CERTs / CSIRTs

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3819 Cisco BroadWorks Privilege Escalation Vulnerability 6 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Cisco BroadWorks Publisher: Cisco Systems Operating System: Cisco Resolution: Patch/Upgrade CVE Names: CVE-2023-20210 Original Bulletin: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bw-privesc-yw4ekrXW Comment: CVSS (Max): 6.0 CVE-2023-20210 (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) CVSS Source: Cisco Systems Calculator: … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3802 MFSA 2023-24 Security Vulnerabilities fixed in Thunderbird 102.13 5 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Thunderbird Publisher: Mozilla Operating System: Windows Linux variants macOS Resolution: Patch/Upgrade CVE Names: CVE-2023-37211 CVE-2023-37208 CVE-2023-37207 CVE-2023-37202 CVE-2023-37201 Original Bulletin: https://www.mozilla.org/en-US/security/advisories/mfsa2023-24/ Comment: CVSS (Max): … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3817 Cisco Webex Meetings Web UI Vulnerabilities 6 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Cisco Webex Meetings Publisher: Cisco Systems Operating System: Cisco Resolution: Patch/Upgrade CVE Names: CVE-2023-20180 CVE-2023-20133 Original Bulletin: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sxsscsrf-2L24bBx6 Comment: CVSS (Max): 5.4 CVE-2023-20133 (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) CVSS Source: … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3801 USN-6200-1: ImageMagick vulnerabilities 5 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: ImageMagick Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-34151 CVE-2023-3428 CVE-2023-3195 CVE-2023-1906 CVE-2023-1289 CVE-2022-32547 CVE-2022-32546 CVE-2022-32545 CVE-2022-28463 CVE-2021-39212 CVE-2021-20313 CVE-2021-20312 CVE-2021-20309 CVE-2021-20246 CVE-2021-20244 CVE-2021-20243 CVE-2021-20241 CVE-2021-20224 CVE-2021-3610 … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3816 Security update for grpc, protobuf, python-Deprecated, python-PyGithub, python-aiocontextvars, python-avro, python-bcrypt, python-cryptography, python-cryptography-vectors, python-google-api-core, pyt 6 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: grpc, protobuf, python-Deprecated, python-PyGithub, python-aiocontextvars, python-avro, python-bcrypt python-cryptography, python-cryptography-vectors, python-google-api-core python-googleapis-common-protos, python-grpcio-gcp, python-humanfriendly python-jsondiff, python-knack, python-opencensus, python-opencensus-context python-opencensus-ext-threading, … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3815 Security update for libdwarf 6 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: libdwarf Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2020-27545 Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232784-1 Comment: CVSS (Max): 5.5 CVE-2020-27545 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) CVSS Source: SUSE Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H – ————————–BEGIN INCLUDED … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3814 Security update for python311 6 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: python311 Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2007-4559 Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232778-1 Comment: CVSS (Max): 5.4 CVE-2007-4559 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) CVSS Source: SUSE Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L – ————————–BEGIN INCLUDED … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3813 Security update for kubernetes1.18 6 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: kubernetes1.18 Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232773-1 Comment: CVSS (Max): None available when published – ————————–BEGIN INCLUDED TEXT——————– Security update for kubernetes1.18 Announcement ID: … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3812 Security update for the Linux Kernel 6 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Linux Kernel Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2023-35828 CVE-2023-35823 CVE-2023-35788 CVE-2023-33288 CVE-2023-32233 CVE-2023-31436 CVE-2023-31084 CVE-2023-30456 CVE-2023-28410 CVE-2023-21102 CVE-2023-3161 CVE-2023-3141 CVE-2023-3006 CVE-2023-2513 CVE-2023-2483 … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3811 Security update for dnsdist 6 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: dnsdist Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2018-14663 CVE-2017-7557 CVE-2016-7069 Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232777-1 Comment: CVSS (Max): 8.8 CVE-2017-7557 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H – … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3810 USN-6203-1: Django vulnerability 6 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Django Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-36053 Original Bulletin: https://ubuntu.com/security/notices/USN-6203-1 Comment: CVSS (Max): 5.9 CVE-2023-36053 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSS Source: SUSE Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H – ————————–BEGIN INCLUDED TEXT——————– … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3809 USN-6204-1: CPDB vulnerability 6 