TheNewbie

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3839 IBM QRadar SIEM includes components with known vulnerabilities 7 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: IBM Security QRadar SIEM Publisher: IBM Operating System: Linux variants Resolution: Patch/Upgrade CVE Names: CVE-2023-28708 CVE-2023-25194 CVE-2023-24998 CVE-2023-24329 CVE-2023-20863 CVE-2023-20861 CVE-2023-20860 CVE-2023-20859 CVE-2023-1999 CVE-2023-1436 … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3837 USN-6207-1: Linux kernel (Intel IoTG) vulnerabilities 7 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Linux kernel (Intel IoTG) Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-25012 CVE-2023-2985 CVE-2023-1998 CVE-2023-1859 CVE-2023-1670 CVE-2023-1079 CVE-2023-1077 CVE-2023-1076 Original Bulletin: https://ubuntu.com/security/notices/USN-6207-1 Comment: CVSS … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3836 USN-6206-1: Linux kernel (OEM) vulnerabilities 7 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Linux kernel (OEM) Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-35788 CVE-2023-2124 CVE-2023-0597 CVE-2022-4842 Original Bulletin: https://ubuntu.com/security/notices/USN-6206-1 Comment: CVSS (Max): 7.8 CVE-2023-35788 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) CVSS Source: … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3835 USN-6205-1: Linux kernel (GKE) vulnerabilities 7 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Linux kernel (GKE) Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-35788 Original Bulletin: https://ubuntu.com/security/notices/USN-6205-1 Comment: CVSS (Max): 7.8 CVE-2023-35788 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3834 USN-6208-1: Gorilla WebSocket vulnerability 7 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Gorilla WebSocket Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2020-27813 Original Bulletin: https://ubuntu.com/security/notices/USN-6208-1 Comment: CVSS (Max): 7.5 CVE-2020-27813 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H – ————————–BEGIN … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3833 Security update for bind 7 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: bind Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2023-2828 Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232789-1 Comment: CVSS (Max): 7.5 CVE-2023-2828 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSS Source: SUSE Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H – ————————–BEGIN INCLUDED … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3832 Security update for python-sqlparse 7 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: python-sqlparse Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2023-30608 Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232787-1 Comment: CVSS (Max): 5.5 CVE-2023-30608 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) CVSS Source: SUSE Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H – ————————–BEGIN INCLUDED … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3831 libusrsctp security update 7 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: libusrsctp Publisher: Debian Operating System: Debian GNU/Linux Resolution: Patch/Upgrade CVE Names: CVE-2019-20503 Original Bulletin: https://lists.debian.org/debian-lts-announce/2023/07/msg00003.html Comment: CVSS (Max): 6.5 CVE-2019-20503 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H – ————————–BEGIN INCLUDED … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3830 ruby-redcloth security update 7 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: ruby-redcloth Publisher: Debian Operating System: Debian GNU/Linux Resolution: Patch/Upgrade CVE Names: CVE-2023-31606 Original Bulletin: https://lists.debian.org/debian-lts-announce/2023/07/msg00002.html Comment: CVSS (Max): 7.5 CVE-2023-31606 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H – ————————–BEGIN INCLUDED … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3827 Red Hat OpenShift Enterprise security update 7 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Red Hat OpenShift Enterprise Publisher: Red Hat Operating System: Red Hat Resolution: Patch/Upgrade CVE Names: CVE-2023-24540 CVE-2023-3089 CVE-2022-41717 CVE-2022-30629 CVE-2022-28327 CVE-2022-24675 CVE-2022-23772 Original Bulletin: https://access.redhat.com/errata/RHSA-2023:3914 Comment: … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3850 USN-6211-1: Linux kernel (Azure) regression 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Linux kernel (Azure) Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade Original Bulletin: https://ubuntu.com/security/notices/USN-6211-1 Comment: CVSS (Max): None available when published – ————————–BEGIN INCLUDED TEXT——————– USN-6211-1: Linux kernel … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3849 USN-6210-1: Doorkeeper vulnerability 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Doorkeeper Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-34246 Original Bulletin: https://ubuntu.com/security/notices/USN-6210-1 Comment: CVSS (Max): 6.5 CVE-2023-34246 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N – ————————–BEGIN INCLUDED TEXT——————– … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3848 Security update for prometheus-sap_host_exporter 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: prometheus-sap_host_exporter Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232798-1 Comment: CVSS (Max): None available when published – ————————–BEGIN INCLUDED TEXT——————– Security update for prometheus-sap_host_exporter Announcement ID: … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3847 Security update for prometheus-ha_cluster_exporter 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: prometheus-ha_cluster_exporter Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232799-1 Comment: CVSS (Max): None available