Australia

ESB-2023.3814 – [SUSE] python311: CVSS (Max): 5.4 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3814 Security update for python311 6 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: python311 Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2007-4559 Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232778-1 Comment: CVSS (Max): 5.4 CVE-2007-4559 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) CVSS Source: SUSE Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L – ————————–BEGIN INCLUDED … Read more

ESB-2023.3813 – [SUSE] kubernetes1.18: CVSS (Max): None [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3813 Security update for kubernetes1.18 6 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: kubernetes1.18 Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232773-1 Comment: CVSS (Max): None available when published – ————————–BEGIN INCLUDED TEXT——————– Security update for kubernetes1.18 Announcement ID: … Read more

ESB-2023.3812 – [SUSE] Linux Kernel: CVSS (Max): 7.8 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3812 Security update for the Linux Kernel 6 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Linux Kernel Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2023-35828 CVE-2023-35823 CVE-2023-35788 CVE-2023-33288 CVE-2023-32233 CVE-2023-31436 CVE-2023-31084 CVE-2023-30456 CVE-2023-28410 CVE-2023-21102 CVE-2023-3161 CVE-2023-3141 CVE-2023-3006 CVE-2023-2513 CVE-2023-2483 … Read more

ESB-2023.3811 – [SUSE] dnsdist: CVSS (Max): 8.8 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3811 Security update for dnsdist 6 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: dnsdist Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2018-14663 CVE-2017-7557 CVE-2016-7069 Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232777-1 Comment: CVSS (Max): 8.8 CVE-2017-7557 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H – … Read more

ESB-2023.3810 – [Ubuntu] Django: CVSS (Max): 5.9 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3810 USN-6203-1: Django vulnerability 6 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Django Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-36053 Original Bulletin: https://ubuntu.com/security/notices/USN-6203-1 Comment: CVSS (Max): 5.9 CVE-2023-36053 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSS Source: SUSE Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H – ————————–BEGIN INCLUDED TEXT——————– … Read more

ESB-2023.3809 – [Ubuntu] CPDB: CVSS (Max): 9.8 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3809 USN-6204-1: CPDB vulnerability 6 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: CPDB Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-34095 Original Bulletin: https://ubuntu.com/security/notices/USN-6204-1 Comment: CVSS (Max): 9.8 CVE-2023-34095 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H – ————————–BEGIN INCLUDED TEXT——————– … Read more

ESB-2023.3808 – [Ubuntu] containerd: CVSS (Max): 7.8 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3808 USN-6202-1: containerd vulnerabilities 6 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: containerd Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-25173 CVE-2023-25153 Original Bulletin: https://ubuntu.com/security/notices/USN-6202-1 Comment: CVSS (Max): 7.8 CVE-2023-25173 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H – ————————–BEGIN INCLUDED … Read more

ESB-2023.3827 – [RedHat] Red Hat OpenShift Enterprise: CVSS (Max): 8.1 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3827 Red Hat OpenShift Enterprise security update 7 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Red Hat OpenShift Enterprise Publisher: Red Hat Operating System: Red Hat Resolution: Patch/Upgrade CVE Names: CVE-2023-24540 CVE-2023-3089 CVE-2022-41717 CVE-2022-30629 CVE-2022-28327 CVE-2022-24675 CVE-2022-23772 Original Bulletin: https://access.redhat.com/errata/RHSA-2023:3914 Comment: … Read more

ESB-2022.3953.2 – UPDATE [Win][UNIX/Linux] Intel NUC Laptop Kits: CVSS (Max): 8.2 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2022.3953.2 Intel NUC Laptop Kit Advisory 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Intel NUC Laptop Kits Publisher: Intel Operating System: Windows UNIX variants (UNIX, Linux, OSX) Resolution: Patch/Upgrade CVE Names: CVE-2022-34488 CVE-2022-34345 CVE-2022-33209 CVE-2022-32579 CVE-2022-28858 CVE-2022-27493 Original Bulletin: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00712.html … Read more

