Australia

ASB-2023.0119.3 – UPDATE ALERT [Win][Mac] Microsoft Office, Microsoft Office Services and Web Apps: CVSS (Max): 9.6 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT Security Bulletin ASB-2023.0119.3 Microsoft Patch Tuesday update for Microsoft Office, Microsoft Office Services and Web Apps for July 2023 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Microsoft 365 Apps Microsoft Excel Microsoft Office Microsoft Outlook Microsoft SharePoint Microsoft Word Operating System: Windows macOS Resolution: … Read more

ASB-2023.0118 – ALERT [Win] Windows: CVSS (Max): 9.8* [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT Security Bulletin ASB-2023.0118 Microsoft Patch Tuesday update for Microsoft Windows for July 2023 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Windows Windows Admin Center Windows Server Raw Image Extension VP9 Video Extensions Operating System: Windows Resolution: Patch/Upgrade CVE Names: CVE-2023-36884 CVE-2023-36874 CVE-2023-36872 CVE-2023-36871 CVE-2023-35367 … Read more

ESB-2023.3902 – [SUSE] Linux Kernel: CVSS (Max): 7.8 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3902 Security update for the Linux Kernel 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Linux Kernel Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2023-35824 CVE-2023-3358 CVE-2023-3268 CVE-2023-3161 CVE-2023-3159 CVE-2023-3141 CVE-2023-3111 CVE-2023-3090 CVE-2023-2002 CVE-2023-1637 CVE-2023-1249 CVE-2023-1079 CVE-2023-1077 Original Bulletin: … Read more

ESB-2023.3911 – [Win][UNIX/Linux] MISP 2.4.173: CVSS (Max): 7.5 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3911 MISP 2.4.173 released with various bugfixes and improvements 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: MISP 2.4.173 Publisher: MISP Operating System: Windows UNIX variants (UNIX, Linux, OSX) Resolution: Patch/Upgrade CVE Names: CVE-2023-37307 CVE-2023-37306 Original Bulletin: https://www.misp-project.org/2023/07/11/MISP.2.4.173.released.html/ Comment: CVSS (Max): … Read more

ESB-2023.3910 – [Ubuntu] Citrix ADC and Gateway: CVSS (Max): 9.6 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3910 Citrix Secure Access client for Ubuntu Security Bulletin for CVE-2023-24492 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Citrix ADC Citrix Gateway Publisher: Citrix Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-24492 Original Bulletin: https://support.citrix.com/article/CTX564169/citrix-secure-access-client-for-ubuntu-security-bulletin-for-cve202324492 Comment: CVSS (Max): 9.6 CVE-2023-24492 … Read more

ESB-2023.3909 – [Win] Citrix ADC and Gateway: CVSS (Max): 7.8 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3909 Citrix Secure Access client for Windows Security Bulletin for CVE-2023-24491 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Citrix ADC Citrix Gateway Publisher: Citrix Operating System: Windows Resolution: Patch/Upgrade CVE Names: CVE-2023-24491 Original Bulletin: https://support.citrix.com/article/CTX561480/citrix-secure-access-client-for-windows-security-bulletin-for-cve202324491 Comment: CVSS (Max): 7.8 CVE-2023-24491 … Read more

ESB-2023.3908 – [Win][Mac] Adobe InDesign: CVSS (Max): 7.8 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3908 APSB23-38 : Security update available for Adobe InDesign 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Adobe InDesign Publisher: Adobe Operating System: Windows macOS Resolution: Patch/Upgrade CVE Names: CVE-2023-29319 CVE-2023-29318 CVE-2023-29317 CVE-2023-29316 CVE-2023-29315 CVE-2023-29314 CVE-2023-29313 CVE-2023-29312 CVE-2023-29311 CVE-2023-29310 CVE-2023-29309 CVE-2023-29308 … Read more

