VegaBird Yaazhini version 2.0.2 suffers from a dll hijacking vulnerability.

    ====================================CVE ID: CVE-2024-45873Author: Iulian FloreaVendor: VegaBirdProduct:  Vooki - Free Android APK & API Vulnerability Scanner(Yaazhini)Vulnerability Type: DLL Hijacking========================================================================Summary==================================== A DLL hijacking vulnerability in VegaBird Yaazhini 2.0.2 allows attackers to execute arbitrary code / maintain persistence via placing a crafted DLL file in the same directory as Yaazhini.exe.====================================Exploitation====================================By placing an arbitrary DLL (Example: dcomp.dll) within the application folder (C:\Users\<USER>\AppData\Local\Programs\Yaazhini) and opening the application (Yaazhini.exe) it can be noted that the DLL is being loaded. This can lead to persistence or in some cases to privilege escalation.

VegaBird Yaazhini 2.0.2 DLL Hijacking

Gentoo Linux Security Advisory 202409-32 - Multiple vulnerabilities have been discovered in nginx, the worst of which could result in denial of service. Versions greater than or equal to 1.26.2-r2 are affected.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -  
Gentoo Linux Security Advisory                           GLSA 202409-32  
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -  
                                           https://security.gentoo.org/  
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

 Severity: Low  
    Title: nginx: Multiple Vulnerabilities  
     Date: September 28, 2024  
     Bugs: #924619, #937938  
       ID: 202409-32

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Synopsis  
========

Multiple vulnerabilities have been discovered in nginx, the worst of  
which could result in denial of service.

Background  
==========

nginx is a robust, small, and high performance HTTP and reverse proxy  
server.

Affected packages  
=================

Package            Vulnerable    Unaffected  
-----------------  ------------  ------------  
www-servers/nginx  < 1.26.2-r2   >= 1.26.2-r2

Description  
===========

Multiple vulnerabilities have been discovered in nginx. Please review  
the CVE identifiers referenced below for details.

Impact  
======

Please review the referenced CVE identifiers for details.

Workaround  
==========

There is no known workaround at this time.

Resolution  
==========

All nginx users should upgrade to the latest version:

  # emerge --sync  
  # emerge --ask --oneshot --verbose ">=www-servers/nginx-1.26.2-r2"

References  
==========

[ 1 ] CVE-2024-7347  
      https://nvd.nist.gov/vuln/detail/CVE-2024-7347  
[ 2 ] CVE-2024-24989  
      https://nvd.nist.gov/vuln/detail/CVE-2024-24989  
[ 3 ] CVE-2024-24990  
      https://nvd.nist.gov/vuln/detail/CVE-2024-24990

Availability  
============

This GLSA and any updates to it are available for viewing at  
the Gentoo Security Website:

 https://security.gentoo.org/glsa/202409-32

Concerns?  
=========

Security is a primary focus of Gentoo Linux and ensuring the  
confidentiality and security of our users' machines is of utmost  
importance to us. Any security concerns should be addressed to  
security@gentoo.org or alternatively, you may file a bug at  
https://bugs.gentoo.org.

License  
=======

Copyright 2024 Gentoo Foundation, Inc; referenced text  
belongs to its owner(s).

The contents of this document are licensed under the  
Creative Commons - Attribution / Share Alike license.

https://creativecommons.org/licenses/by-sa/2.5

Gentoo Linux Security Advisory 202409-32

Gentoo Linux Security Advisory 202409-31 - Multiple vulnerabilities have been found in Apache HTTPD, the worst of which could result in denial of service. Versions greater than or equal to 2.4.62 are affected.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -  
Gentoo Linux Security Advisory                           GLSA 202409-31  
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -  
                                           https://security.gentoo.org/  
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

 Severity: Low  
    Title: Apache HTTPD: Multiple Vulnerabilities  
     Date: September 28, 2024  
     Bugs: #928540, #935296, #935427, #936257  
       ID: 202409-31

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Synopsis  
========

Multiple vulnerabilities have been found in Apache HTTPD, the worst of  
which could result in denial of service.