when published – ————————–BEGIN INCLUDED TEXT——————– Security update for prometheus-ha_cluster_exporter Announcement ID: … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3846 Security update for bind 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: bind Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2023-2828 Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232793-1 Comment: CVSS (Max): 7.5 CVE-2023-2828 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSS Source: SUSE Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H – ————————–BEGIN INCLUDED … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3845 Security update for bind 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: bind Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2023-2828 Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232794-1 Comment: CVSS (Max): 7.5 CVE-2023-2828 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSS Source: SUSE Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H – ————————–BEGIN INCLUDED … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3820.2 Cisco Duo Authentication Proxy Information Disclosure Vulnerability 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Cisco Duo Authentication Proxy Publisher: Cisco Systems Operating System: Cisco Resolution: Patch/Upgrade CVE Names: CVE-2023-20207 Original Bulletin: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-duo-auth-info-JgkSWBLz Revision History: July 10 2023: Vendor updated … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3818.3 Cisco ACI Multi-Site CloudSec Encryption Information Disclosure Vulnerability 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Cisco ACI Multi-Site CloudSec Publisher: Cisco Systems Operating System: Cisco Resolution: None CVE Names: CVE-2023-20185 Original Bulletin: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-aci-cloudsec-enc-Vs5Wn2sX Comment: CVSS (Max): 7.4 CVE-2023-20185 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3274.4 Cisco AnyConnect Secure Mobility Client Software for Windows and Cisco Secure Client Software for Windows Privilege Escalation Vulnerability 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: AnyConnect Secure Mobility Client Software Secure Client Software Publisher: Cisco Systems Operating System: Windows … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.2569.2 2023.2 IPU – BIOS Advisory 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: IPU – BIOS Publisher: Intel Operating System: Windows UNIX variants (UNIX, Linux, OSX) Mobile Device Resolution: Patch/Upgrade CVE Names: CVE-2022-38087 CVE-2022-33894 Original Bulletin: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00807.html Revision History: July … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3856 ocsinventory-server update for php-cas 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: ocsinventory-server Publisher: Debian Operating System: Debian GNU/Linux Resolution: Patch/Upgrade CVE Names: CVE-2022-39369 Original Bulletin: https://lists.debian.org/debian-lts-announce/2023/07/msg00008.html Comment: CVSS (Max): 8.0 CVE-2022-39369 (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H – ————————–BEGIN … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3855 php-cas security update 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: php-cas Publisher: Debian Operating System: Debian GNU/Linux Resolution: Patch/Upgrade CVE Names: CVE-2022-39369 Original Bulletin: https://lists.debian.org/debian-lts-announce/2023/07/msg00007.html Comment: CVSS (Max): 8.0 CVE-2022-39369 (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H – ————————–BEGIN INCLUDED … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3854 firefox-esr security update 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: firefox-esr Publisher: Debian Operating System: Debian GNU/Linux Resolution: Patch/Upgrade CVE Names: CVE-2023-37211 CVE-2023-37208 CVE-2023-37207 CVE-2023-37202 CVE-2023-37201 Original Bulletin: https://lists.debian.org/debian-lts-announce/2023/07/msg00006.html Comment: CVSS (Max): 7.5 CVE-2023-37211 (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) CVSS Source: Red Hat … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3853 nsis security update 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: nsis Publisher: Debian Operating System: Debian GNU/Linux Resolution: Patch/Upgrade CVE Names: CVE-2023-37378 Original Bulletin: https://lists.debian.org/debian-lts-announce/2023/07/msg00005.html Comment: CVSS (Max): None available when published – ————————–BEGIN INCLUDED TEXT——————– – ————————————————————————- Debian … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3852 debian-archive-keyring update 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: debian-archive-keyring Publisher: Debian Operating System: Debian GNU/Linux Resolution: Patch/Upgrade Original Bulletin: https://lists.debian.org/debian-lts-announce/2023/07/msg00004.html Comment: CVSS (Max): None available when published – ————————–BEGIN INCLUDED TEXT——————– – ————————————————————————- Debian LTS Advisory DLA-3482-1 [email protected] … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3851 USN-6212-1: Linux kernel (Intel IoTG) vulnerabilities 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Linux kernel (Intel IoTG) Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-35788 Original Bulletin: https://ubuntu.com/security/notices/USN-6212-1 Comment: CVSS (Max): 7.8 CVE-2023-35788 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) CVSS Source: NVD … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT Security Bulletin ASB-2023.0117 Ventia Cyber Incident 11 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— OVERVIEW News has emerged of a cyber security incident impacting a large essential infrastructure service provider based in Australia and New Zealand, Ventia [1]. IMPACT The impact is not yet known however … Read more