ASB-2023.0158 – [Juniper] Juniper Products [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT Security Bulletin ASB-2023.0158 Reporting of Juniper Security Advisories 24 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Juniper Products Operating System: Juniper Resolution: Patch/Upgrade OVERVIEW AusCERT wishes to advise that due to technical issues, we have been unable to publish recent security notifications for Juniper products. … Read more

ESB-2023.4144 – [Win][UNIX/Linux] Thunderbird: CVSS (Max): 8.8* [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.4144 MFSA 2023-27 Security Vulnerabilities fixed in Thunderbird 115.0.1 24 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Thunderbird Publisher: Mozilla Foundation Operating System: Windows UNIX variants (UNIX, Linux, OSX) Resolution: Patch/Upgrade CVE Names: CVE-2023-3600 CVE-2023-3417 Original Bulletin: https://www.mozilla.org/en-US/security/advisories/mfsa2023-27/ Comment: CVSS (Max): … Read more

ESB-2023.4136 – [Appliance] Schneider Electric EcoStruxure Products, Modicon PLCs, and Programmable Automation Controllers: CVSS (Max): 7.5 [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.4136 ICS Advisory | ICSA-23-201-01 Schneider Electric EcoStruxure Products, Modicon PLCs, and Programmable Automation Controllers 21 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Schneider Electric EcoStruxure Products, Modicon PLCs, and Programmable Automation Controllers Publisher: ICS-CERT Operating System: Network Appliance Resolution: Patch/Upgrade … Read more

ESB-2023.4068 – [Appliance] WellinTech KingHistorian: CVSS (Max): 8.1 [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.4068 ICS Advisory | ICSA-23-199-07 WellinTech KingHistorian 19 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: WellinTech KingHistorian Publisher: ICS-CERT Operating System: Network Appliance Resolution: Patch/Upgrade CVE Names: CVE-2022-45124 CVE-2022-43663 Original Bulletin: https://www.cisa.gov/news-events/ics-advisories/icsa-23-199-07 Comment: CVSS (Max): 8.1 CVE-2022-43663 (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) CVSS Source: ICS-CERT … Read more

ASB-2023.0142 – [Win][UNIX/Linux] Oracle Health Sciences Applications: CVSS (Max): 6.5 [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT Security Bulletin ASB-2023.0142 Oracle Health Sciences Applications Critical Patch Update 19 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Oracle Health Sciences Sciences Data Management Workbench Operating System: UNIX variants (UNIX, Linux, OSX) Windows Resolution: Patch/Upgrade CVE Names: CVE-2023-22022 Comment: CVSS (Max): 6.5 CVE-2023-22022 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) CVSS … Read more

ESB-2023.4041 – [RedHat] python3.9: CVSS (Max): 7.5 [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.4041 python3.9 security update 19 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: python3.9 Publisher: Red Hat Operating System: Red Hat Resolution: Patch/Upgrade CVE Names: CVE-2023-24329 Original Bulletin: https://access.redhat.com/errata/RHSA-2023:4203 Comment: CVSS (Max): 7.5 CVE-2023-24329 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) CVSS Source: Red Hat Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N – … Read more

ESB-2023.3913 – [SUSE] Linux Kernel: CVSS (Max): 7.8 [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3913 Security update for the Linux Kernel 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Linux Kernel Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2023-35824 CVE-2023-3358 CVE-2023-3268 CVE-2023-3161 CVE-2023-3159 CVE-2023-3141 CVE-2023-3111 CVE-2023-3090 CVE-2023-2002 CVE-2023-1637 CVE-2023-1249 CVE-2023-1079 CVE-2023-1077 Original Bulletin: … Read more

ESB-2023.3912 – [SUSE] Linux Kernel: CVSS (Max): 7.8 [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3912 Security update for the Linux Kernel 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Linux Kernel Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2023-35829 CVE-2023-35828 CVE-2023-35823 CVE-2023-35788 CVE-2023-33952 CVE-2023-33951 CVE-2023-33288 CVE-2023-32233 CVE-2023-31436 CVE-2023-31084 CVE-2023-30772 CVE-2023-30456 CVE-2023-28866 CVE-2023-28466 CVE-2023-28464 … Read more

