Ubuntu 6454-3: Linux kernel (ARM laptop) vulnerabilities
Oct31
on October 31, 2023
at 10:50 pm
Posted In: Uncategorized
Several security issues were fixed in the Linux kernel.
Comment
Archive for October, 2023
176 results.
Debian: DSA-5543-1: open-vm-tools security update
Oct31
on October 31, 2023
at 7:33 pm
Posted In: Uncategorized
Two security issues have been discovered in the Open VMware Tools, which could result in privilege escalation. For the oldstable distribution (bullseye), these problems have been fixed
Debian: DSA-5544-1: zookeeper security update
Oct31
on October 31, 2023
at 7:30 pm
Posted In: Uncategorized
Damien Diederen discovered that SASL quorum peer authentication within Zookeeper, a service for maintaining configuration information, was insufficiently enforced in some configurations.
Ubuntu 6463-1: Open VM Tools vulnerabilities
Oct31
on October 31, 2023
at 4:51 pm
Posted In: Uncategorized
Several security issues were fixed in Open VM Tools.
Ubuntu 6453-2: X.Org X Server vulnerabilities
Oct31
on October 31, 2023
at 4:36 pm
Posted In: Uncategorized
Several security issues were fixed in X.Org X Server, xwayland.
– Update to slurm 22.05.10 – Use mariadb-connector-c-devel not mariadb-devel – Closes CVE-2023-41914
Fedora 38: thunderbird 2023-126cffa741
Oct31
on October 31, 2023
at 2:02 am
Posted In: Uncategorized
Update to 115.4.1 * https://www.thunderbird.net/en- US/thunderbird/115.4.1/releasenotes/ * https://www.mozilla.org/en- US/security/advisories/mfsa2023-47/
– Update to slurm 22.05.10 – Use mariadb-connector-c-devel not mariadb-devel – Closes CVE-2023-41914
Fedora 39: golang-github-seancfoley-bintree 2023-ab43e2ce21
Oct31
on October 31, 2023
at 12:50 am
Posted In: Uncategorized
rebuild against golang-x-image 0.13.0 —- version 0.30.1 —- fix overflow when GLFW_IM_MODULE=ibus is set and ibus is not running —- split out kitten clarify licenses for subpackages
rebuild against golang-x-image 0.13.0 —- version 0.30.1 —- fix overflow when GLFW_IM_MODULE=ibus is set and ibus is not running —- split out kitten clarify licenses for subpackages
Fedora 39: golang-github-altree-bigfloat 2023-ab43e2ce21
Oct31
on October 31, 2023
at 12:15 am
Posted In: Uncategorized
rebuild against golang-x-image 0.13.0 —- version 0.30.1 —- fix overflow when GLFW_IM_MODULE=ibus is set and ibus is not running —- split out kitten clarify licenses for subpackages
Debian: DSA-5542-1: request-tracker4 security update
Oct30
on October 30, 2023
at 9:13 pm
Posted In: Uncategorized
Multiple vulnerabilities have been discovered in Request Tracker, an extensible trouble-ticket tracking system. CVE-2023-41259
Debian: DSA-5541-1: request-tracker5 security update
Oct30
on October 30, 2023
at 8:37 pm
Posted In: Uncategorized
Multiple vulnerabilities have been discovered in Request Tracker, an extensible trouble-ticket tracking system. CVE-2023-41259
Debian: DSA-5540-1: jetty9 security update
Oct30
on October 30, 2023
at 8:04 pm
Posted In: Uncategorized
Two remotely exploitable security vulnerabilities were discovered in Jetty 9, a Java based web server and servlet engine. The HTTP/2 protocol implementation did not sufficiently verify if HPACK header values exceed their size limit. Furthermore the HTTP/2 protocol allowed a denial of service (server resource
Ubuntu 6454-2: Linux kernel vulnerabilities
Oct30
on October 30, 2023
at 5:13 pm
Posted In: Uncategorized
Several security issues were fixed in the Linux kernel.
Ubuntu 6441-3: Linux kernel vulnerabilities
Oct30
on October 30, 2023
at 5:12 pm
Posted In: Uncategorized
Several security issues were fixed in the Linux kernel.
Debian: DSA-5539-1: node-browserify-sign security update
Oct30
on October 30, 2023
at 4:57 pm
Posted In: Uncategorized
It was reported that incorrect bound checks in the dsaVerify function in node-browserify-sign, a Node.js library which adds crypto signing for browsers, allows an attacker to perform signature forgery attacks by constructing signatures that can be successfully verified by any
WP Briefing: Episode 65: Little Sun Success
Oct30
on October 30, 2023
at 12:00 pm
Posted In: Uncategorized
Join WordPress Executive Director, Josepha Haden Chomphosy, as she looks at a recent WordPress success story with Little Sun. To help us, we spoke to two special guests with Little Sun, Romane Guégan, Senior Press and Communications Manager, and Ashley Mrozek, Senior Digital Manager. Don’t miss this opportunity for an insider’s look!
Fedora 38: xorg-x11-server-Xwayland 2023-7a94186139
Oct29
on October 29, 2023
at 2:27 am
Posted In: Uncategorized
Security fix for CVE-2023-5367
update to 118.0.5993.117. Security release for CVE-2023-5472 —- Update to 118.0.5993.88
Debian: DSA-5538-1: thunderbird security update
Oct28
on October 28, 2023
at 1:24 pm
Posted In: Uncategorized
Multiple security issues were discovered in Thunderbird, which could result in denial of service or the execution of arbitrary code. For the oldstable distribution (bullseye), these problems have been fixed
– fix HTTP/2 Rapid Reset (CVE-2023-44487)
– fix cookie injection with none file (CVE-2023-38546) – fix SOCKS5 heap buffer overflow (CVE-2023-38545)
Debian: DSA-5537-1: openjdk-11 security update
Oct27
on October 27, 2023
at 4:51 pm
Posted In: Uncategorized
Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in bypass of sandbox restrictions or denial of service. For the oldstable distribution (bullseye), these problems have been fixed
**Redis 7.0.14** Released Wed 18 Oct 2023 10:33:40 IDT Upgrade urgency SECURITY: See security fixes below. Security fixes * (**CVE-2023-45145**) The wrong order of listen(2) and chmod(2) calls creates a race condition that can be used by another process to bypass desired Unix socket permissions on startup.
Update to 4.17.12 – Security fixes for CVE-2023-3961, CVE-2023-4091, CVE-2023-4154, CVE-2023-42669 and CVE-2023-42670
– Update to latest upstream (119.0)
**Redis 7.0.14** Released Wed 18 Oct 2023 10:33:40 IDT Upgrade urgency SECURITY: See security fixes below. Security fixes * (**CVE-2023-45145**) The wrong order of listen(2) and chmod(2) calls creates a race condition that can be used by another process to bypass desired Unix socket permissions on startup.
Debian: DSA-5536-1: chromium security update
Oct27
on October 27, 2023
at 12:04 am
Posted In: Uncategorized
An important security issue was discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.
Ubuntu 6454-1: Linux kernel vulnerabilities
Oct26
on October 26, 2023
at 12:43 pm
Posted In: Uncategorized
Several security issues were fixed in the Linux kernel.