TheNewbie

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3902 Security update for the Linux Kernel 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Linux Kernel Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2023-35824 CVE-2023-3358 CVE-2023-3268 CVE-2023-3161 CVE-2023-3159 CVE-2023-3141 CVE-2023-3111 CVE-2023-3090 CVE-2023-2002 CVE-2023-1637 CVE-2023-1249 CVE-2023-1079 CVE-2023-1077 Original Bulletin: … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3911 MISP 2.4.173 released with various bugfixes and improvements 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: MISP 2.4.173 Publisher: MISP Operating System: Windows UNIX variants (UNIX, Linux, OSX) Resolution: Patch/Upgrade CVE Names: CVE-2023-37307 CVE-2023-37306 Original Bulletin: https://www.misp-project.org/2023/07/11/MISP.2.4.173.released.html/ Comment: CVSS (Max): … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3910 Citrix Secure Access client for Ubuntu Security Bulletin for CVE-2023-24492 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Citrix ADC Citrix Gateway Publisher: Citrix Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-24492 Original Bulletin: https://support.citrix.com/article/CTX564169/citrix-secure-access-client-for-ubuntu-security-bulletin-for-cve202324492 Comment: CVSS (Max): 9.6 CVE-2023-24492 … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3909 Citrix Secure Access client for Windows Security Bulletin for CVE-2023-24491 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Citrix ADC Citrix Gateway Publisher: Citrix Operating System: Windows Resolution: Patch/Upgrade CVE Names: CVE-2023-24491 Original Bulletin: https://support.citrix.com/article/CTX561480/citrix-secure-access-client-for-windows-security-bulletin-for-cve202324491 Comment: CVSS (Max): 7.8 CVE-2023-24491 … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3908 APSB23-38 : Security update available for Adobe InDesign 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Adobe InDesign Publisher: Adobe Operating System: Windows macOS Resolution: Patch/Upgrade CVE Names: CVE-2023-29319 CVE-2023-29318 CVE-2023-29317 CVE-2023-29316 CVE-2023-29315 CVE-2023-29314 CVE-2023-29313 CVE-2023-29312 CVE-2023-29311 CVE-2023-29310 CVE-2023-29309 CVE-2023-29308 … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3800 Security update for amazon-ecs-init 5 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: amazon-ecs-init Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232762-1 Comment: CVSS (Max): None available when published – ————————–BEGIN INCLUDED TEXT——————– Security update for amazon-ecs-init Announcement ID: … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3799 Security update for libcap 5 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: libcap Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2023-2603 CVE-2023-2602 Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232765-1 Comment: CVSS (Max): 4.4 CVE-2023-2603 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) CVSS Source: SUSE Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L – ————————–BEGIN … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3798 Security update for qt6-base 5 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: qt6-base Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2023-32763 Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232780-1 Comment: CVSS (Max): 7.8 CVE-2023-32763 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) CVSS Source: SUSE Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H – ————————–BEGIN INCLUDED … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3797 Security update for dnsdist 5 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: dnsdist Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2018-14663 CVE-2017-7557 CVE-2016-7069 Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232760-1 Comment: CVSS (Max): None available when published – ————————–BEGIN INCLUDED TEXT——————– Security … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3796 Security update for rmt-server 5 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: rmt-server Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2023-28120 CVE-2023-27530 CVE-2022-31254 Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232781-1 Comment: CVSS (Max): 7.8 CVE-2022-31254 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) CVSS Source: SUSE Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H – … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3795 Security update for python-tornado 5 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: python-tornado Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2023-28370 Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232770-1 Comment: CVSS (Max): 3.4 CVE-2023-28370 (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N) CVSS Source: SUSE Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N – ————————–BEGIN INCLUDED … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3794 Security update for libcap 5 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: libcap Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2023-2603 Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232764-1 Comment: CVSS (Max): 4.4 CVE-2023-2603 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) CVSS Source: SUSE Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L – ————————–BEGIN INCLUDED … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3793 Security update for terraform 5 