Several security issues were fixed in the Linux kernel.
Comment
Archive for October, 2023
170 results.
Two security issues have been discovered in the Open VMware Tools, which could result in privilege escalation. For the oldstable distribution (bullseye), these problems have been fixed
Damien Diederen discovered that SASL quorum peer authentication within Zookeeper, a service for maintaining configuration information, was insufficiently enforced in some configurations.
Several security issues were fixed in Open VM Tools.
Several security issues were fixed in X.Org X Server, xwayland.
– Update to slurm 22.05.10 – Use mariadb-connector-c-devel not mariadb-devel – Closes CVE-2023-41914
Update to 115.4.1 * https://www.thunderbird.net/en- US/thunderbird/115.4.1/releasenotes/ * https://www.mozilla.org/en- US/security/advisories/mfsa2023-47/
– Update to slurm 22.05.10 – Use mariadb-connector-c-devel not mariadb-devel – Closes CVE-2023-41914
rebuild against golang-x-image 0.13.0 —- version 0.30.1 —- fix overflow when GLFW_IM_MODULE=ibus is set and ibus is not running —- split out kitten clarify licenses for subpackages
rebuild against golang-x-image 0.13.0 —- version 0.30.1 —- fix overflow when GLFW_IM_MODULE=ibus is set and ibus is not running —- split out kitten clarify licenses for subpackages
rebuild against golang-x-image 0.13.0 —- version 0.30.1 —- fix overflow when GLFW_IM_MODULE=ibus is set and ibus is not running —- split out kitten clarify licenses for subpackages
Multiple vulnerabilities have been discovered in Request Tracker, an extensible trouble-ticket tracking system. CVE-2023-41259
Multiple vulnerabilities have been discovered in Request Tracker, an extensible trouble-ticket tracking system. CVE-2023-41259
Two remotely exploitable security vulnerabilities were discovered in Jetty 9, a Java based web server and servlet engine. The HTTP/2 protocol implementation did not sufficiently verify if HPACK header values exceed their size limit. Furthermore the HTTP/2 protocol allowed a denial of service (server resource
Several security issues were fixed in the Linux kernel.
Several security issues were fixed in the Linux kernel.
It was reported that incorrect bound checks in the dsaVerify function in node-browserify-sign, a Node.js library which adds crypto signing for browsers, allows an attacker to perform signature forgery attacks by constructing signatures that can be successfully verified by any
Join WordPress Executive Director, Josepha Haden Chomphosy, as she looks at a recent WordPress success story with Little Sun. To help us, we spoke to two special guests with Little Sun, Romane Guégan, Senior Press and Communications Manager, and Ashley Mrozek, Senior Digital Manager. Don’t miss this opportunity for an insider’s look!
Security fix for CVE-2023-5367
update to 118.0.5993.117. Security release for CVE-2023-5472 —- Update to 118.0.5993.88
Multiple security issues were discovered in Thunderbird, which could result in denial of service or the execution of arbitrary code. For the oldstable distribution (bullseye), these problems have been fixed
– fix HTTP/2 Rapid Reset (CVE-2023-44487)
– fix cookie injection with none file (CVE-2023-38546) – fix SOCKS5 heap buffer overflow (CVE-2023-38545)
Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in bypass of sandbox restrictions or denial of service. For the oldstable distribution (bullseye), these problems have been fixed
**Redis 7.0.14** Released Wed 18 Oct 2023 10:33:40 IDT Upgrade urgency SECURITY: See security fixes below. Security fixes * (**CVE-2023-45145**) The wrong order of listen(2) and chmod(2) calls creates a race condition that can be used by another process to bypass desired Unix socket permissions on startup.
Update to 4.17.12 – Security fixes for CVE-2023-3961, CVE-2023-4091, CVE-2023-4154, CVE-2023-42669 and CVE-2023-42670
– Update to latest upstream (119.0)
**Redis 7.0.14** Released Wed 18 Oct 2023 10:33:40 IDT Upgrade urgency SECURITY: See security fixes below. Security fixes * (**CVE-2023-45145**) The wrong order of listen(2) and chmod(2) calls creates a race condition that can be used by another process to bypass desired Unix socket permissions on startup.
An important security issue was discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.
Several security issues were fixed in the Linux kernel.