Read Time:6 Second
FEDORA-EPEL-2024-c1264f2cbc
Packages in this update:
botan2-2.19.5-1.el9
Update description:
Rebase to v2.19.5
Category Archives: Advisories
botan2-2.19.5-1.fc39
Read Time:6 Second
FEDORA-2024-6d84a608f1
Packages in this update:
botan2-2.19.5-1.fc39
Update description:
Rebase to v2.19.5
botan2-2.19.5-1.fc40
Read Time:6 Second
FEDORA-2024-7f42bafbdb
Packages in this update:
botan2-2.19.5-1.fc40
Update description:
Rebase to v2.19.5
CVE-2024-33326
Read Time:14 Second
Posted by Rodolfo Tavares via Fulldisclosure on Jul 10
=====[ Tempest Security Intelligence – ADV-6/2024
]==========================
LumisXP v15.0.x to v16.1.x
Author: Rodolfo Tavares
Tempest Security Intelligence – Recife, Pernambuco – Brazil
=====[ Table of Contents]==================================================
* Overview
* Detailed description
* Timeline of disclosure
* Thanks & Acknowledgements
* References
=====[ Vulnerability…
CVE-2024-33327
Read Time:14 Second
Posted by Rodolfo Tavares via Fulldisclosure on Jul 10
=====[ Tempest Security Intelligence – ADV-6/2024
]==========================
LumisXP v15.0.x to v16.1.x
Author: Rodolfo Tavares
Tempest Security Intelligence – Recife, Pernambuco – Brazil
=====[ Table of Contents]==================================================
* Overview
* Detailed description
* Timeline of disclosure
* Thanks & Acknowledgements
* References
=====[ Vulnerability…
CVE-2024-33328
Read Time:14 Second
Posted by Rodolfo Tavares via Fulldisclosure on Jul 10
=====[ Tempest Security Intelligence – ADV-6/2024
]==========================
LumisXP v15.0.x to v16.1.x
Author: Rodolfo Tavares
Tempest Security Intelligence – Recife, Pernambuco – Brazil
=====[ Table of Contents]==================================================
* Overview
* Detailed description
* Timeline of disclosure
* Thanks & Acknowledgements
* References
=====[ Vulnerability…
CVE-2024-33329
Read Time:15 Second
Posted by Rodolfo Tavares via Fulldisclosure on Jul 10
=====[ Tempest Security Intelligence – ADV-6/2024
]==========================
LumisXP v15.0.x to v16.1.x
Author: Rodolfo Tavares
Tempest Security Intelligence – Recife, Pernambuco – Brazil
=====[ Table of Contents]==================================================
Overview
Detailed description
Timeline of disclosure
Thanks & Acknowledgements
References
=====[ Vulnerability
Information]=============================================
Class:…
DSA-5729-1 apache2 – security update
Read Time:13 Second
Multiple vulnerabilities have been discovered in the Apache HTTP server,
which may result in authentication bypass, execution of scripts in
directories not directly reachable by any URL, server-side request
forgery or denial of service.
USN-6866-3: Linux kernel (Azure) vulnerabilities
Read Time:1 Minute, 26 Second
It was discovered that the ext4 file system implementation in the Linux
kernel did not properly validate data state on write operations. An
attacker could use this to construct a malicious ext4 file system image
that, when mounted, could cause a denial of service (system crash).
(CVE-2021-33631)
It was discovered that the ATA over Ethernet (AoE) driver in the Linux
kernel contained a race condition, leading to a use-after-free
vulnerability. An attacker could use this to cause a denial of service or
possibly execute arbitrary code. (CVE-2023-6270)
Sander Wiebing, Alvise de Faveri Tron, Herbert Bos, and Cristiano Giuffrida
discovered that the Linux kernel mitigations for the initial Branch History
Injection vulnerability (CVE-2022-0001) were insufficient for Intel
processors. A local attacker could potentially use this to expose sensitive
information. (CVE-2024-2201)
Gui-Dong Han discovered that the software RAID driver in the Linux kernel
contained a race condition, leading to an integer overflow vulnerability. A
privileged attacker could possibly use this to cause a denial of service
(system crash). (CVE-2024-23307)
Bai Jiaju discovered that the Xceive XC4000 silicon tuner device driver in
the Linux kernel contained a race condition, leading to an integer overflow
vulnerability. An attacker could possibly use this to cause a denial of
service (system crash). (CVE-2024-24861)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
– Block layer subsystem;
– Hardware random number generator core;
– GPU drivers;
– AFS file system;
– Memory management;
– Netfilter;
(CVE-2024-26642, CVE-2024-26922, CVE-2024-26720, CVE-2024-26736,
CVE-2024-26898, CVE-2021-47063, CVE-2023-52615)
USN-6868-2: Linux kernel (AWS) vulnerabilities
Read Time:24 Second
Sander Wiebing, Alvise de Faveri Tron, Herbert Bos, and Cristiano Giuffrida
discovered that the Linux kernel mitigations for the initial Branch History
Injection vulnerability (CVE-2022-0001) were insufficient for Intel
processors. A local attacker could potentially use this to expose sensitive
information. (CVE-2024-2201)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
– Netfilter;
(CVE-2024-26925, CVE-2024-26643)