CERTs / CSIRTs

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3907 APSB23-40 : Security update available for Adobe ColdFusion 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Adobe ColdFusion Publisher: Adobe Operating System: Windows UNIX variants (UNIX, Linux, OSX) Resolution: Patch/Upgrade CVE Names: CVE-2023-29301 CVE-2023-29300 CVE-2023-29298 Original Bulletin: https://helpx.adobe.com/security/products/coldfusion/apsb23-40.html Comment: CVSS … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3906 MFSA 2023-26 Security Vulnerabilities fixed in Firefox 115.0.2 and Firefox ESR 115.0.2 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Firefox 115.0.2 Firefox ESR 115.0.2 Publisher: Mozilla Operating System: UNIX variants (UNIX, Linux, OSX) Windows Resolution: Patch/Upgrade CVE Names: CVE-2023-3600 … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3905 symfony security update 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: symfony Publisher: Debian Operating System: Debian GNU/Linux Resolution: Patch/Upgrade CVE Names: CVE-2022-24895 CVE-2022-24894 CVE-2021-21424 Original Bulletin: https://lists.debian.org/debian-lts-announce/2023/07/msg00014.html Comment: CVSS (Max): 8.8 CVE-2022-24895 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H – … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3904 yajl security update 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: yajl Publisher: Debian Operating System: Debian GNU/Linux Resolution: Patch/Upgrade CVE Names: CVE-20117-16516 CVE-2023-33460 CVE-2022-24795 CVE-2017-16516 Original Bulletin: https://lists.debian.org/debian-lts-announce/2023/07/msg00013.html Comment: CVSS (Max): 7.5* CVE-2022-24795 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3903 erlang security update 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: erlang Publisher: Debian Operating System: Debian GNU/Linux Resolution: Patch/Upgrade CVE Names: CVE-2022-37026 Original Bulletin: https://lists.debian.org/debian-lts-announce/2023/07/msg00012.html Comment: CVSS (Max): 9.8 CVE-2022-37026 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H – ————————–BEGIN INCLUDED … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT Security Bulletin ASB-2023.0125 Microsoft Patch Tuesday update for Microsoft System Center for July 2023 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Microsoft Malware Protection Engine Operating System: Windows Resolution: Patch/Upgrade CVE Names: CVE-2023-33156 Comment: CVSS (Max): 6.3 CVE-2023-33156 (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H) CVSS Source: Microsoft Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT Security Bulletin ASB-2023.0124 Microsoft Patch Tuesday update for Microsoft Dynamics for July 2023 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Microsoft Dynamics Operating System: Windows Resolution: Patch/Upgrade CVE Names: CVE-2023-35335 CVE-2023-33171 CVE-2023-32052 Comment: CVSS (Max): 8.2 CVE-2023-33171 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N) CVSS Source: Microsoft Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N OVERVIEW … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT Security Bulletin ASB-2023.0123 Microsoft Patch Tuesday update for Azure for July 2023 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Azure Service Fabric Operating System: Windows Resolution: Patch/Upgrade CVE Names: CVE-2023-36868 Comment: CVSS (Max): 6.5 CVE-2023-36868 (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) CVSS Source: Microsoft Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N OVERVIEW Microsoft has … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT Security Bulletin ASB-2023.0122 Microsoft Patch Tuesday update for Microsoft Apps for JUly 2023 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Paint 3D Operating System: Windows Resolution: Patch/Upgrade CVE Names: CVE-2023-35374 CVE-2023-32047 Comment: CVSS (Max): 7.8 CVE-2023-32047 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) CVSS Source: Microsoft Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H OVERVIEW Microsoft … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT Security Bulletin ASB-2023.0121.2 Microsoft Patch Tuesday update for Developer Tools for July 2023 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: .NET 6.0 & 7.0 Microsoft Visual Studio Visual Studio Code Mono PandocUpload Operating System: Windows Resolution: Patch/Upgrade CVE Names: CVE-2023-36867 CVE-2023-35373 CVE-2023-35333 CVE-2023-33170 CVE-2023-33127 … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3911 MISP 2.4.173 released with various bugfixes and improvements 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: MISP 2.4.173 Publisher: MISP Operating System: Windows UNIX variants (UNIX, Linux, OSX) Resolution: Patch/Upgrade CVE Names: CVE-2023-37307 CVE-2023-37306 Original Bulletin: https://www.misp-project.org/2023/07/11/MISP.2.4.173.released.html/ Comment: CVSS (Max): … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3910 Citrix Secure Access client for Ubuntu Security Bulletin for CVE-2023-24492 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Citrix ADC Citrix Gateway Publisher: Citrix Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-24492 Original Bulletin: https://support.citrix.com/article/CTX564169/citrix-secure-access-client-for-ubuntu-security-bulletin-for-cve202324492 