Background  
==========

The Apache HTTP server is one of the most popular web servers on the  
Internet.

Affected packages  
=================

Package             Vulnerable    Unaffected  
------------------  ------------  ------------  
www-servers/apache  < 2.4.62      >= 2.4.62

Description  
===========

Multiple vulnerabilities have been discovered in Apache HTTPD. Please  
review the CVE identifiers referenced below for details.

Impact  
======

Please review the referenced CVE identifiers for details.

Workaround  
==========

There is no known workaround at this time.

Resolution  
==========

All Apache HTTPD users should upgrade to the latest version:

  # emerge --sync  
  # emerge --ask --oneshot --verbose ">=www-servers/apache-2.4.62"

References  
==========

[ 1 ] CVE-2023-38709  
      https://nvd.nist.gov/vuln/detail/CVE-2023-38709  
[ 2 ] CVE-2024-24795  
      https://nvd.nist.gov/vuln/detail/CVE-2024-24795  
[ 3 ] CVE-2024-27316  
      https://nvd.nist.gov/vuln/detail/CVE-2024-27316  
[ 4 ] CVE-2024-36387  
      https://nvd.nist.gov/vuln/detail/CVE-2024-36387  
[ 5 ] CVE-2024-38472  
      https://nvd.nist.gov/vuln/detail/CVE-2024-38472  
[ 6 ] CVE-2024-38473  
      https://nvd.nist.gov/vuln/detail/CVE-2024-38473  
[ 7 ] CVE-2024-38474  
      https://nvd.nist.gov/vuln/detail/CVE-2024-38474  
[ 8 ] CVE-2024-38475  
      https://nvd.nist.gov/vuln/detail/CVE-2024-38475  
[ 9 ] CVE-2024-38476  
      https://nvd.nist.gov/vuln/detail/CVE-2024-38476  
[ 10 ] CVE-2024-38477  
      https://nvd.nist.gov/vuln/detail/CVE-2024-38477  
[ 11 ] CVE-2024-39573  
      https://nvd.nist.gov/vuln/detail/CVE-2024-39573  
[ 12 ] CVE-2024-39884  
      https://nvd.nist.gov/vuln/detail/CVE-2024-39884  
[ 13 ] CVE-2024-40725  
      https://nvd.nist.gov/vuln/detail/CVE-2024-40725  
[ 14 ] CVE-2024-40898  
      https://nvd.nist.gov/vuln/detail/CVE-2024-40898

Availability  
============

This GLSA and any updates to it are available for viewing at  
the Gentoo Security Website:

 https://security.gentoo.org/glsa/202409-31

Concerns?  
=========

Security is a primary focus of Gentoo Linux and ensuring the  
confidentiality and security of our users' machines is of utmost  
importance to us. Any security concerns should be addressed to  
security@gentoo.org or alternatively, you may file a bug at  
https://bugs.gentoo.org.

License  
=======

Copyright 2024 Gentoo Foundation, Inc; referenced text  
belongs to its owner(s).

The contents of this document are licensed under the  
Creative Commons - Attribution / Share Alike license.

https://creativecommons.org/licenses/by-sa/2.5

Gentoo Linux Security Advisory 202409-31

BlackBerry CylanceOPTICS versions prior to 3.3 MR2 and 3.2 MR5 suffer from an uninstall password bypass vulnerability.

SEC Consult Vulnerability Lab Security Advisory < 20240925-0 >  
=======================================================================  
              title: Uninstall Password Bypass  
            product: BlackBerry CylanceOPTICS Windows Installer Package  
 vulnerable version: CylanceOPTICS <3.3 MR2  
                     CylanceOPTICS <3.2 MR5  
      fixed version: CylanceOPTICS 3.3 MR2  
                     CylanceOPTICS 3.2 MR5  
         CVE number: CVE-2024-35214  
             impact: high  
           homepage: https://www.blackberry.com/us/en/support/cylance  
              found: 2023-12-12  
                 by: Initially by Rene Grubmair (Greiner)  
                     P. Espernberger (Office Leonding)  
                     M. Engleitner (Office Leonding)  
                     SEC Consult Vulnerability Lab

                     An integrated part of SEC Consult, an Eviden business  
                     Europe | Asia

                     https://www.sec-consult.com

=======================================================================

Vendor description:  
-------------------  
"CylanceOPTICS is an endpoint detection and response solution that collects  
and analyzes forensic data from devices to identify and resolve threats  
before they impact your organization’s users and data."

