolic link to the root filesystem as a mount source and cause the mount operation ...

CVE-2024-51483 changedetection.io Path Traversal vulnerability

changedetection.io is free, open source web page change detection software. Prior to version 0.47.5, when a WebDriver is used to fetch files, source:file:///etc/passwd can be used to retrieve local system files, where the more traditional file:///etc/passwd gets blocked. Version 0.47.5 fixes the...

Fedora 40 : xorg-x11-server-Xwayland (2024-275a45a146)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-275a45a146 advisory. xwayland 24.1.4 - CVE fix for CVE-2024-9632 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...

PT-2024-40554 · Git +1 · File

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, as indicated by an OSS-Fuzz report. The crash state includes functions such as load 1, apprentice...

python310-waitress-3.0.1-1.1 on GA media (moderate)

python310-waitress-3.0.1-1.1 on GA media Announcement ID: openSUSE-SU-2024:14445-1 Rating: moderate Cross-References: CVE-2024-49769 CVSS scores: CVE-2024-49769 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2024-49769 SUSE : 8.7...

Fedora: Security Advisory (FEDORA-2024-275a45a146)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15: xorg-x11-server / xorg-x11-server-Xvfb / xorg-x11-server-extra / etc (SUSE-SU-2024:3787-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3787-1 advisory. - CVE-2024-9632: Fixed heap-based buffer overflow privilege escalation in XkbSetCompatMap bsc1231565...

cargo-audit-advisory-db-20241030-1.1 on GA media (moderate)

cargo-audit-advisory-db-20241030-1.1 on GA media Announcement ID: openSUSE-SU-2024:14440-1 Rating: moderate Cross-References: CVE-2024-47609 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

Amazon Linux 2023 : python3-twisted, python3-twisted+tls (ALAS2023-2024-746)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-746 advisory. Twisted is an event-based framework for internet applications, supporting Python 3.6+. The twisted.web.util.redirectTo function contains an HTML injection vulnerability. If application code allows an...

Fedora: Security Advisory (FEDORA-2024-ab6348928b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...