ESB-2023.0654.2 – UPDATE [Appliance] F5 BIG-IP and BIG-IQ Products: CVSS (Max): 4.9 [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.0654.2 K83284425: iControl REST and tmsh vulnerability CVE-2023-22326 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: F5 BIG-IP (all modules) F5 BIG-IQ Centralized Management Publisher: F5 Networks Operating System: Network Appliance Resolution: Patch/Upgrade CVE Names: CVE-2023-22326 Original Bulletin: https://my.f5.com/manage/s/article/K83284425 Revision History: … Read more

ESB-2023.3927 – [RedHat] nodejs:16: CVSS (Max): 7.5 [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3927 nodejs:16 security update 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: nodejs:16 Publisher: Red Hat Operating System: Red Hat Resolution: Patch/Upgrade CVE Names: CVE-2023-32067 CVE-2023-31147 CVE-2023-31130 CVE-2023-31124 Original Bulletin: https://access.redhat.com/errata/RHSA-2023:4033 Comment: CVSS (Max): 7.5 CVE-2023-32067 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSS Source: Red Hat … Read more

ESB-2023.3926 – [RedHat] python38:3.8 and python38-devel:3.8: CVSS (Max): 7.5 [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3926 python38:3.8 and python38-devel:3.8 security update 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: python38:3.8 and python38-devel:3.8 Publisher: Red Hat Operating System: Red Hat Resolution: Patch/Upgrade CVE Names: CVE-2023-24329 Original Bulletin: https://access.redhat.com/errata/RHSA-2023:4032 Comment: CVSS (Max): 7.5 CVE-2023-24329 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) CVSS Source: Red … Read more

ESB-2023.3925 – [RedHat] grafana: CVSS (Max): 9.4 [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3925 grafana security update 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: grafana Publisher: Red Hat Operating System: Red Hat Resolution: Patch/Upgrade CVE Names: CVE-2023-3128 Original Bulletin: https://access.redhat.com/errata/RHSA-2023:4030 Comment: CVSS (Max): 9.4 CVE-2023-3128 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L) CVSS Source: Red Hat Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L – … Read more

ESB-2023.3922 – [Ubuntu] Linux kernel: CVSS (Max): 7.8 [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3922 USN-6224-1: Linux kernel vulnerabilities 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Linux kernel Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-2176 CVE-2023-2124 Original Bulletin: https://ubuntu.com/security/notices/USN-6224-1 Comment: CVSS (Max): 7.8 CVE-2023-2176 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H – … Read more

ESB-2023.3921 – [Ubuntu] Linux kernel: CVSS (Max): 7.8 [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3921 USN-6223-1: Linux kernel (Azure CVM) vulnerabilities 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Linux kernel Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-35788 CVE-2023-25012 CVE-2023-2985 CVE-2023-1998 CVE-2023-1859 CVE-2023-1670 CVE-2023-1079 CVE-2023-1077 CVE-2023-1076 Original Bulletin: https://ubuntu.com/security/notices/USN-6223-1 Comment: CVSS (Max): … Read more

ESB-2023.3920 – [Ubuntu] Linux kernel: CVSS (Max): 7.8 [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3920 USN-6222-1: Linux kernel (Xilinx ZynqMP) vulnerabilities 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Linux kernel Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-32269 CVE-2023-32233 CVE-2023-31436 CVE-2023-30456 CVE-2023-26545 CVE-2023-25012 CVE-2023-3161 CVE-2023-2985 CVE-2023-2612 CVE-2023-2162 CVE-2023-1998 CVE-2023-1859 CVE-2023-1829 CVE-2023-1670 CVE-2023-1513 … Read more

ESB-2023.3919 – [Ubuntu] Linux kernel: CVSS (Max): 7.8 [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3919 USN-6221-1: Linux kernel vulnerabilities 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Linux kernel Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-3111 CVE-2023-1990 CVE-2022-29901 CVE-2022-26373 CVE-2022-1184 CVE-2021-20321 CVE-2021-3753 Original Bulletin: https://ubuntu.com/security/notices/USN-6221-1 Comment: CVSS (Max): 7.8 CVE-2023-3111 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) CVSS … Read more