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: CPDB Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-34095 Original Bulletin: https://ubuntu.com/security/notices/USN-6204-1 Comment: CVSS (Max): 9.8 CVE-2023-34095 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H – ————————–BEGIN INCLUDED TEXT——————– … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3808 USN-6202-1: containerd vulnerabilities 6 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: containerd Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-25173 CVE-2023-25153 Original Bulletin: https://ubuntu.com/security/notices/USN-6202-1 Comment: CVSS (Max): 7.8 CVE-2023-25173 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H – ————————–BEGIN INCLUDED … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3807 USN-6201-1: Firefox vulnerabilities 6 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Firefox Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-37212 CVE-2023-37211 CVE-2023-37210 CVE-2023-37209 CVE-2023-37208 CVE-2023-37207 CVE-2023-37206 CVE-2023-37205 CVE-2023-37204 CVE-2023-37203 CVE-2023-37202 CVE-2023-37201 CVE-2023-3482 Original Bulletin: https://ubuntu.com/security/notices/USN-6201-1 Comment: CVSS (Max): … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2022.3953.2 Intel NUC Laptop Kit Advisory 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Intel NUC Laptop Kits Publisher: Intel Operating System: Windows UNIX variants (UNIX, Linux, OSX) Resolution: Patch/Upgrade CVE Names: CVE-2022-34488 CVE-2022-34345 CVE-2022-33209 CVE-2022-32579 CVE-2022-28858 CVE-2022-27493 Original Bulletin: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00712.html … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3844 VMware SD-WAN update addresses a bypass authentication vulnerability (CVE-2023-20899) 7 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: VMware SD-WAN (Edge) Publisher: VMWare Operating System: Virtualisation Resolution: Patch/Upgrade CVE Names: CVE-2023-20899 Original Bulletin: https://www.vmware.com/security/advisories/VMSA-2023-0015.html Comment: CVSS (Max): 5.3 CVE-2023-20899 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) CVSS … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3843 [R1] Nessus Agent Version 10.4.1 Fixes Multiple Vulnerabilities 7 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Nessus Agent Publisher: Tenable Operating System: Windows Linux variants macOS Resolution: Patch/Upgrade CVE Names: CVE-2023-2650 CVE-2023-1255 CVE-2023-0466 CVE-2023-0465 Original Bulletin: https://www.tenable.com/security/tns-2023-24 Comment: CVSS (Max): … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3842 Multiple Vulnerabilities in IBM Java SDK affect Liberty for Java for IBM Cloud due to April 2023 CPU 7 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Liberty for Java for IBM Cloud Publisher: IBM Operating System: Linux variants Resolution: Patch/Upgrade … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3841 ICS Advisory | ICSA-23-187-02 ABUS TVIP 7 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: ABUS TVIP Publisher: ICS-CERT Operating System: Network Appliance Resolution: Patch/Upgrade CVE Names: CVE-2023-26609 Original Bulletin: https://www.cisa.gov/news-events/ics-advisories/icsa-23-187-02 Comment: CVSS (Max): 7.2 CVE-2023-26609 (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) CVSS Source: ICS-CERT Calculator: … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3840 ICS Advisory | ICSA-23-187-01 PiiGAB M-Bus 7 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: PiiGAB M-Bus Publisher: ICS-CERT Operating System: Network Appliance Resolution: Patch/Upgrade CVE Names: CVE-2023-36859 CVE-2023-35987 CVE-2023-35765 CVE-2023-35120 CVE-2023-34995 CVE-2023-34433 CVE-2023-33868 CVE-2023-32652 CVE-2023-31277 Original Bulletin: https://www.cisa.gov/news-events/ics-advisories/icsa-23-187-01 Comment: CVSS … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3839 IBM QRadar SIEM includes components with known vulnerabilities 7 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: IBM Security QRadar SIEM Publisher: IBM Operating System: Linux variants Resolution: Patch/Upgrade CVE Names: CVE-2023-28708 CVE-2023-25194 CVE-2023-24998 CVE-2023-24329 CVE-2023-20863 CVE-2023-20861 CVE-2023-20860 CVE-2023-20859 CVE-2023-1999 CVE-2023-1436 … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3837 USN-6207-1: Linux kernel (Intel IoTG) vulnerabilities 7 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Linux kernel (Intel IoTG) Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-25012 CVE-2023-2985 CVE-2023-1998 CVE-2023-1859 CVE-2023-1670 CVE-2023-1079 CVE-2023-1077 CVE-2023-1076 Original Bulletin: https://ubuntu.com/security/notices/USN-6207-1 Comment: CVSS … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3836 USN-6206-1: Linux kernel (OEM) vulnerabilities 7 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Linux kernel (OEM) Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-35788 CVE-2023-2124 CVE-2023-0597 CVE-2022-4842 Original Bulletin: https://ubuntu.com/security/notices/USN-6206-1 Comment: CVSS (Max): 7.8 CVE-2023-35788 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) CVSS Source: … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3835 USN-6205-1: Linux kernel (GKE) vulnerabilities 7 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Linux