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: terraform Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232763-1 Comment: CVSS (Max): None available when published – ————————–BEGIN INCLUDED TEXT——————– Security update for terraform Announcement ID: … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3792 Security update for xmltooling 5 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: xmltooling Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2023-36661 Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232766-1 Comment: CVSS (Max): 5.4 CVE-2023-36661 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L) CVSS Source: SUSE Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L – ————————–BEGIN INCLUDED … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3791 Multiple vulnerabilities in IBM Java SDK affects IBM WebSphere Application Server April 2023 CPU that is bundled with IBM WebSphere Application Server Patterns 4 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: WebSphere Application Server Patterns Publisher: IBM Operating System: Linux … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3790 IBM Integration Bus is vulnerable to a remote attack due to Apache Jena (CVE-2021-39239, CVE-2022-28890, CVE-2023-22665). 4 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: IBM Integration Bus Publisher: IBM Operating System: Linux variants Windows z/OS Resolution: Patch/Upgrade CVE Names: CVE-2023-22665 … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3789 ghostscript security update 4 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: ghostscript Publisher: Debian Operating System: Debian GNU/Linux Resolution: Patch/Upgrade CVE Names: CVE-2023-36664 Original Bulletin: https://lists.debian.org/debian-security-announce/2023/msg00138.html Comment: CVSS (Max): 8.4 CVE-2023-36664 (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) CVSS Source: Red Hat Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H – ————————–BEGIN … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3788 USN-6198-1: GNU Screen vulnerability 4 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: GNU Screen Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-24626 Original Bulletin: https://ubuntu.com/security/notices/USN-6198-1 Comment: CVSS (Max): 6.5 CVE-2023-24626 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H – ————————–BEGIN … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3787 USN-6196-1: ReportLab vulnerability 4 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: ReportLab Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-33733 Original Bulletin: https://ubuntu.com/security/notices/USN-6196-1 Comment: CVSS (Max): 7.8 CVE-2023-33733 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H – ————————–BEGIN INCLUDED TEXT——————– … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3786 USN-6197-1: OpenLDAP vulnerability 4 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: OpenLDAP Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-2953 Original Bulletin: https://ubuntu.com/security/notices/USN-6197-1 Comment: CVSS (Max): 7.5 CVE-2023-2953 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H – ————————–BEGIN INCLUDED TEXT——————– … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3785 USN-6199-1: PHP vulnerability 4 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: PHP Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-3247 Original Bulletin: https://ubuntu.com/security/notices/USN-6199-1 Comment: CVSS (Max): 5.3 CVE-2023-3247 (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N) CVSS Source: SUSE Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N – ————————–BEGIN INCLUDED TEXT——————– … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3824 Android Security Bulletin – July 2023 6 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Android OS Publisher: Android Operating System: Android Resolution: Patch/Upgrade CVE Names: CVE-2023-28542 CVE-2023-28541 CVE-2023-28147 CVE-2023-26083 CVE-2023-25012 CVE-2023-24854 CVE-2023-24851 CVE-2023-22667 CVE-2023-22387 CVE-2023-22386 CVE-2023-21672 CVE-2023-21631 CVE-2023-21629 CVE-2023-21262 CVE-2023-21261 … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3823 linux security update 6 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: linux Publisher: Debian Operating System: Debian GNU/Linux Resolution: Patch/Upgrade CVE Names: CVE-2023-35788 CVE-2023-32254 CVE-2023-32250 CVE-2023-31084 CVE-2023-3390 CVE-2023-3269 CVE-2023-3268 CVE-2023-3212 CVE-2023-3090 CVE-2023-2269 CVE-2023-2156 CVE-2023-2124 Original Bulletin: http://www.debian.org/security/2023/dsa-5448 Comment: CVSS (Max): … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3822 golang-yaml.v2 security update 6 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: golang-yaml.v2 Publisher: Debian Operating System: Debian GNU/Linux Resolution: Patch/Upgrade CVE Names: CVE-2022-3064 CVE-2021-4235 Original Bulletin: https://lists.debian.org/debian-lts-announce/2023/07/msg00001.html Comment: CVSS (Max): 7.5 CVE-2022-3064 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H – ————————–BEGIN … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3821 mediawiki security update 6 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: mediawiki Publisher: Debian Operating System: Debian GNU/Linux Resolution: Patch/Upgrade CVE Names: CVE-2023-36675 CVE-2023-36674 CVE-2023-29141 Original Bulletin: https://lists.debian.org/debian-security-announce/2023/msg00139.html