ESB-2023.3911 – [Win][UNIX/Linux] MISP 2.4.173: CVSS (Max): 7.5 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3911 MISP 2.4.173 released with various bugfixes and improvements 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: MISP 2.4.173 Publisher: MISP Operating System: Windows UNIX variants (UNIX, Linux, OSX) Resolution: Patch/Upgrade CVE Names: CVE-2023-37307 CVE-2023-37306 Original Bulletin: https://www.misp-project.org/2023/07/11/MISP.2.4.173.released.html/ Comment: CVSS (Max): … Read more

ESB-2023.3911 – [Win][UNIX/Linux] MISP 2.4.173: CVSS (Max): 7.5 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3911 MISP 2.4.173 released with various bugfixes and improvements 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: MISP 2.4.173 Publisher: MISP Operating System: Windows UNIX variants (UNIX, Linux, OSX) Resolution: Patch/Upgrade CVE Names: CVE-2023-37307 CVE-2023-37306 Original Bulletin: https://www.misp-project.org/2023/07/11/MISP.2.4.173.released.html/ Comment: CVSS (Max): … Read more

ESB-2023.3911 – [Win][UNIX/Linux] MISP 2.4.173: CVSS (Max): 7.5 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3911 MISP 2.4.173 released with various bugfixes and improvements 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: MISP 2.4.173 Publisher: MISP Operating System: Windows UNIX variants (UNIX, Linux, OSX) Resolution: Patch/Upgrade CVE Names: CVE-2023-37307 CVE-2023-37306 Original Bulletin: https://www.misp-project.org/2023/07/11/MISP.2.4.173.released.html/ Comment: CVSS (Max): … Read more

ESB-2023.3911 – [Win][UNIX/Linux] MISP 2.4.173: CVSS (Max): 7.5 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3911 MISP 2.4.173 released with various bugfixes and improvements 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: MISP 2.4.173 Publisher: MISP Operating System: Windows UNIX variants (UNIX, Linux, OSX) Resolution: Patch/Upgrade CVE Names: CVE-2023-37307 CVE-2023-37306 Original Bulletin: https://www.misp-project.org/2023/07/11/MISP.2.4.173.released.html/ Comment: CVSS (Max): … Read more

ESB-2023.3906 – [Win][UNIX/Linux] Firefox 115.0.2 and Firefox ESR 115.0.2: CVSS (Max): None [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3906 MFSA 2023-26 Security Vulnerabilities fixed in Firefox 115.0.2 and Firefox ESR 115.0.2 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Firefox 115.0.2 Firefox ESR 115.0.2 Publisher: Mozilla Operating System: UNIX variants (UNIX, Linux, OSX) Windows Resolution: Patch/Upgrade CVE Names: CVE-2023-3600 … Read more

ASB-2023.0125 – [Win] Microsoft Malware Protection Engine: CVSS (Max): 6.3 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT Security Bulletin ASB-2023.0125 Microsoft Patch Tuesday update for Microsoft System Center for July 2023 12 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Microsoft Malware Protection Engine Operating System: Windows Resolution: Patch/Upgrade CVE Names: CVE-2023-33156 Comment: CVSS (Max): 6.3 CVE-2023-33156 (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H) CVSS Source: Microsoft Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H … Read more

ESB-2023.3880 – [Mac] macOS Ventura 13.4.1: CVSS (Max): None [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3880 Rapid Security Responses for macOS Ventura 13.4.1 11 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: macOS Ventura 13.4.1 Publisher: Apple Operating System: macOS Resolution: Patch/Upgrade CVE Names: CVE-2023-37450 Original Bulletin: https://support.apple.com/kb/HT213825 Comment: CVSS (Max): None available when published – ————————–BEGIN … Read more