Comment: CVSS (Max): 9.6 CVE-2023-24492 … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3909 Citrix Secure Access client for Windows Security Bulletin for CVE-2023-24491 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Citrix ADC Citrix Gateway Publisher: Citrix Operating System: Windows Resolution: Patch/Upgrade CVE Names: CVE-2023-24491 Original Bulletin: https://support.citrix.com/article/CTX561480/citrix-secure-access-client-for-windows-security-bulletin-for-cve202324491 Comment: CVSS (Max): 7.8 CVE-2023-24491 … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3908 APSB23-38 : Security update available for Adobe InDesign 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Adobe InDesign Publisher: Adobe Operating System: Windows macOS Resolution: Patch/Upgrade CVE Names: CVE-2023-29319 CVE-2023-29318 CVE-2023-29317 CVE-2023-29316 CVE-2023-29315 CVE-2023-29314 CVE-2023-29313 CVE-2023-29312 CVE-2023-29311 CVE-2023-29310 CVE-2023-29309 CVE-2023-29308 … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3911 MISP 2.4.173 released with various bugfixes and improvements 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: MISP 2.4.173 Publisher: MISP Operating System: Windows UNIX variants (UNIX, Linux, OSX) Resolution: Patch/Upgrade CVE Names: CVE-2023-37307 CVE-2023-37306 Original Bulletin: https://www.misp-project.org/2023/07/11/MISP.2.4.173.released.html/ Comment: CVSS (Max): … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3911 MISP 2.4.173 released with various bugfixes and improvements 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: MISP 2.4.173 Publisher: MISP Operating System: Windows UNIX variants (UNIX, Linux, OSX) Resolution: Patch/Upgrade CVE Names: CVE-2023-37307 CVE-2023-37306 Original Bulletin: https://www.misp-project.org/2023/07/11/MISP.2.4.173.released.html/ Comment: CVSS (Max): … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3911 MISP 2.4.173 released with various bugfixes and improvements 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: MISP 2.4.173 Publisher: MISP Operating System: Windows UNIX variants (UNIX, Linux, OSX) Resolution: Patch/Upgrade CVE Names: CVE-2023-37307 CVE-2023-37306 Original Bulletin: https://www.misp-project.org/2023/07/11/MISP.2.4.173.released.html/ Comment: CVSS (Max): … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3911 MISP 2.4.173 released with various bugfixes and improvements 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: MISP 2.4.173 Publisher: MISP Operating System: Windows UNIX variants (UNIX, Linux, OSX) Resolution: Patch/Upgrade CVE Names: CVE-2023-37307 CVE-2023-37306 Original Bulletin: https://www.misp-project.org/2023/07/11/MISP.2.4.173.released.html/ Comment: CVSS (Max): … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3906 MFSA 2023-26 Security Vulnerabilities fixed in Firefox 115.0.2 and Firefox ESR 115.0.2 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Firefox 115.0.2 Firefox ESR 115.0.2 Publisher: Mozilla Operating System: UNIX variants (UNIX, Linux, OSX) Windows Resolution: Patch/Upgrade CVE Names: CVE-2023-3600 … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT Security Bulletin ASB-2023.0125 Microsoft Patch Tuesday update for Microsoft System Center for July 2023 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Microsoft Malware Protection Engine Operating System: Windows Resolution: Patch/Upgrade CVE Names: CVE-2023-33156 Comment: CVSS (Max): 6.3 CVE-2023-33156 (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H) CVSS Source: Microsoft Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3880 Rapid Security Responses for macOS Ventura 13.4.1 11 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: macOS Ventura 13.4.1 Publisher: Apple Operating System: macOS Resolution: Patch/Upgrade CVE Names: CVE-2023-37450 Original Bulletin: https://support.apple.com/kb/HT213825 Comment: CVSS (Max): None available when published – ————————–BEGIN … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3880 Rapid Security Responses for macOS Ventura 13.4.1 11 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: macOS Ventura 13.4.1 Publisher: Apple Operating System: macOS Resolution: Patch/Upgrade CVE Names: CVE-2023-37450 Original Bulletin: https://support.apple.com/kb/HT213825 Comment: CVSS (Max): None available when published – ————————–BEGIN … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3880 Rapid Security Responses for macOS Ventura 13.4.1 11 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: macOS Ventura 13.4.1 Publisher: Apple Operating System: macOS Resolution: Patch/Upgrade CVE Names: CVE-2023-37450 Original Bulletin: https://support.apple.com/kb/HT213825 Comment: CVSS (Max): None available when published – ————————–BEGIN … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3880 Rapid Security Responses for macOS Ventura 13.4.1 11 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: macOS Ventura 13.4.1 Publisher: Apple Operating System: macOS Resolution: Patch/Upgrade CVE Names: CVE-2023-37450 Original Bulletin: https://support.apple.com/kb/HT213825 Comment: CVSS (Max): None available when published – ————————–BEGIN … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3880 Rapid Security Responses for macOS Ventura 13.4.1 11 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: macOS Ventura 13.4.1 Publisher: Apple Operating System: macOS Resolution: Patch/Upgrade CVE Names: CVE-2023-37450 Original Bulletin: https://support.apple.com/kb/HT213825 Comment: CVSS (Max): None available when published – ————————–BEGIN … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3880 Rapid Security Responses for macOS Ventura 13.4.1 11 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: macOS Ventura 13.4.1 Publisher: Apple Operating System: macOS Resolution: Patch/Upgrade CVE Names: CVE-2023-37450 Original Bulletin: https://support.apple.com/kb/HT213825 Comment: CVSS (Max): None available when published – ————————–BEGIN … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3789 ghostscript security update 4 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: ghostscript Publisher: Debian Operating System: Debian GNU/Linux Resolution: Patch/Upgrade CVE Names: CVE-2023-36664 Original Bulletin: https://lists.debian.org/debian-security-announce/2023/msg00138.html Comment: CVSS (Max): 8.4 CVE-2023-36664 (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) CVSS Source: Red Hat Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H – ————————–BEGIN … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3788 USN-6198-1: GNU Screen vulnerability 4 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: GNU Screen Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-24626 Original Bulletin: https://ubuntu.com/security/notices/USN-6198-1 Comment: CVSS (Max): 6.5 CVE-2023-24626 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H – ————————–BEGIN … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3787 USN-6196-1: ReportLab vulnerability 4 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: ReportLab Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-33733 Original Bulletin: https://ubuntu.com/security/notices/USN-6196-1 Comment: CVSS (Max): 7.8 CVE-2023-33733 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H – ————————–BEGIN INCLUDED TEXT——————– … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3786 USN-6197-1: OpenLDAP vulnerability 4 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: OpenLDAP Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-2953 Original Bulletin: https://ubuntu.com/security/notices/USN-6197-1 Comment: CVSS (Max): 7.5 CVE-2023-2953 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H – ————————–BEGIN INCLUDED TEXT——————– … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3785 USN-6199-1: PHP vulnerability 4 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: PHP Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-3247 Original Bulletin: https://ubuntu.com/security/notices/USN-6199-1 Comment: CVSS (Max): 5.3 CVE-2023-3247 (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N) CVSS Source: SUSE Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N – ————————–BEGIN INCLUDED TEXT——————– … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3800 Security update for amazon-ecs-init 5 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: amazon-ecs-init Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232762-1 Comment: CVSS (Max): None available when published – ————————–BEGIN INCLUDED TEXT——————– Security update for amazon-ecs-init Announcement ID: … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3799 Security update for libcap 5 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: libcap Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2023-2603 CVE-2023-2602 Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232765-1 Comment: CVSS (Max): 4.4 CVE-2023-2603 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) CVSS Source: SUSE Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L – ————————–BEGIN … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3798 Security update for qt6-base 5 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: qt6-base Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2023-32763 Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232780-1 Comment: CVSS (Max): 7.8 CVE-2023-32763 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) CVSS Source: SUSE Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H – ————————–BEGIN INCLUDED … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3797 Security update for dnsdist 5 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: dnsdist Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2018-14663 CVE-2017-7557 CVE-2016-7069 Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232760-1 Comment: CVSS (Max): None available when published – ————————–BEGIN INCLUDED TEXT——————– Security … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3796 Security update for rmt-server 5 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: rmt-server Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2023-28120 CVE-2023-27530 CVE-2022-31254 Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232781-1 Comment: CVSS (Max): 7.8 CVE-2022-31254 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) CVSS Source: SUSE Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H – … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3795 Security update for python-tornado 5 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: python-tornado Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2023-28370 Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232770-1 Comment: CVSS (Max): 