Ragic, Inc. Security Vulnerabilities

libreoffice security fix update

[6.4.7.2-16.0.1] - Replace colors with Oracle colors [Orabug: 32120093] - Build with --with-vendor='Oracle America, Inc.' - Added the --with-hamcrest option to configure. [1:6.4.7.2-16] - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target...

Photon OS 2.0: Curl PHSA-2018-2.0-0096

An update of the curl package has been...

Ubuntu 20.04 LTS / 22.04 LTS : matio vulnerability (USN-6829-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6829-1 advisory. It was discovered that matio incorrectly handled certain malformed files. An attacker could possibly use this issue to cause a denial of service. ...

Photon OS 1.0: Curl PHSA-2018-1.0-0186

An update of the curl package has been...

Photon OS 1.0: Perl PHSA-2018-1.0-0175

An update of the perl package has been...

Photon OS 1.0: Freetype2 PHSA-2018-1.0-0148

An update of the freetype2 package has been...

Photon OS 1.0: Pycrypto PHSA-2018-1.0-0126

An update of the pycrypto package has been...

Photon OS 1.0: Net PHSA-2018-1.0-0126

An update of the net package has been...

Photon OS 2.0: Libgcrypt PHSA-2018-2.0-0091

An update of the libgcrypt package has been...

Photon OS 2.0: Strongswan PHSA-2018-2.0-0086

An update of the strongswan package has been...

Photon OS 2.0: Binutils PHSA-2018-2.0-0021

An update of the binutils package has been...

Dell Client BIOS Incorrect Authorization (DSA-2024-122)

Dell Client Platform contains an incorrect authorization vulnerability. An attacker with physical access to the system could potentially exploit this vulnerability by bypassing BIOS authorization to modify settings in the BIOS. Note that Nessus has not tested for this issue but has instead relied.....

Debian DSA-4380-1 : golang-1.8 - security update

A vulnerability was discovered in the implementation of the P-521 and P-384 elliptic curves, which could result in denial of service and in some cases key recovery. In addition this update fixes two vulnerabilities in 'go get', which could result in the execution of arbitrary shell...

Photon OS 1.0: Systemd PHSA-2017-0041

An update of the systemd package has been...

Photon OS 1.0: Tcpdump PHSA-2017-0033

An update of the tcpdump package has been...

Debian DSA-4382-1 : rssh - security update

Nick Cleaton discovered two vulnerabilities in rssh, a restricted shell that allows users to perform only scp, sftp, cvs, svnserve (Subversion), rdist and/or rsync operations. Missing validation in the rsync support could result in the bypass of this restriction, allowing the execution of...

Debian DSA-4399-1 : ikiwiki - security update

Joey Hess discovered that the aggregate plugin of the Ikiwiki wiki compiler was susceptible to server-side request forgery, resulting in information disclosure or denial of...

CVE-2022-40538

Transient DOS due to reachable assertion in modem while processing sib with incorrect values from...

Photon OS 2.0: Libtiff PHSA-2017-2.0-0007

An update of the libtiff package has been...

Photon OS 1.0: Cairo PHSA-2017-0039

An update of the cairo package has been...

Photon OS 1.0: Openldap PHSA-2017-0024

An update of the openldap package has been...

Ubuntu 18.10 : libsolv vulnerabilities (USN-3916-1)

It was discovered that libsolv incorrectly handled certain malformed input. If a user or automated system were tricked into opening a specially crafted file, applications that rely on libsolv could be made to crash, resulting in a denial of service. Note that Tenable Network Security has extracted....

Debian DLA-1656-1 : agg security update

A stack overflow vulnerability was discovered in AGG, the AntiGrain Geometry graphical toolkit, that may lead to code execution if a malformed file is processed. Since AGG only provides a static library, the desmume and exactimage packages were rebuilt against the latest security update. For...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : snapd vulnerability (USN-4728-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 20.10 host has packages installed that are affected by a vulnerability as referenced in the USN-4728-1 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...

Photon OS 2.0: Openssl PHSA-2018-2.0-0010-(a)

An update of the openssl package has been...

Photon OS 1.0: Ruby PHSA-2017-0037

An update of the ruby package has been...

Photon OS 1.0: Openssh PHSA-2016-0014

An update of the openssh package has been...