ESB-2023.3918 – [Ubuntu] Linux kernel: CVSS (Max): 7.8 [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3918 USN-6220-1: Linux kernel vulnerabilities 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Linux kernel Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-35788 Original Bulletin: https://ubuntu.com/security/notices/USN-6220-1 Comment: CVSS (Max): 7.8 CVE-2023-35788 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H – ————————–BEGIN … Read more

ESB-2023.3917 – [Ubuntu] Ruby: CVSS (Max): 5.3 [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3917 USN-6219-1: Ruby vulnerabilities 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Ruby Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-36617 CVE-2023-28755 Original Bulletin: https://ubuntu.com/security/notices/USN-6219-1 Comment: CVSS (Max): 5.3 CVE-2023-36617 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L – ————————–BEGIN INCLUDED … Read more

ESB-2023.3916 – [Ubuntu] Firefox: CVSS (Max): None [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3916 USN-6218-1: Firefox vulnerability 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Firefox Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-3600 Original Bulletin: https://ubuntu.com/security/notices/USN-6218-1 Comment: CVSS (Max): None available when published – ————————–BEGIN INCLUDED TEXT——————– USN-6218-1: Firefox vulnerability 12 … Read more

ESB-2023.3915 – [Ubuntu] lib3mf: CVSS (Max): 8.1 [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3915 USN-6216-1: lib3mf vulnerability 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: lib3mf Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2021-21772 Original Bulletin: https://ubuntu.com/security/notices/USN-6216-1 Comment: CVSS (Max): 8.1 CVE-2021-21772 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H – ————————–BEGIN INCLUDED TEXT——————– … Read more

ESB-2023.3914 – [SUSE] Linux Kernel: CVSS (Max): 8.2 [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3914 Security update for the Linux Kernel 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Linux Kernel Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2023-35829 CVE-2023-35828 CVE-2023-35823 CVE-2023-35788 CVE-2023-33952 CVE-2023-33951 CVE-2023-33288 CVE-2023-32233 CVE-2023-31436 CVE-2023-31084 CVE-2023-30772 CVE-2023-30456 CVE-2023-28866 CVE-2023-28466 CVE-2023-28464 … Read more

ESB-2023.3943 – [Appliance] Siemens SiPass Integrated: CVSS (Max): 7.5 [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3943 ICS Advisory | ICSA-23-194-02 Siemens SiPass Integrated 14 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Siemens SiPass Integrated Publisher: ICS-CERT Operating System: Network Appliance Resolution: Patch/Upgrade CVE Names: CVE-2022-31810 Original Bulletin: https://www.cisa.gov/news-events/ics-advisories/icsa-23-194-02 Comment: CVSS (Max): 7.5 CVE-2022-31810 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSS Source: … Read more

ESB-2023.3942 – [Appliance] Siemens RUGGEDCOM ROX: CVSS (Max): 9.8 [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3942 ICS Advisory | ICSA-23-194-01 Siemens RUGGEDCOM ROX 14 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Siemens RUGGEDCOM ROX Publisher: ICS-CERT Operating System: Network Appliance Resolution: Patch/Upgrade CVE Names: CVE-2023-36755 CVE-2023-36754 CVE-2023-36753 CVE-2023-36752 CVE-2023-36751 CVE-2023-36750 CVE-2023-36749 CVE-2023-36748 CVE-2023-36390 CVE-2023-36389 CVE-2023-36386 CVE-2022-32207 … Read more

ESB-2023.3941 – [Appliance] Siemens SIMATIC CN 4100: CVSS (Max): 9.9 [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3941 ICS Advisory | ICSA-22-194-03 Siemens SIMATIC CN 4100 14 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Siemens SIMATIC CN 4100 Publisher: ICS-CERT Operating System: Network Appliance Resolution: Patch/Upgrade CVE Names: CVE-2023-29131 CVE-2023-29130 Original Bulletin: https://www.cisa.gov/news-events/ics-advisories/icsa-22-194-03 Comment: CVSS (Max): 9.9 CVE-2023-29130 … Read more

ESB-2023.3940 – [Ubuntu] SciPy: CVSS (Max): 6.7 [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3940 USN-6226-1: SciPy vulnerabilities 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: SciPy Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-29824 CVE-2023-25399 Original Bulletin: https://ubuntu.com/security/notices/USN-6226-1 Comment: CVSS (Max): 6.7 CVE-2023-29824 (CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) CVSS Source: NVD, [SUSE] Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H – ————————–BEGIN … Read more