ESB-2023.3880 – [Mac] macOS Ventura 13.4.1: CVSS (Max): None [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3880 Rapid Security Responses for macOS Ventura 13.4.1 11 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: macOS Ventura 13.4.1 Publisher: Apple Operating System: macOS Resolution: Patch/Upgrade CVE Names: CVE-2023-37450 Original Bulletin: https://support.apple.com/kb/HT213825 Comment: CVSS (Max): None available when published – ————————–BEGIN … Read more

ESB-2023.3880 – [Mac] macOS Ventura 13.4.1: CVSS (Max): None [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3880 Rapid Security Responses for macOS Ventura 13.4.1 11 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: macOS Ventura 13.4.1 Publisher: Apple Operating System: macOS Resolution: Patch/Upgrade CVE Names: CVE-2023-37450 Original Bulletin: https://support.apple.com/kb/HT213825 Comment: CVSS (Max): None available when published – ————————–BEGIN … Read more

ESB-2023.3880 – [Mac] macOS Ventura 13.4.1: CVSS (Max): None [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3880 Rapid Security Responses for macOS Ventura 13.4.1 11 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: macOS Ventura 13.4.1 Publisher: Apple Operating System: macOS Resolution: Patch/Upgrade CVE Names: CVE-2023-37450 Original Bulletin: https://support.apple.com/kb/HT213825 Comment: CVSS (Max): None available when published – ————————–BEGIN … Read more

ESB-2023.3880 – [Mac] macOS Ventura 13.4.1: CVSS (Max): None [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3880 Rapid Security Responses for macOS Ventura 13.4.1 11 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: macOS Ventura 13.4.1 Publisher: Apple Operating System: macOS Resolution: Patch/Upgrade CVE Names: CVE-2023-37450 Original Bulletin: https://support.apple.com/kb/HT213825 Comment: CVSS (Max): None available when published – ————————–BEGIN … Read more

ESB-2023.3880 – [Mac] macOS Ventura 13.4.1: CVSS (Max): None [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3880 Rapid Security Responses for macOS Ventura 13.4.1 11 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: macOS Ventura 13.4.1 Publisher: Apple Operating System: macOS Resolution: Patch/Upgrade CVE Names: CVE-2023-37450 Original Bulletin: https://support.apple.com/kb/HT213825 Comment: CVSS (Max): None available when published – ————————–BEGIN … Read more

ESB-2023.3785 – [Ubuntu] PHP: CVSS (Max): 5.3 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3785 USN-6199-1: PHP vulnerability 4 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: PHP Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-3247 Original Bulletin: https://ubuntu.com/security/notices/USN-6199-1 Comment: CVSS (Max): 5.3 CVE-2023-3247 (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N) CVSS Source: SUSE Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N – ————————–BEGIN INCLUDED TEXT——————– … Read more

ESB-2023.3800 – [SUSE] amazon-ecs-init: CVSS (Max): None [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3800 Security update for amazon-ecs-init 5 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: amazon-ecs-init Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232762-1 Comment: CVSS (Max): None available when published – ————————–BEGIN INCLUDED TEXT——————– Security update for amazon-ecs-init Announcement ID: … Read more

ESB-2023.3799 – [SUSE] libcap: CVSS (Max): 4.4 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3799 Security update for libcap 5 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: libcap Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2023-2603 CVE-2023-2602 Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232765-1 Comment: CVSS (Max): 4.4 CVE-2023-2603 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) CVSS Source: SUSE Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L – ————————–BEGIN … Read more

ESB-2023.3798 – [SUSE] qt6-base: CVSS (Max): 7.8 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3798 Security update for qt6-base 5 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: qt6-base Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2023-32763 Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232780-1 Comment: CVSS (Max): 7.8 CVE-2023-32763 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) CVSS Source: SUSE Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H – ————————–BEGIN INCLUDED … Read more

ESB-2023.3797 – [SUSE] dnsdist: CVSS (Max): None [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3797 Security update for dnsdist 5 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: dnsdist Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2018-14663 CVE-2017-7557 CVE-2016-7069 Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232760-1 Comment: CVSS (Max): None available when published – ————————–BEGIN INCLUDED TEXT——————– Security … Read more