ESB-2023.3844 – [Virtual] VMware SD-WAN (Edge): CVSS (Max): 5.3 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3844 VMware SD-WAN update addresses a bypass authentication vulnerability (CVE-2023-20899) 7 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: VMware SD-WAN (Edge) Publisher: VMWare Operating System: Virtualisation Resolution: Patch/Upgrade CVE Names: CVE-2023-20899 Original Bulletin: https://www.vmware.com/security/advisories/VMSA-2023-0015.html Comment: CVSS (Max): 5.3 CVE-2023-20899 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) CVSS … Read more

ESB-2023.3843 – [Win][Linux][Mac] Nessus Agent: CVSS (Max): 5.9 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3843 [R1] Nessus Agent Version 10.4.1 Fixes Multiple Vulnerabilities 7 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Nessus Agent Publisher: Tenable Operating System: Windows Linux variants macOS Resolution: Patch/Upgrade CVE Names: CVE-2023-2650 CVE-2023-1255 CVE-2023-0466 CVE-2023-0465 Original Bulletin: https://www.tenable.com/security/tns-2023-24 Comment: CVSS (Max): … Read more

ESB-2023.3842 – [Linux] Liberty for Java for IBM Cloud: CVSS (Max): 7.4 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3842 Multiple Vulnerabilities in IBM Java SDK affect Liberty for Java for IBM Cloud due to April 2023 CPU 7 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Liberty for Java for IBM Cloud Publisher: IBM Operating System: Linux variants Resolution: Patch/Upgrade … Read more

ESB-2023.3841 – [Appliance] ABUS TVIP: CVSS (Max): 7.2 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3841 ICS Advisory | ICSA-23-187-02 ABUS TVIP 7 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: ABUS TVIP Publisher: ICS-CERT Operating System: Network Appliance Resolution: Patch/Upgrade CVE Names: CVE-2023-26609 Original Bulletin: https://www.cisa.gov/news-events/ics-advisories/icsa-23-187-02 Comment: CVSS (Max): 7.2 CVE-2023-26609 (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) CVSS Source: ICS-CERT Calculator: … Read more

ESB-2023.3840 – [Appliance] PiiGAB M-Bus: CVSS (Max): 9.8 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3840 ICS Advisory | ICSA-23-187-01 PiiGAB M-Bus 7 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: PiiGAB M-Bus Publisher: ICS-CERT Operating System: Network Appliance Resolution: Patch/Upgrade CVE Names: CVE-2023-36859 CVE-2023-35987 CVE-2023-35765 CVE-2023-35120 CVE-2023-34995 CVE-2023-34433 CVE-2023-33868 CVE-2023-32652 CVE-2023-31277 Original Bulletin: https://www.cisa.gov/news-events/ics-advisories/icsa-23-187-01 Comment: CVSS … Read more

ESB-2023.3839 – [Linux] IBM Security QRadar SIEM: CVSS (Max): 9.8 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3839 IBM QRadar SIEM includes components with known vulnerabilities 7 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: IBM Security QRadar SIEM Publisher: IBM Operating System: Linux variants Resolution: Patch/Upgrade CVE Names: CVE-2023-28708 CVE-2023-25194 CVE-2023-24998 CVE-2023-24329 CVE-2023-20863 CVE-2023-20861 CVE-2023-20860 CVE-2023-20859 CVE-2023-1999 CVE-2023-1436 … Read more

ESB-2023.3837 – [Ubuntu] Linux kernel (Intel IoTG): CVSS (Max): 7.8 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3837 USN-6207-1: Linux kernel (Intel IoTG) vulnerabilities 7 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Linux kernel (Intel IoTG) Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-25012 CVE-2023-2985 CVE-2023-1998 CVE-2023-1859 CVE-2023-1670 CVE-2023-1079 CVE-2023-1077 CVE-2023-1076 Original Bulletin: https://ubuntu.com/security/notices/USN-6207-1 Comment: CVSS … Read more