ESB-2023.3939 – [Ubuntu] Knot Resolver: CVSS (Max): 7.5 [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3939 USN-6225-1: Knot Resolver vulnerability 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Knot Resolver Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2022-40188 Original Bulletin: https://ubuntu.com/security/notices/USN-6225-1 Comment: CVSS (Max): 7.5 CVE-2022-40188 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H – ————————–BEGIN … Read more

ESB-2023.3938 – [Appliance] PAN-OS: CVSS (Max): None [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3938 CVE-2023-38046 PAN-OS: Read System Files and Resources During Configuration Commit 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: PAN-OS Publisher: Palo Alto Networks Operating System: Network Appliance Resolution: Patch/Upgrade CVE Names: CVE-2023-38046 Original Bulletin: https://securityadvisories.paloaltonetworks.com/CVE-2023-38046 Comment: CVSS (Max): None available … Read more

ESB-2023.3937 – [Appliance] Rockwell Automation Select Communication Modules: CVSS (Max): 9.8 [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3937 ICS Advisory | ICSA-23-193-01 Rockwell Automation Select Communication Modules 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Rockwell Automation Select Communication Modules Publisher: ICS-CERT Operating System: Network Appliance Resolution: Patch/Upgrade CVE Names: CVE-2023-3596 CVE-2023-3595 Original Bulletin: https://www.cisa.gov/news-events/ics-advisories/icsa-23-193-01 Comment: CVSS (Max): … Read more

ESB-2023.3936.2 – UPDATE [Cisco] Cisco SD-WAN vManage: CVSS (Max): 9.1 [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3936.2 Cisco SD-WAN vManage Unauthenticated REST API Access Vulnerability 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Cisco SD-WAN vManage Publisher: Cisco Systems Operating System: Cisco Resolution: Patch/Upgrade CVE Names: CVE-2023-20214 Original Bulletin: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmanage-unauthapi-sphCLYPA Comment: CVSS (Max): 9.1 CVE-2023-20214 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) CVSS … Read more

ESB-2023.3935 – [Debian] ruby-doorkeeper: CVSS (Max): 6.5 [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3935 ruby-doorkeeper security update 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: ruby-doorkeeper Publisher: Debian Operating System: Debian GNU/Linux Resolution: Patch/Upgrade CVE Names: CVE-2023-34246 Original Bulletin: https://lists.debian.org/debian-lts-announce/2023/07/msg00016.html Comment: CVSS (Max): 6.5 CVE-2023-34246 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N – ————————–BEGIN INCLUDED … Read more

ESB-2023.3950 – [SUSE] libqt5-qtbase: CVSS (Max): 7.8 [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3950 Security update for libqt5-qtbase 14 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: libqt5-qtbase Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2023-32763 CVE-2020-24741 Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232816-1 Comment: CVSS (Max): 7.8 CVE-2023-32763 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) CVSS Source: SUSE Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H – ————————–BEGIN … Read more

ESB-2023.3934 – [Debian] thunderbird: CVSS (Max): 8.8 [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3934 thunderbird security update 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: thunderbird Publisher: Debian Operating System: Debian GNU/Linux Resolution: Patch/Upgrade CVE Names: CVE-2023-37211 CVE-2023-37208 CVE-2023-37207 CVE-2023-37202 CVE-2023-37201 Original Bulletin: https://lists.debian.org/debian-lts-announce/2023/07/msg00015.html Comment: CVSS (Max): 8.8 CVE-2023-37211 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) CVSS Source: NVD Calculator: … Read more

ESB-2023.3949 – [SUSE] installation-images: CVSS (Max): None [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3949 Security update for installation-images 14 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: installation-images Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232815-1 Comment: CVSS (Max): None available when published – ————————–BEGIN INCLUDED TEXT——————– Security update for installation-images Announcement ID: … Read more

ESB-2023.3933 – [RedHat] rh-nodejs14-nodejs: CVSS (Max): 7.5 [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3933 rh-nodejs14-nodejs security update 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: rh-nodejs14-nodejs Publisher: Red Hat Operating System: Red Hat Resolution: Patch/Upgrade CVE Names: CVE-2023-32067 CVE-2023-31147 CVE-2023-31130 CVE-2023-31124 Original Bulletin: https://access.redhat.com/errata/RHSA-2023:4039 Comment: CVSS (Max): 7.5 CVE-2023-32067 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSS Source: Red Hat … Read more