ESB-2023.3796 – [SUSE] rmt-server: CVSS (Max): 7.8 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3796 Security update for rmt-server 5 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: rmt-server Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2023-28120 CVE-2023-27530 CVE-2022-31254 Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232781-1 Comment: CVSS (Max): 7.8 CVE-2022-31254 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) CVSS Source: SUSE Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H – … Read more

ESB-2023.3795 – [SUSE] python-tornado: CVSS (Max): 3.4 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3795 Security update for python-tornado 5 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: python-tornado Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2023-28370 Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232770-1 Comment: CVSS (Max): 3.4 CVE-2023-28370 (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N) CVSS Source: SUSE Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N – ————————–BEGIN INCLUDED … Read more

ESB-2023.3794 – [SUSE] libcap: CVSS (Max): 4.4 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3794 Security update for libcap 5 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: libcap Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2023-2603 Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232764-1 Comment: CVSS (Max): 4.4 CVE-2023-2603 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) CVSS Source: SUSE Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L – ————————–BEGIN INCLUDED … Read more

ESB-2023.3793 – [SUSE] terraform: CVSS (Max): None [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3793 Security update for terraform 5 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: terraform Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232763-1 Comment: CVSS (Max): None available when published – ————————–BEGIN INCLUDED TEXT——————– Security update for terraform Announcement ID: … Read more

ESB-2023.3792 – [SUSE] xmltooling: CVSS (Max): 5.4 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3792 Security update for xmltooling 5 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: xmltooling Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2023-36661 Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232766-1 Comment: CVSS (Max): 5.4 CVE-2023-36661 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L) CVSS Source: SUSE Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L – ————————–BEGIN INCLUDED … Read more

ESB-2023.3791 – [Linux][AIX] WebSphere Application Server Patterns: CVSS (Max): None [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3791 Multiple vulnerabilities in IBM Java SDK affects IBM WebSphere Application Server April 2023 CPU that is bundled with IBM WebSphere Application Server Patterns 4 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: WebSphere Application Server Patterns Publisher: IBM Operating System: Linux … Read more

ESB-2023.3790 – [Win][Linux] IBM Integration Bus: CVSS (Max): 7.5 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3790 IBM Integration Bus is vulnerable to a remote attack due to Apache Jena (CVE-2021-39239, CVE-2022-28890, CVE-2023-22665). 4 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: IBM Integration Bus Publisher: IBM Operating System: Linux variants Windows z/OS Resolution: Patch/Upgrade CVE Names: CVE-2023-22665 … Read more

ESB-2023.3789 – [Debian] ghostscript: CVSS (Max): 8.4 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3789 ghostscript security update 4 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: ghostscript Publisher: Debian Operating System: Debian GNU/Linux Resolution: Patch/Upgrade CVE Names: CVE-2023-36664 Original Bulletin: https://lists.debian.org/debian-security-announce/2023/msg00138.html Comment: CVSS (Max): 8.4 CVE-2023-36664 (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) CVSS Source: Red Hat Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H – ————————–BEGIN … Read more

ESB-2023.3788 – [Ubuntu] GNU Screen: CVSS (Max): 6.5 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3788 USN-6198-1: GNU Screen vulnerability 4 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: GNU Screen Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-24626 Original Bulletin: https://ubuntu.com/security/notices/USN-6198-1 Comment: CVSS (Max): 6.5 CVE-2023-24626 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H – ————————–BEGIN … Read more

ESB-2023.3787 – [Ubuntu] ReportLab: CVSS (Max): 7.8 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3787 USN-6196-1: ReportLab vulnerability 4 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: ReportLab Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-33733 Original Bulletin: https://ubuntu.com/security/notices/USN-6196-1 Comment: CVSS (Max): 7.8 CVE-2023-33733 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H – ————————–BEGIN INCLUDED TEXT——————– … Read more