Source: https://docs.blackberry.com/en/unified-endpoint-security/blackberry-ues/overview/What-is-BlackBerry-Optics

Business recommendation:  
------------------------  
The vendor provides a patched version which should be installed immediately.

SEC Consult highly recommends to perform a thorough security review of the  
product conducted by security professionals to identify and resolve potential  
further security issues.

Vulnerability overview/description:  
-----------------------------------  
1) Uninstall Password Bypass (CVE-2024-35214)  
Due to the quiet (un-)installation feature offered by the CylanceOPTICS  
application, the uninstaller can be called directly without requiring  
a previously set uninstall password.

In order to exploit this vulnerability, an attacker must have local admin  
rights.

Proof of concept:  
-----------------  
1) Uninstall Password Bypass (CVE-2024-35214)  
The path to the MSI uninstaller can be found by searching the  
Windows Registry for "CylanceOPTICS" which results in the following  
node containing uninstall information for the 64bit application:

HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{6e96194b-ca7b-40a4-badd-7eac94ea62c7}

To uninstall CylanceOPTICS without being prompted for a password,  
the QuietUninstallString command is executed as privileged user on  
the system.

"C:\ProgramData\Package Cache\{6e96194b-ca7b-40a4-badd-7eac94ea62c7}\CylanceOPTICSSetup.exe" /uninstall /quiet

Afterwards, the CylanceOPTICS application is successfully removed.

Vulnerable / tested versions:  
-----------------------------  
The following version has been tested by SEC Consult which was the most  
recent version available at the time of the test:  
* 3.2.2199.0

According to the vendor, all previous versions are affected:  
* CylanceOPTICS <3.3 MR2  
* CylanceOPTICS <3.2 MR5

Vendor contact timeline:  
------------------------  
2024-02-02: Contacting vendor through secure@blackberry.com, case  
            BIRT2024-00128 was created  
2024-02-02: Auto-response, case is being tracked as # BIRT2024-00128  
2024-02-07: Vendor requests settings of the CylanceConsole device.  
            Vendor is currently attempting to reproduce the vulnerability.  
2024-02-08: The requested settings were provided.  
2024-02-09: Vendor confirms the Uninstall Password Bypass vulnerability.  
            Additional information (log files) are requested.  
            Clarification of the impact of the vulnerability is requested.  
2024-02-15: Explanation has been sent. Log files could not be provided  
            as the device has already been reset.  
2024-02-15: The vulnerability was escalated to the development team.  
2024-02-23: Short update was provided outlining the current plan to  
            fix the vulnerability until summer 2024.  
            Vendor commits to bi-weekly updates on their progress.  
2024-04-19: Expected release date (June 3rd) was communicated and  
            the CVE number was provided.  
2024-05-21: Coordination of the joint release date (2024-06-11) and  
            providing the updated security advisory and new CVE number.  
2024-06-07: Vendor released CylanceOPTICS 3.3 MR1 and CylanceOPTICS 3.2 MR4  
            on 4th June. But requests advisory disclosure to be delayed to  
            10th September because of identified weakness in current solution.  
2024-08-20: Vendor releases new version 3.3 MR2 and 3.2 MR5.  
2024-09-25: Coordinated release of security advisory.

SEC Consult was informed about the progress bi-weekly.  
Only the most relevant information is included in the timeline.

Solution:  
---------  
The vendor provides the following patched versions to their customers:  
* CylanceOPTICS 3.3 MR2  
* CylanceOPTICS 3.2 MR5

In addition to the updated versions, the vendor has released an  
optional script which customers can run to remove the old version and replace  
it with the update. New customers, or customers who uninstall /  
reinstall will not need to run the script, nor will existing customers  
who have not configured an Uninstall password.