ESB-2023.3948 – [SUSE] installation-images: CVSS (Max): None [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3948 Security update for installation-images 14 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: installation-images Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232819-1 Comment: CVSS (Max): None available when published – ————————–BEGIN INCLUDED TEXT——————– Security update for installation-images Announcement ID: … Read more

ESB-2023.3932 – [RedHat] python38:3.8 and python38-devel:3.8: CVSS (Max): 7.5 [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3932 python38:3.8 and python38-devel:3.8 security update 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: python38:3.8 and python38-devel:3.8 Publisher: Red Hat Operating System: Red Hat Resolution: Patch/Upgrade CVE Names: CVE-2023-24329 Original Bulletin: https://access.redhat.com/errata/RHSA-2023:4038 Comment: CVSS (Max): 7.5 CVE-2023-24329 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) CVSS Source: Red … Read more

ESB-2023.3947 – [SUSE] geoipupdate: CVSS (Max): None [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3947 Security update for geoipupdate 14 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: geoipupdate Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232812-1 Comment: CVSS (Max): None available when published – ————————–BEGIN INCLUDED TEXT——————– Security update for geoipupdate Announcement ID: … Read more

ESB-2023.3931 – [RedHat] bind: CVSS (Max): 7.5 [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3931 bind9.16 security update 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: bind Publisher: Red Hat Operating System: Red Hat Resolution: Patch/Upgrade CVE Names: CVE-2023-2828 Original Bulletin: https://access.redhat.com/errata/RHSA-2023:4037 Comment: CVSS (Max): 7.5 CVE-2023-2828 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSS Source: Red Hat Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H – … Read more

ESB-2023.3946 – [Appliance] Honeywell Experion PKS, LX and PlantCruise: CVSS (Max): 9.8 [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3946 ICS Advisory | ICSA-23-194-06 Honeywell Experion PKS, LX and PlantCruise 14 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Honeywell Experion PKS, LX and PlantCruise Publisher: ICS-CERT Operating System: Network Appliance Resolution: Patch/Upgrade CVE Names: CVE-2023-26597 CVE-2023-25948 CVE-2023-25770 CVE-2023-25178 CVE-2023-25078 CVE-2023-24480 … Read more

ESB-2023.3930 – nodejs: CVSS (Max): 7.5 [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3930 nodejs security update 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: nodejs Publisher: Red Hat Resolution: Patch/Upgrade CVE Names: CVE-2023-32067 CVE-2023-31147 CVE-2023-31130 CVE-2023-31124 Original Bulletin: https://access.redhat.com/errata/RHSA-2023:4036 Comment: CVSS (Max): 7.5 CVE-2023-32067 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSS Source: Red Hat Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H – ————————–BEGIN … Read more

ESB-2023.3945 – [Appliance] Rockwell Automation PowerMonitor 1000: CVSS (Max): 8.8 [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3945 ICS Advisory | ICSA-23-194-05 Rockwell Automation PowerMonitor 1000 14 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Rockwell Automation PowerMonitor 1000 Publisher: ICS-CERT Operating System: Network Appliance Resolution: Patch/Upgrade CVE Names: CVE-2023-2072 Original Bulletin: https://www.cisa.gov/news-events/ics-advisories/icsa-23-194-05 Comment: CVSS (Max): 8.8 CVE-2023-2072 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) … Read more

ESB-2023.3929 – [RedHat] nodejs:18: CVSS (Max): 8.6 [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3929 nodejs:18 security update 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: nodejs:18 Publisher: Red Hat Operating System: Red Hat Resolution: Patch/Upgrade CVE Names: CVE-2023-32067 CVE-2023-31147 CVE-2023-31130 CVE-2023-31124 CVE-2022-4904 Original Bulletin: https://access.redhat.com/errata/RHSA-2023:4035 Comment: CVSS (Max): 8.6 CVE-2022-4904 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H) CVSS Source: Red … Read more