ESB-2023.3786 – [Ubuntu] OpenLDAP: CVSS (Max): 7.5 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3786 USN-6197-1: OpenLDAP vulnerability 4 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: OpenLDAP Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-2953 Original Bulletin: https://ubuntu.com/security/notices/USN-6197-1 Comment: CVSS (Max): 7.5 CVE-2023-2953 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H – ————————–BEGIN INCLUDED TEXT——————– … Read more

ESB-2023.3817 – [Cisco] Cisco Webex Meetings: CVSS (Max): 5.4 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3817 Cisco Webex Meetings Web UI Vulnerabilities 6 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Cisco Webex Meetings Publisher: Cisco Systems Operating System: Cisco Resolution: Patch/Upgrade CVE Names: CVE-2023-20180 CVE-2023-20133 Original Bulletin: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sxsscsrf-2L24bBx6 Comment: CVSS (Max): 5.4 CVE-2023-20133 (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) CVSS Source: … Read more

ESB-2023.3801 – [Ubuntu] ImageMagick: CVSS (Max): 7.8* [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3801 USN-6200-1: ImageMagick vulnerabilities 5 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: ImageMagick Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-34151 CVE-2023-3428 CVE-2023-3195 CVE-2023-1906 CVE-2023-1289 CVE-2022-32547 CVE-2022-32546 CVE-2022-32545 CVE-2022-28463 CVE-2021-39212 CVE-2021-20313 CVE-2021-20312 CVE-2021-20309 CVE-2021-20246 CVE-2021-20244 CVE-2021-20243 CVE-2021-20241 CVE-2021-20224 CVE-2021-3610 … Read more

ESB-2023.3816 – [SUSE] Multiple python libraries: CVSS (Max): 7.5 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3816 Security update for grpc, protobuf, python-Deprecated, python-PyGithub, python-aiocontextvars, python-avro, python-bcrypt, python-cryptography, python-cryptography-vectors, python-google-api-core, pyt 6 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: grpc, protobuf, python-Deprecated, python-PyGithub, python-aiocontextvars, python-avro, python-bcrypt python-cryptography, python-cryptography-vectors, python-google-api-core python-googleapis-common-protos, python-grpcio-gcp, python-humanfriendly python-jsondiff, python-knack, python-opencensus, python-opencensus-context python-opencensus-ext-threading, … Read more

ESB-2023.3815 – [SUSE] libdwarf: CVSS (Max): 5.5 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3815 Security update for libdwarf 6 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: libdwarf Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2020-27545 Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232784-1 Comment: CVSS (Max): 5.5 CVE-2020-27545 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) CVSS Source: SUSE Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H – ————————–BEGIN INCLUDED … Read more

ESB-2023.3814 – [SUSE] python311: CVSS (Max): 5.4 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3814 Security update for python311 6 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: python311 Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2007-4559 Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232778-1 Comment: CVSS (Max): 5.4 CVE-2007-4559 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) CVSS Source: SUSE Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L – ————————–BEGIN INCLUDED … Read more

ESB-2023.3813 – [SUSE] kubernetes1.18: CVSS (Max): None [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3813 Security update for kubernetes1.18 6 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: kubernetes1.18 Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232773-1 Comment: CVSS (Max): None available when published – ————————–BEGIN INCLUDED TEXT——————– Security update for kubernetes1.18 Announcement ID: … Read more

ESB-2023.3812 – [SUSE] Linux Kernel: CVSS (Max): 7.8 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3812 Security update for the Linux Kernel 6 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Linux Kernel Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2023-35828 CVE-2023-35823 CVE-2023-35788 CVE-2023-33288 CVE-2023-32233 CVE-2023-31436 CVE-2023-31084 CVE-2023-30456 CVE-2023-28410 CVE-2023-21102 CVE-2023-3161 CVE-2023-3141 CVE-2023-3006 CVE-2023-2513 CVE-2023-2483 … Read more