Photon OS 1.0: Pycrypto PHSA-2017-0026

An update of the pycrypto package has been...

Photon OS 2.0: Rsync PHSA-2018-2.0-0009

An update of the rsync package has been...

Photon OS 1.0: Rsync PHSA-2018-1.0-0096

An update of the rsync package has been...

Photon OS 1.0: Redis PHSA-2018-1.0-0156

An update of the redis package has been...

Debian DSA-4379-1 : golang-1.7 - security update

A vulnerability was discovered in the implementation of the P-521 and P-384 elliptic curves, which could result in denial of service and in some cases key recovery. In addition this update fixes a vulnerability in 'go get', which could result in the execution of arbitrary shell...

Photon OS 1.0: Rsyslog PHSA-2017-0030

An update of the rsyslog package has been...

Photon OS 1.0: Systemd PHSA-2017-0044

An update of the systemd package has been...

Photon OS 1.0: Ruby PHSA-2017-0029

An update of the ruby package has been...

Ubuntu 20.04 LTS : Git vulnerability (USN-6793-2)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6793-2 advisory. USN-6793-1 fixed vulnerabilities in Git. The CVE-2024-32002 was pending further investigation. This update fixes the problem. Original advisory details: It...

Ubuntu 20.04 LTS / 22.04 LTS / 23.10 / 24.04 LTS : Ruby vulnerabilities (USN-6838-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.10 / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6838-1 advisory. It was discovered that Ruby RDoc incorrectly parsed certain YAML files. If a user or automated system were tricked...

JVN#29471697: Android App "TP-Link Tether" and "TP-Link Tapo" vulnerable to improper server certificate verification

Android App "TP-Link Tether" and "TP-Link Tapo" provided by TP-LINK GLOBAL INC. are vulnerable to improper server certificate verification (CWE-295). ## Impact A man-in-the-middle attack may allow an attacker to eavesdrop on an encrypted communication. ## Solution Update the application Update the....

Exploit for CVE-2023-43115

ghostscript-CVE-2023-43115 A small write-up with examples to...

Photon OS 2.0: Go PHSA-2018-2.0-0026

An update of the go package has been...

Photon OS 2.0: Go PHSA-2018-2.0-0034

An update of the go package has been...

Photon OS 1.0: Go PHSA-2018-1.0-0117

An update of the go package has been...

Photon OS 1.0: Ruby PHSA-2018-1.0-0100

An update of the ruby package has been...

Ubuntu 23.10 : Linux kernel (Azure) vulnerabilities (USN-6573-1)

The remote Ubuntu 23.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6573-1 advisory. A flaw was found in the Netfilter subsystem in the Linux kernel. The nfnl_osf_add_callback function did not validate the user mode controlled opt_num...

GLSA-202406-02 : Flatpak: Sandbox Escape

The remote host is affected by the vulnerability described in GLSA-202406-02 (Flatpak: Sandbox Escape) A vulnerability has been discovered in Flatpak. Please review the CVE identifier referenced below for details. Tenable has extracted the preceding description block directly from the Gentoo...

Ubuntu 23.10 / 24.04 LTS : Rack vulnerabilities (USN-6837-1)

The remote Ubuntu 23.10 / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6837-1 advisory. It was discovered that Rack incorrectly handled Multipart MIME parsing. A remote attacker could possibly use this issue to cause Rack to...

KrebsOnSecurity Threatened with Defamation Lawsuit Over Fake Radaris CEO

On March 8, 2024, KrebsOnSecurity published a deep dive on the consumer data broker Radaris, showing how the original owners are two men in Massachusetts who operated multiple Russian language dating services and affiliate programs, in addition to a dizzying array of people-search websites. The...

Debian DSA-4375-1 : spice - security update

Christophe Fergeau discovered an out-of-bounds read vulnerability in spice, a SPICE protocol client and server library, which might result in denial of service (spice server crash), or possibly, execution of arbitrary...

Debian DSA-4372-1 : ghostscript - security update

Tavis Ormandy discovered a vulnerability in Ghostscript, the GPL PostScript/PDF interpreter, which may result in denial of service or the execution of arbitrary code if a malformed Postscript file is processed (despite the -dSAFER sandbox being...

Photon OS 2.0: Ruby PHSA-2018-2.0-0013

An update of the ruby package has been...