ESB-2023.3836 – [Ubuntu] Linux kernel (OEM): CVSS (Max): 7.8 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3836 USN-6206-1: Linux kernel (OEM) vulnerabilities 7 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Linux kernel (OEM) Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-35788 CVE-2023-2124 CVE-2023-0597 CVE-2022-4842 Original Bulletin: https://ubuntu.com/security/notices/USN-6206-1 Comment: CVSS (Max): 7.8 CVE-2023-35788 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) CVSS Source: … Read more

ESB-2023.3835 – [Ubuntu] Linux kernel (GKE): CVSS (Max): 7.8 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3835 USN-6205-1: Linux kernel (GKE) vulnerabilities 7 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Linux kernel (GKE) Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-35788 Original Bulletin: https://ubuntu.com/security/notices/USN-6205-1 Comment: CVSS (Max): 7.8 CVE-2023-35788 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H … Read more

ESB-2023.3834 – [Ubuntu] Gorilla WebSocket: CVSS (Max): 7.5 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3834 USN-6208-1: Gorilla WebSocket vulnerability 7 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Gorilla WebSocket Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2020-27813 Original Bulletin: https://ubuntu.com/security/notices/USN-6208-1 Comment: CVSS (Max): 7.5 CVE-2020-27813 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H – ————————–BEGIN … Read more

ESB-2023.3833 – [SUSE] bind: CVSS (Max): 7.5 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3833 Security update for bind 7 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: bind Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2023-2828 Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232789-1 Comment: CVSS (Max): 7.5 CVE-2023-2828 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSS Source: SUSE Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H – ————————–BEGIN INCLUDED … Read more

ESB-2023.3832 – [SUSE] python-sqlparse: CVSS (Max): 5.5 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3832 Security update for python-sqlparse 7 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: python-sqlparse Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2023-30608 Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232787-1 Comment: CVSS (Max): 5.5 CVE-2023-30608 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) CVSS Source: SUSE Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H – ————————–BEGIN INCLUDED … Read more

ESB-2023.3831 – [Debian] libusrsctp: CVSS (Max): 6.5 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3831 libusrsctp security update 7 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: libusrsctp Publisher: Debian Operating System: Debian GNU/Linux Resolution: Patch/Upgrade CVE Names: CVE-2019-20503 Original Bulletin: https://lists.debian.org/debian-lts-announce/2023/07/msg00003.html Comment: CVSS (Max): 6.5 CVE-2019-20503 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H – ————————–BEGIN INCLUDED … Read more

ESB-2023.3830 – [Debian] ruby-redcloth: CVSS (Max): 7.5 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3830 ruby-redcloth security update 7 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: ruby-redcloth Publisher: Debian Operating System: Debian GNU/Linux Resolution: Patch/Upgrade CVE Names: CVE-2023-31606 Original Bulletin: https://lists.debian.org/debian-lts-announce/2023/07/msg00002.html Comment: CVSS (Max): 7.5 CVE-2023-31606 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H – ————————–BEGIN INCLUDED … Read more

ESB-2023.2569.2 – UPDATE [Win][UNIX/Linux][Mobile] IPU – BIOS : CVSS (Max): 7.5 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.2569.2 2023.2 IPU – BIOS Advisory 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: IPU – BIOS Publisher: Intel Operating System: Windows UNIX variants (UNIX, Linux, OSX) Mobile Device Resolution: Patch/Upgrade CVE Names: CVE-2022-38087 CVE-2022-33894 Original Bulletin: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00807.html Revision History: July … Read more

ESB-2023.3850 – [Ubuntu] Linux kernel (Azure): CVSS (Max): None [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3850 USN-6211-1: Linux kernel (Azure) regression 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Linux kernel (Azure) Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade Original Bulletin: https://ubuntu.com/security/notices/USN-6211-1 Comment: CVSS (Max): None available when published – ————————–BEGIN INCLUDED TEXT——————– USN-6211-1: Linux kernel … Read more