3.4 CVE-2023-28370 (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N) CVSS Source: SUSE Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N – ————————–BEGIN INCLUDED … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3794 Security update for libcap 5 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: libcap Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2023-2603 Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232764-1 Comment: CVSS (Max): 4.4 CVE-2023-2603 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) CVSS Source: SUSE Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L – ————————–BEGIN INCLUDED … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3793 Security update for terraform 5 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: terraform Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232763-1 Comment: CVSS (Max): None available when published – ————————–BEGIN INCLUDED TEXT——————– Security update for terraform Announcement ID: … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3792 Security update for xmltooling 5 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: xmltooling Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2023-36661 Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232766-1 Comment: CVSS (Max): 5.4 CVE-2023-36661 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L) CVSS Source: SUSE Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L – ————————–BEGIN INCLUDED … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3791 Multiple vulnerabilities in IBM Java SDK affects IBM WebSphere Application Server April 2023 CPU that is bundled with IBM WebSphere Application Server Patterns 4 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: WebSphere Application Server Patterns Publisher: IBM Operating System: Linux … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3790 IBM Integration Bus is vulnerable to a remote attack due to Apache Jena (CVE-2021-39239, CVE-2022-28890, CVE-2023-22665). 4 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: IBM Integration Bus Publisher: IBM Operating System: Linux variants Windows z/OS Resolution: Patch/Upgrade CVE Names: CVE-2023-22665 … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3823 linux security update 6 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: linux Publisher: Debian Operating System: Debian GNU/Linux Resolution: Patch/Upgrade CVE Names: CVE-2023-35788 CVE-2023-32254 CVE-2023-32250 CVE-2023-31084 CVE-2023-3390 CVE-2023-3269 CVE-2023-3268 CVE-2023-3212 CVE-2023-3090 CVE-2023-2269 CVE-2023-2156 CVE-2023-2124 Original Bulletin: http://www.debian.org/security/2023/dsa-5448 Comment: CVSS (Max): … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3805 A security vulnerability has been identified in IBM WebSphere Application Server shipped with Asset and Service Management (CVE-2023-35890) 5 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: IBM WebSphere Application Server Publisher: IBM Operating System: Network Appliance Resolution: Patch/Upgrade CVE Names: … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3822 golang-yaml.v2 security update 6 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: golang-yaml.v2 Publisher: Debian Operating System: Debian GNU/Linux Resolution: Patch/Upgrade CVE Names: CVE-2022-3064 CVE-2021-4235 Original Bulletin: https://lists.debian.org/debian-lts-announce/2023/07/msg00001.html Comment: CVSS (Max): 7.5 CVE-2022-3064 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H – ————————–BEGIN … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3804 MFSA 2023-22 Security Vulnerabilities fixed in Firefox 115 5 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Firefox Publisher: Mozilla Operating System: Windows Linux variants macOS Resolution: Patch/Upgrade CVE Names: CVE-2023-37212 CVE-2023-37211 CVE-2023-37210 CVE-2023-37209 CVE-2023-37208 CVE-2023-37207 CVE-2023-37206 CVE-2023-37205 CVE-2023-37204 CVE-2023-37203 CVE-2023-37202 … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3821 mediawiki security update 6 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: mediawiki Publisher: Debian Operating System: Debian GNU/Linux Resolution: Patch/Upgrade CVE Names: CVE-2023-36675 CVE-2023-36674 CVE-2023-29141 Original Bulletin: https://lists.debian.org/debian-security-announce/2023/msg00139.html Comment: CVSS (Max): 9.8* CVE-2023-29141 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3803 MFSA 2023-23 Security Vulnerabilities fixed in Firefox ESR 102.13 5 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Firefox ESR Publisher: Mozilla Operating System: Windows Linux variants macOS Resolution: Patch/Upgrade CVE Names: CVE-2023-37211 CVE-2023-37208 CVE-2023-37207 CVE-2023-37202 CVE-2023-37201 Original Bulletin: https://www.mozilla.org/en-US/security/advisories/mfsa2023-23/ Comment: … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3819 Cisco BroadWorks Privilege Escalation Vulnerability 6 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Cisco BroadWorks Publisher: Cisco Systems Operating System: Cisco Resolution: Patch/Upgrade CVE Names: CVE-2023-20210 Original Bulletin: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bw-privesc-yw4ekrXW Comment: CVSS (Max): 6.0 CVE-2023-20210 (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) CVSS Source: Cisco Systems Calculator: … Read more