ESB-2023.3811 – [SUSE] dnsdist: CVSS (Max): 8.8 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3811 Security update for dnsdist 6 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: dnsdist Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2018-14663 CVE-2017-7557 CVE-2016-7069 Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232777-1 Comment: CVSS (Max): 8.8 CVE-2017-7557 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H – … Read more

ESB-2023.3810 – [Ubuntu] Django: CVSS (Max): 5.9 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3810 USN-6203-1: Django vulnerability 6 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Django Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-36053 Original Bulletin: https://ubuntu.com/security/notices/USN-6203-1 Comment: CVSS (Max): 5.9 CVE-2023-36053 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSS Source: SUSE Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H – ————————–BEGIN INCLUDED TEXT——————– … Read more

ESB-2023.3809 – [Ubuntu] CPDB: CVSS (Max): 9.8 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3809 USN-6204-1: CPDB vulnerability 6 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: CPDB Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-34095 Original Bulletin: https://ubuntu.com/security/notices/USN-6204-1 Comment: CVSS (Max): 9.8 CVE-2023-34095 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H – ————————–BEGIN INCLUDED TEXT——————– … Read more

ESB-2023.3808 – [Ubuntu] containerd: CVSS (Max): 7.8 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3808 USN-6202-1: containerd vulnerabilities 6 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: containerd Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-25173 CVE-2023-25153 Original Bulletin: https://ubuntu.com/security/notices/USN-6202-1 Comment: CVSS (Max): 7.8 CVE-2023-25173 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H – ————————–BEGIN INCLUDED … Read more

ESB-2023.3807 – [Ubuntu] Firefox: CVSS (Max): 7.5* [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3807 USN-6201-1: Firefox vulnerabilities 6 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Firefox Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-37212 CVE-2023-37211 CVE-2023-37210 CVE-2023-37209 CVE-2023-37208 CVE-2023-37207 CVE-2023-37206 CVE-2023-37205 CVE-2023-37204 CVE-2023-37203 CVE-2023-37202 CVE-2023-37201 CVE-2023-3482 Original Bulletin: https://ubuntu.com/security/notices/USN-6201-1 Comment: CVSS (Max): … Read more

ESB-2023.3824 – [Android] Android OS: CVSS (Max): 9.8* [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3824 Android Security Bulletin – July 2023 6 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Android OS Publisher: Android Operating System: Android Resolution: Patch/Upgrade CVE Names: CVE-2023-28542 CVE-2023-28541 CVE-2023-28147 CVE-2023-26083 CVE-2023-25012 CVE-2023-24854 CVE-2023-24851 CVE-2023-22667 CVE-2023-22387 CVE-2023-22386 CVE-2023-21672 CVE-2023-21631 CVE-2023-21629 CVE-2023-21262 CVE-2023-21261 … Read more

ESB-2023.3806 – [Win][Linux] IBM Integration Bus and App Connect Enterprise: CVSS (Max): 5.9 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3806 IBM App Connect Enterprise and IBM Integration Bus are vulnerable to a remote attacker and denial of service due to Guava (CVE-2020-8908, CVE-2018-10237). 5 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: IBM Integration Bus IBM App Connect Enterprise Publisher: IBM … Read more

ESB-2023.3823 – [Debian] linux: CVSS (Max): 9.8 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3823 linux security update 6 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: linux Publisher: Debian Operating System: Debian GNU/Linux Resolution: Patch/Upgrade CVE Names: CVE-2023-35788 CVE-2023-32254 CVE-2023-32250 CVE-2023-31084 CVE-2023-3390 CVE-2023-3269 CVE-2023-3268 CVE-2023-3212 CVE-2023-3090 CVE-2023-2269 CVE-2023-2156 CVE-2023-2124 Original Bulletin: http://www.debian.org/security/2023/dsa-5448 Comment: CVSS (Max): … Read more