ESB-2023.3849 – [Ubuntu] Doorkeeper: CVSS (Max): 6.5 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3849 USN-6210-1: Doorkeeper vulnerability 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Doorkeeper Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-34246 Original Bulletin: https://ubuntu.com/security/notices/USN-6210-1 Comment: CVSS (Max): 6.5 CVE-2023-34246 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N – ————————–BEGIN INCLUDED TEXT——————– … Read more

ESB-2023.3848 – [SUSE] prometheus-sap_host_exporter: CVSS (Max): None [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3848 Security update for prometheus-sap_host_exporter 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: prometheus-sap_host_exporter Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232798-1 Comment: CVSS (Max): None available when published – ————————–BEGIN INCLUDED TEXT——————– Security update for prometheus-sap_host_exporter Announcement ID: … Read more

ESB-2023.3847 – [SUSE] prometheus-ha_cluster_exporter: CVSS (Max): None [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3847 Security update for prometheus-ha_cluster_exporter 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: prometheus-ha_cluster_exporter Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232799-1 Comment: CVSS (Max): None available when published – ————————–BEGIN INCLUDED TEXT——————– Security update for prometheus-ha_cluster_exporter Announcement ID: … Read more

ESB-2023.3846 – [SUSE] bind: CVSS (Max): 7.5 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3846 Security update for bind 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: bind Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2023-2828 Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232793-1 Comment: CVSS (Max): 7.5 CVE-2023-2828 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSS Source: SUSE Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H – ————————–BEGIN INCLUDED … Read more

ESB-2023.3845 – [SUSE] bind: CVSS (Max): 7.5 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3845 Security update for bind 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: bind Publisher: SUSE Operating System: SUSE Resolution: Patch/Upgrade CVE Names: CVE-2023-2828 Original Bulletin: https://www.suse.com/support/update/announcement/2023/suse-su-20232794-1 Comment: CVSS (Max): 7.5 CVE-2023-2828 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSS Source: SUSE Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H – ————————–BEGIN INCLUDED … Read more

ESB-2023.3820.2 – UPDATE [Cisco] Cisco Duo Authentication Proxy: CVSS (Max): 4.9 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3820.2 Cisco Duo Authentication Proxy Information Disclosure Vulnerability 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Cisco Duo Authentication Proxy Publisher: Cisco Systems Operating System: Cisco Resolution: Patch/Upgrade CVE Names: CVE-2023-20207 Original Bulletin: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-duo-auth-info-JgkSWBLz Revision History: July 10 2023: Vendor updated … Read more

ESB-2023.3818.3 – UPDATE [Cisco] Cisco ACI Multi-Site CloudSec: CVSS (Max): 7.4 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3818.3 Cisco ACI Multi-Site CloudSec Encryption Information Disclosure Vulnerability 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Cisco ACI Multi-Site CloudSec Publisher: Cisco Systems Operating System: Cisco Resolution: None CVE Names: CVE-2023-20185 Original Bulletin: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-aci-cloudsec-enc-Vs5Wn2sX Comment: CVSS (Max): 7.4 CVE-2023-20185 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) … Read more

ESB-2023.3274.4 – UPDATE [Win] AnyConnect Secure Mobility Client and Secure Client: CVSS (Max): 7.8 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3274.4 Cisco AnyConnect Secure Mobility Client Software for Windows and Cisco Secure Client Software for Windows Privilege Escalation Vulnerability 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: AnyConnect Secure Mobility Client Software Secure Client Software Publisher: Cisco Systems Operating System: Windows … Read more

ESB-2023.3856 – [Debian] ocsinventory-server: CVSS (Max): 8.0 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3856 ocsinventory-server update for php-cas 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: ocsinventory-server Publisher: Debian Operating System: Debian GNU/Linux Resolution: Patch/Upgrade CVE Names: CVE-2022-39369 Original Bulletin: https://lists.debian.org/debian-lts-announce/2023/07/msg00008.html Comment: CVSS (Max): 8.0 CVE-2022-39369 (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H – ————————–BEGIN … Read more