Comment: CVSS (Max): 9.8* CVE-2023-29141 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3819 Cisco BroadWorks Privilege Escalation Vulnerability 6 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Cisco BroadWorks Publisher: Cisco Systems Operating System: Cisco Resolution: Patch/Upgrade CVE Names: CVE-2023-20210 Original Bulletin: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bw-privesc-yw4ekrXW Comment: CVSS (Max): 6.0 CVE-2023-20210 (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) CVSS Source: Cisco Systems Calculator: … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3817 Cisco Webex Meetings Web UI Vulnerabilities 6 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Cisco Webex Meetings Publisher: Cisco Systems Operating System: Cisco Resolution: Patch/Upgrade CVE Names: CVE-2023-20180 CVE-2023-20133 Original Bulletin: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sxsscsrf-2L24bBx6 Comment: CVSS (Max): 5.4 CVE-2023-20133 (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) CVSS Source: … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3816 Security update for grpc, protobuf, python-Deprecated, python-PyGithub, python-aiocontextvars, python-avro, python-bcrypt, python-cryptography, python-cryptography-vectors, python-google-api-core, pyt 6 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: grpc, protobuf, python-Deprecated, python-PyGithub, python-aiocontextvars, python-avro, python-bcrypt python-cryptography, python-cryptography-vectors, python-google-api-core python-googleapis-common-protos, python-grpcio-gcp, python-humanfriendly python-jsondiff, python-knack, python-opencensus, python-opencensus-context python-opencensus-ext-threading, … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3815 Security update for libdwarf 6 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: libdwarf Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2020-27545 Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232784-1 Comment: CVSS (Max): 5.5 CVE-2020-27545 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) CVSS Source: SUSE Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H – ————————–BEGIN INCLUDED … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3814 Security update for python311 6 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: python311 Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2007-4559 Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232778-1 Comment: CVSS (Max): 5.4 CVE-2007-4559 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) CVSS Source: SUSE Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L – ————————–BEGIN INCLUDED … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3813 Security update for kubernetes1.18 6 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: kubernetes1.18 Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232773-1 Comment: CVSS (Max): None available when published – ————————–BEGIN INCLUDED TEXT——————– Security update for kubernetes1.18 Announcement ID: … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3812 Security update for the Linux Kernel 6 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Linux Kernel Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2023-35828 CVE-2023-35823 CVE-2023-35788 CVE-2023-33288 CVE-2023-32233 CVE-2023-31436 CVE-2023-31084 CVE-2023-30456 CVE-2023-28410 CVE-2023-21102 CVE-2023-3161 CVE-2023-3141 CVE-2023-3006 CVE-2023-2513 CVE-2023-2483 … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3811 Security update for dnsdist 6 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: dnsdist Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2018-14663 CVE-2017-7557 CVE-2016-7069 Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232777-1 Comment: CVSS (Max): 8.8 CVE-2017-7557 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H – … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3810 USN-6203-1: Django vulnerability 6 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Django Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-36053 Original Bulletin: https://ubuntu.com/security/notices/USN-6203-1 Comment: CVSS (Max): 5.9 CVE-2023-36053 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSS Source: SUSE Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H – ————————–BEGIN INCLUDED TEXT——————– … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3809 USN-6204-1: CPDB vulnerability 6 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: CPDB Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-34095 Original Bulletin: https://ubuntu.com/security/notices/USN-6204-1 Comment: CVSS (Max): 9.8 CVE-2023-34095 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H – ————————–BEGIN INCLUDED TEXT——————– … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3808 USN-6202-1: containerd vulnerabilities 6 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: containerd Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-25173 CVE-2023-25153 Original Bulletin: https://ubuntu.com/security/notices/USN-6202-1 Comment: CVSS (Max): 7.8 CVE-2023-25173 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H – ————————–BEGIN INCLUDED … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3807 USN-6201-1: Firefox vulnerabilities 6 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Firefox Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-37212 CVE-2023-37211 CVE-2023-37210 CVE-2023-37209 CVE-2023-37208 CVE-2023-37207 CVE-2023-37206 CVE-2023-37205 CVE-2023-37204 CVE-2023-37203 CVE-2023-37202 CVE-2023-37201 CVE-2023-3482 Original Bulletin: https://ubuntu.com/security/notices/USN-6201-1 Comment: CVSS (Max): … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3806 IBM App Connect Enterprise and IBM Integration Bus are vulnerable to a remote attacker and denial of service due to Guava (CVE-2020-8908, CVE-2018-10237). 