ESB-2023.3857 – [Debian] fusiondirectory: CVSS (Max): 9.8 [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3857 fusiondirectory security update and rebuild for php-cas 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: fusiondirectory Publisher: Debian Operating System: Debian GNU/Linux Resolution: Patch/Upgrade CVE Names: CVE-2022-39369 CVE-2022-36180 CVE-2022-36179 Original Bulletin: https://lists.debian.org/debian-lts-announce/2023/07/msg00009.html Comment: CVSS (Max): 9.8 CVE-2022-36179 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) CVSS Source: … Read more

ESB-2023.3871 – [RedHat] bind: CVSS (Max): 7.5 [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3871 bind security update 11 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: bind Publisher: Red Hat Operating System: Red Hat Resolution: Patch/Upgrade CVE Names: CVE-2023-2828 Original Bulletin: https://access.redhat.com/errata/RHSA-2023:4005 Comment: CVSS (Max): 7.5 CVE-2023-2828 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSS Source: Red Hat Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H – … Read more

ESB-2023.3870 – [RedHat] python39:3.9 and python39-devel:3.9: CVSS (Max): 7.5 [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3870 python39:3.9 and python39-devel:3.9 security update 11 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: python39:3.9 and python39-devel:3.9 Publisher: Red Hat Operating System: Red Hat Resolution: Patch/Upgrade CVE Names: CVE-2023-24329 Original Bulletin: https://access.redhat.com/errata/RHSA-2023:4004 Comment: CVSS (Max): 7.5 CVE-2023-24329 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) CVSS Source: Red … Read more

ESB-2023.3869 – [RedHat] Red Hat Service Interconnect 1.4 Release: CVSS (Max): 7.5 [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3869 Red Hat Service Interconnect 1.4 Release security update 11 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Red Hat Service Interconnect 1.4 Release Publisher: Red Hat Operating System: Red Hat Resolution: Patch/Upgrade CVE Names: CVE-2023-29400 CVE-2023-24539 CVE-2023-24538 CVE-2023-24537 CVE-2023-24536 CVE-2023-24534 CVE-2022-41725 … Read more

ESB-2023.3868 – [UNIX/Linux] Asterisk: CVSS (Max): 6.5 [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3868 Heap buffer overflow when decoding STUN message in pjproject (GHSA-4xjp-22g4-9fxm) 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Asterisk Publisher: Asterisk Operating System: UNIX variants (UNIX, Linux, OSX) Resolution: Patch/Upgrade CVE Names: CVE-2022-23537 Original Bulletin: https://github.com/asterisk/asterisk/security/advisories/GHSA-4xjp-22g4-9fxm Comment: CVSS (Max): 6.5 … Read more

ESB-2023.3862 – [Win][Linux][HP-UX][Solaris][AIX] IBM DB2: CVSS (Max): 8.4 [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3862 IBM Db2 db2set is vulnerable to arbitrary code execution. (CVE-2023-30431) 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: IBM DB2 Publisher: IBM Operating System: Windows HP-UX Solaris Linux variants AIX Resolution: Patch/Upgrade CVE Names: CVE-2023-30431 Original Bulletin: https://www.ibm.com/support/pages/node/7010565 Comment: CVSS … Read more

ESB-2023.3861 – [Win][Linux][HP-UX][Solaris][AIX] IBM DB2: CVSS (Max): 6.3 [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3861 IBM Db2 JDBC driver is vulnerable to remote code execution. (CVE-2023-27869, CVE-2023-27867, CVE-2023-27868) 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: IBM DB2 Publisher: IBM Operating System: Windows Linux variants AIX HP-UX Solaris Resolution: Patch/Upgrade CVE Names: CVE-2023-27869 CVE-2023-27868 CVE-2023-27867 … Read more