ESB-2023.3855 – [Debian] php-cas: CVSS (Max): 8.0 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3855 php-cas security update 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: php-cas Publisher: Debian Operating System: Debian GNU/Linux Resolution: Patch/Upgrade CVE Names: CVE-2022-39369 Original Bulletin: https://lists.debian.org/debian-lts-announce/2023/07/msg00007.html Comment: CVSS (Max): 8.0 CVE-2022-39369 (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) CVSS Source: NVD Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H – ————————–BEGIN INCLUDED … Read more

ESB-2023.3854 – [Debian] firefox-esr: CVSS (Max): 7.5 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3854 firefox-esr security update 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: firefox-esr Publisher: Debian Operating System: Debian GNU/Linux Resolution: Patch/Upgrade CVE Names: CVE-2023-37211 CVE-2023-37208 CVE-2023-37207 CVE-2023-37202 CVE-2023-37201 Original Bulletin: https://lists.debian.org/debian-lts-announce/2023/07/msg00006.html Comment: CVSS (Max): 7.5 CVE-2023-37211 (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) CVSS Source: Red Hat … Read more

ESB-2023.3853 – [Debian] nsis: CVSS (Max): None [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3853 nsis security update 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: nsis Publisher: Debian Operating System: Debian GNU/Linux Resolution: Patch/Upgrade CVE Names: CVE-2023-37378 Original Bulletin: https://lists.debian.org/debian-lts-announce/2023/07/msg00005.html Comment: CVSS (Max): None available when published – ————————–BEGIN INCLUDED TEXT——————– – ————————————————————————- Debian … Read more

ESB-2023.3852 – [Debian] debian-archive-keyring: CVSS (Max): None [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3852 debian-archive-keyring update 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: debian-archive-keyring Publisher: Debian Operating System: Debian GNU/Linux Resolution: Patch/Upgrade Original Bulletin: https://lists.debian.org/debian-lts-announce/2023/07/msg00004.html Comment: CVSS (Max): None available when published – ————————–BEGIN INCLUDED TEXT——————– – ————————————————————————- Debian LTS Advisory DLA-3482-1 [email protected] … Read more

ESB-2023.3851 – [Ubuntu] Linux kernel (Intel IoTG): CVSS (Max): 7.8 [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3851 USN-6212-1: Linux kernel (Intel IoTG) vulnerabilities 10 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: Linux kernel (Intel IoTG) Publisher: Ubuntu Operating System: Ubuntu Resolution: Patch/Upgrade CVE Names: CVE-2023-35788 Original Bulletin: https://ubuntu.com/security/notices/USN-6212-1 Comment: CVSS (Max): 7.8 CVE-2023-35788 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) CVSS Source: NVD … Read more

ASB-2023.0117 – Ventia Cyber Incident [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT Security Bulletin ASB-2023.0117 Ventia Cyber Incident 11 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— OVERVIEW News has emerged of a cyber security incident impacting a large essential infrastructure service provider based in Australia and New Zealand, Ventia [1]. IMPACT The impact is not yet known however … Read more

ASB-2023.0117 – Ventia Cyber Incident [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT Security Bulletin ASB-2023.0117 Ventia Cyber Incident 11 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— OVERVIEW News has emerged of a cyber security incident impacting a large essential infrastructure service provider based in Australia and New Zealand, Ventia [1]. IMPACT The impact is not yet known however … Read more

Squad accélère en Australie en participant au «Australia-France Defence Industry Symposium » à Adélaïde

by

Éric Guillerm, Président de Squad « Après avoir participé à la première édition des Maritime Connection Days in Australia, nous avons identifié de premiers clients et différentes opportunités de développement auprès de nombreux acteurs de l’industrie maritime en quête de solutions de cybersécurité. »