5 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: IBM Integration Bus IBM App Connect Enterprise Publisher: IBM … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3805 A security vulnerability has been identified in IBM WebSphere Application Server shipped with Asset and Service Management (CVE-2023-35890) 5 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: IBM WebSphere Application Server Publisher: IBM Operating System: Network Appliance Resolution: Patch/Upgrade CVE Names: … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3804 MFSA 2023-22 Security Vulnerabilities fixed in Firefox 115 5 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Firefox Publisher: Mozilla Operating System: Windows Linux variants macOS Resolution: Patch/Upgrade CVE Names: CVE-2023-37212 CVE-2023-37211 CVE-2023-37210 CVE-2023-37209 CVE-2023-37208 CVE-2023-37207 CVE-2023-37206 CVE-2023-37205 CVE-2023-37204 CVE-2023-37203 CVE-2023-37202 … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3803 MFSA 2023-23 Security Vulnerabilities fixed in Firefox ESR 102.13 5 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Firefox ESR Publisher: Mozilla Operating System: Windows Linux variants macOS Resolution: Patch/Upgrade CVE Names: CVE-2023-37211 CVE-2023-37208 CVE-2023-37207 CVE-2023-37202 CVE-2023-37201 Original Bulletin: https://www.mozilla.org/en-US/security/advisories/mfsa2023-23/ Comment: … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3802 MFSA 2023-24 Security Vulnerabilities fixed in Thunderbird 102.13 5 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Thunderbird Publisher: Mozilla Operating System: Windows Linux variants macOS Resolution: Patch/Upgrade CVE Names: CVE-2023-37211 CVE-2023-37208 CVE-2023-37207 CVE-2023-37202 CVE-2023-37201 Original Bulletin: https://www.mozilla.org/en-US/security/advisories/mfsa2023-24/ Comment: CVSS (Max): … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3801 USN-6200-1: ImageMagick vulnerabilities 5 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: ImageMagick Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-34151 CVE-2023-3428 CVE-2023-3195 CVE-2023-1906 CVE-2023-1289 CVE-2022-32547 CVE-2022-32546 CVE-2022-32545 CVE-2022-28463 CVE-2021-39212 CVE-2021-20313 CVE-2021-20312 CVE-2021-20309 CVE-2021-20246 CVE-2021-20244 CVE-2021-20243 CVE-2021-20241 CVE-2021-20224 CVE-2021-3610 … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2022.3953.2 Intel NUC Laptop Kit Advisory 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Intel NUC Laptop Kits Publisher: Intel Operating System: Windows UNIX variants (UNIX, Linux, OSX) Resolution: Patch/Upgrade CVE Names: CVE-2022-34488 CVE-2022-34345 CVE-2022-33209 CVE-2022-32579 CVE-2022-28858 CVE-2022-27493 Original Bulletin: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00712.html … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3844 VMware SD-WAN update addresses a bypass authentication vulnerability (CVE-2023-20899) 7 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: VMware SD-WAN (Edge) Publisher: VMWare Operating System: Virtualisation Resolution: Patch/Upgrade CVE Names: CVE-2023-20899 Original Bulletin: https://www.vmware.com/security/advisories/VMSA-2023-0015.html Comment: CVSS (Max): 5.3 CVE-2023-20899 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) CVSS … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3843 [R1] Nessus Agent Version 10.4.1 Fixes Multiple Vulnerabilities 7 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Nessus Agent Publisher: Tenable Operating System: Windows Linux variants macOS Resolution: Patch/Upgrade CVE Names: CVE-2023-2650 CVE-2023-1255 CVE-2023-0466 CVE-2023-0465 Original Bulletin: https://www.tenable.com/security/tns-2023-24 Comment: CVSS (Max): … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3834 USN-6208-1: Gorilla WebSocket vulnerability 7 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Gorilla WebSocket Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2020-27813 Original Bulletin: https://ubuntu.com/security/notices/USN-6208-1 Comment: CVSS (Max): 7.5 CVE-2020-27813 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H – ————————–BEGIN … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3833 Security update for bind 7 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: bind Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2023-2828 Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232789-1 Comment: CVSS (Max): 7.5 CVE-2023-2828 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSS Source: SUSE Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H – ————————–BEGIN INCLUDED … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3830 ruby-redcloth security update 7 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: ruby-redcloth Publisher: Debian Operating System: Debian GNU/Linux Resolution: Patch/Upgrade CVE Names: CVE-2023-31606 Original Bulletin: https://lists.debian.org/debian-lts-announce/2023/07/msg00002.html Comment: CVSS (Max): 7.5 CVE-2023-31606 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H – ————————–BEGIN INCLUDED … Read more