ESB-2023.3944 – [Appliance] Siemens SIMATIC MV500 Devices: CVSS (Max): 8.2 [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3944 ICS Advisory | ICSA-23-194-04 Siemens SIMATIC MV500 Devices 14 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Siemens SIMATIC MV500 Devices Publisher: ICS-CERT Operating System: Network Appliance Resolution: Patch/Upgrade CVE Names: CVE-2023-0286 CVE-2023-0215 CVE-2022-42329 CVE-2022-42328 CVE-2022-32296 CVE-2022-21166 CVE-2022-21125 CVE-2022-21123 CVE-2022-4450 CVE-2022-4304 … Read more

ESB-2023.3928 – [RedHat] nodejs:16: CVSS (Max): 7.5 [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3928 nodejs:16 security update 13 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: nodejs:16 Publisher: Red Hat Operating System: Red Hat Resolution: Patch/Upgrade CVE Names: CVE-2023-32067 CVE-2023-31147 CVE-2023-31130 CVE-2023-31124 Original Bulletin: https://access.redhat.com/errata/RHSA-2023:4034 Comment: CVSS (Max): 7.5 CVE-2023-32067 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSS Source: Red Hat … Read more

ESB-2023.3959 – [RedHat] .NET 6.0: CVSS (Max): 8.1 [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3959 .NET 6.0 security, bug fix, and enhancement update 14 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: .NET 6.0 Publisher: Red Hat Operating System: Red Hat Resolution: Patch/Upgrade CVE Names: CVE-2023-33170 Original Bulletin: https://access.redhat.com/errata/RHSA-2023:4059 Comment: CVSS (Max): 8.1 CVE-2023-33170 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) CVSS … Read more

ESB-2023.3974 – [RedHat] thunderbird: CVSS (Max): 7.5 [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3974 thunderbird security update 14 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: thunderbird Publisher: Red Hat Operating System: Red Hat Resolution: Patch/Upgrade CVE Names: CVE-2023-37211 CVE-2023-37208 CVE-2023-37207 CVE-2023-37202 CVE-2023-37201 Original Bulletin: https://access.redhat.com/errata/RHSA-2023:4074 Comment: CVSS (Max): 7.5 CVE-2023-37211 (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) CVSS Source: Red … Read more

ESB-2023.3958 – [RedHat] .NET 7.0: CVSS (Max): 8.1 [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3958 .NET 7.0 security, bug fix, and enhancement update 14 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: .NET 7.0 Publisher: Red Hat Operating System: Red Hat Resolution: Patch/Upgrade CVE Names: CVE-2023-33170 Original Bulletin: https://access.redhat.com/errata/RHSA-2023:4058 Comment: CVSS (Max): 8.1 CVE-2023-33170 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) CVSS … Read more

ESB-2023.3973 – [RedHat] firefox: CVSS (Max): 7.5 [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3973 firefox security update 14 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: firefox Publisher: Red Hat Operating System: Red Hat Resolution: Patch/Upgrade CVE Names: CVE-2023-37211 CVE-2023-37208 CVE-2023-37207 CVE-2023-37202 CVE-2023-37201 Original Bulletin: https://access.redhat.com/errata/RHSA-2023:4073 Comment: CVSS (Max): 7.5 CVE-2023-37211 (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) CVSS Source: Red … Read more

ESB-2023.3957 – [RedHat] .NET 7.0: CVSS (Max): 8.1 [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3957 .NET 7.0 security, bug fix, and enhancement update 14 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: .NET 7.0 Publisher: Red Hat Operating System: Red Hat Resolution: Patch/Upgrade CVE Names: CVE-2023-33170 Original Bulletin: https://access.redhat.com/errata/RHSA-2023:4057 Comment: CVSS (Max): 8.1 CVE-2023-33170 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) CVSS … Read more

ESB-2023.3972 – [RedHat] firefox: CVSS (Max): 7.5 [auscert.org.au]

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3972 firefox security update 14 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: firefox Publisher: Red Hat Operating System: Red Hat Resolution: Patch/Upgrade CVE Names: CVE-2023-37211 CVE-2023-37208 CVE-2023-37207 CVE-2023-37202 CVE-2023-37201 Original Bulletin: https://access.redhat.com/errata/RHSA-2023:4072 Comment: CVSS (Max): 7.5 CVE-2023-37211 (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) CVSS Source: Red … Read more