kernel (GKE) Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-35788 Original Bulletin: https://ubuntu.com/security/notices/USN-6205-1 Comment: CVSS (Max): 7.8 CVE-2023-35788 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3834 USN-6208-1: Gorilla WebSocket vulnerability 7 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Gorilla WebSocket Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2020-27813 Original Bulletin: https://ubuntu.com/security/notices/USN-6208-1 Comment: CVSS (Max): 7.5 CVE-2020-27813 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H – ————————–BEGIN … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3833 Security update for bind 7 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: bind Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2023-2828 Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232789-1 Comment: CVSS (Max): 7.5 CVE-2023-2828 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSS Source: SUSE Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H – ————————–BEGIN INCLUDED … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3832 Security update for python-sqlparse 7 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: python-sqlparse Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2023-30608 Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232787-1 Comment: CVSS (Max): 5.5 CVE-2023-30608 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) CVSS Source: SUSE Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H – ————————–BEGIN INCLUDED … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3831 libusrsctp security update 7 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: libusrsctp Publisher: Debian Operating System: Debian GNU/Linux Resolution: Patch/Upgrade CVE Names: CVE-2019-20503 Original Bulletin: https://lists.debian.org/debian-lts-announce/2023/07/msg00003.html Comment: CVSS (Max): 6.5 CVE-2019-20503 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H – ————————–BEGIN INCLUDED … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3830 ruby-redcloth security update 7 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: ruby-redcloth Publisher: Debian Operating System: Debian GNU/Linux Resolution: Patch/Upgrade CVE Names: CVE-2023-31606 Original Bulletin: https://lists.debian.org/debian-lts-announce/2023/07/msg00002.html Comment: CVSS (Max): 7.5 CVE-2023-31606 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H – ————————–BEGIN INCLUDED … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3827 Red Hat OpenShift Enterprise security update 7 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Red Hat OpenShift Enterprise Publisher: Red Hat Operating System: Red Hat Resolution: Patch/Upgrade CVE Names: CVE-2023-24540 CVE-2023-3089 CVE-2022-41717 CVE-2022-30629 CVE-2022-28327 CVE-2022-24675 CVE-2022-23772 Original Bulletin: https://access.redhat.com/errata/RHSA-2023:3914 Comment: … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3850 USN-6211-1: Linux kernel (Azure) regression 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Linux kernel (Azure) Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade Original Bulletin: https://ubuntu.com/security/notices/USN-6211-1 Comment: CVSS (Max): None available when published – ————————–BEGIN INCLUDED TEXT——————– USN-6211-1: Linux kernel … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3849 USN-6210-1: Doorkeeper vulnerability 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Doorkeeper Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-34246 Original Bulletin: https://ubuntu.com/security/notices/USN-6210-1 Comment: CVSS (Max): 6.5 CVE-2023-34246 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N – ————————–BEGIN INCLUDED TEXT——————– … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3848 Security update for prometheus-sap_host_exporter 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: prometheus-sap_host_exporter Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232798-1 Comment: CVSS (Max): None available when published – ————————–BEGIN INCLUDED TEXT——————– Security update for prometheus-sap_host_exporter Announcement ID: … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3847 Security update for prometheus-ha_cluster_exporter 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: prometheus-ha_cluster_exporter Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232799-1 Comment: CVSS (Max): None available when published – ————————–BEGIN INCLUDED TEXT——————– Security update for prometheus-ha_cluster_exporter Announcement ID: … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3846 Security update for bind 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: bind Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2023-2828 Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232793-1 Comment: CVSS (Max): 7.5 CVE-2023-2828 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSS Source: SUSE Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H – ————————–BEGIN INCLUDED … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3845 Security update for bind 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: bind Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2023-2828 Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232794-1 Comment: CVSS (Max): 7.5 CVE-2023-2828 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSS Source: SUSE Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H – ————————–BEGIN INCLUDED … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3820.2 Cisco Duo Authentication Proxy Information Disclosure Vulnerability 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Cisco Duo Authentication Proxy Publisher: Cisco Systems Operating System: Cisco Resolution: Patch/Upgrade CVE Names: CVE-2023-20207 Original Bulletin: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-duo-auth-info-JgkSWBLz Revision History: July 10 2023: Vendor updated … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3818.3 Cisco ACI Multi-Site CloudSec Encryption Information Disclosure Vulnerability 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Cisco ACI Multi-Site CloudSec Publisher: Cisco Systems Operating System: Cisco Resolution: None CVE Names: CVE-2023-20185 Original Bulletin: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-aci-cloudsec-enc-Vs5Wn2sX Comment: CVSS (Max): 7.4 CVE-2023-20185 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3274.4 Cisco AnyConnect Secure Mobility Client Software for Windows and Cisco Secure Client Software for Windows Privilege Escalation Vulnerability 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: AnyConnect Secure Mobility Client Software Secure Client Software Publisher: Cisco Systems Operating System: Windows … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.2569.2 2023.2 IPU – BIOS Advisory 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: IPU – BIOS Publisher: Intel Operating System: Windows UNIX variants (UNIX, Linux, OSX) Mobile Device Resolution: Patch/Upgrade CVE Names: CVE-2022-38087 CVE-2022-33894 Original Bulletin: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00807.html Revision History: July … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3856 ocsinventory-server update for php-cas 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: ocsinventory-server Publisher: Debian Operating System: Debian GNU/Linux Resolution: Patch/Upgrade CVE Names: CVE-2022-39369 Original Bulletin: https://lists.debian.org/debian-lts-announce/2023/07/msg00008.html Comment: CVSS (Max): 8.0 CVE-2022-39369 (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H – ————————–BEGIN … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3855 php-cas security update 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: php-cas Publisher: Debian Operating System: Debian GNU/Linux Resolution: Patch/Upgrade CVE Names: CVE-2022-39369 Original Bulletin: https://lists.debian.org/debian-lts-announce/2023/07/msg00007.html Comment: CVSS (Max): 8.0 CVE-2022-39369 (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H – ————————–BEGIN INCLUDED … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3854 firefox-esr security update 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: firefox-esr Publisher: Debian Operating System: Debian GNU/Linux Resolution: Patch/Upgrade CVE Names: CVE-2023-37211 CVE-2023-37208 CVE-2023-37207 CVE-2023-37202 CVE-2023-37201 Original Bulletin: https://lists.debian.org/debian-lts-announce/2023/07/msg00006.html Comment: CVSS (Max): 7.5 CVE-2023-37211 (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) CVSS Source: Red Hat … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3853 nsis security update 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: nsis Publisher: Debian Operating System: Debian GNU/Linux Resolution: Patch/Upgrade CVE Names: CVE-2023-37378 Original Bulletin: https://lists.debian.org/debian-lts-announce/2023/07/msg00005.html Comment: CVSS (Max): None available when published – ————————–BEGIN INCLUDED TEXT——————– – ————————————————————————- Debian … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3852 debian-archive-keyring update 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: debian-archive-keyring Publisher: Debian Operating System: Debian GNU/Linux Resolution: Patch/Upgrade Original Bulletin: https://lists.debian.org/debian-lts-announce/2023/07/msg00004.html Comment: CVSS (Max): None available when published – ————————–BEGIN INCLUDED TEXT——————– – ————————————————————————- Debian LTS Advisory DLA-3482-1 [email protected] … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3851 USN-6212-1: Linux kernel (Intel IoTG) vulnerabilities 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Linux kernel (Intel IoTG) Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-35788 Original Bulletin: https://ubuntu.com/security/notices/USN-6212-1 Comment: CVSS (Max): 7.8 CVE-2023-35788 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) CVSS Source: NVD … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT Security Bulletin ASB-2023.0117 Ventia Cyber Incident 11 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— OVERVIEW News has emerged of a cyber security incident impacting a large essential infrastructure service provider based in Australia and New Zealand, Ventia [1]. IMPACT The impact is not yet known however … Read more

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT Security Bulletin ASB-2023.0117 Ventia Cyber Incident 11 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— OVERVIEW News has emerged of a cyber security incident impacting a large essential infrastructure service provider based in Australia and New Zealand, Ventia [1]. IMPACT The impact is not yet known however … Read more