The vendor provides the following security notes with further information:  
https://support.blackberry.com/pkb/s/article/140080

Workaround:  
-----------  
As a workaround, it is possible to delete the affected CylanceOPTICSSetup.exe  
binary.

Advisory URL:  
-------------  
https://sec-consult.com/vulnerability-lab/

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

SEC Consult Vulnerability Lab  
An integrated part of SEC Consult, an Eviden business  
Europe | Asia

About SEC Consult Vulnerability Lab  
The SEC Consult Vulnerability Lab is an integrated part of SEC Consult, an  
Eviden business. It ensures the continued knowledge gain of SEC Consult in the  
field of network and application security to stay ahead of the attacker. The  
SEC Consult Vulnerability Lab supports high-quality penetration testing and  
the evaluation of new offensive and defensive technologies for our customers.  
Hence our customers obtain the most current information about vulnerabilities  
and valid recommendation about the risk profile of new technologies.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~  
Interested to work with the experts of SEC Consult?  
Send us your application https://sec-consult.com/career/

Interested in improving your cyber security with the experts of SEC Consult?  
Contact our local offices https://sec-consult.com/contact/  
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Mail: security-research at sec-consult dot com  
Web: https://www.sec-consult.com  
Blog: https://blog.sec-consult.com  
Twitter: https://twitter.com/sec_consult

EOF M. Engleitner, P. Espernberger / @2024

BlackBerry CylanceOPTICS Uninstall Password Bypass

Debian Linux Security Advisory 5777-1 - It was discovered that the Booth cluster ticket manager failed to correctly validate some authentication hashes.

-----BEGIN PGP SIGNED MESSAGE-----  
Hash: SHA512

- -------------------------------------------------------------------------  
Debian Security Advisory DSA-5777-1                   security@debian.org  
https://www.debian.org/security/                       Moritz Muehlenhoff  
September 27, 2024                    https://www.debian.org/security/faq  
- -------------------------------------------------------------------------

Package        : booth  
CVE ID         : CVE-2024-3049

It was discovered that the Booth cluster ticket manager failed to  
correctly validate some authentication hashes.

For the stable distribution (bookworm), this problem has been fixed in  
version 1.0-283-g9d4029a-2+deb12u1.

We recommend that you upgrade your booth packages.

For the detailed security status of booth please refer to  
its security tracker page at:  
https://security-tracker.debian.org/tracker/booth

Further information about Debian Security Advisories, how to apply  
these updates to your system and frequently asked questions can be  
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org  
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmb22HgACgkQEMKTtsN8  
TjZI6Q//QX5bGCCAzOJDo9KTp8iixUenBrznfyctVZ0pFVKAIP3ENACkW0rMH+Sw  
GBIsIJRCQwdBbSYV1Jn3F2i7wvMby2HUhabMsnorM49lC0ptoz6HZ6iKWcIvZwRF  
vDmFPnCEfVVbGZy+6NkQMNDQb0PzbKtGT70L/E3Iss3Dtpknd97tNu4urJTleSG8  
ZkrM3QkXs/4IPluEYTrnoJHXR7sJ5GyqPBRZnLn7Lwx3bPesN7E7Zz5UClyMr6iO  
teExKLY/Vfjh507818eaVHRcoEDSElZjb//93RzyOuGpUNnwCNKLkwsGIlmsFfmC  
0ikzeO9eDe1y6EvpY7/xAWneoxGnX9CKjcwUVD0Kqq7hHnpxP/506Alp38D07tWn  
s+Yz7SeK4RSIDIzwb0gCLmt22eE6t/3cZxR1RE9qk1hWwuV/YdB8WyYqPz410myN  
JO2IFWg9NzGP5zOWtuyytzOZTEHkLvNp5i4ktIU16Y4tLvstgSnNUoSHImr6YXrC  
hOVWmqvqif3UurHCctHfmZVkjMFmFcKPjOFOQ3TNEuDAT3PtUNGs5aSEVMhtMvUp  
oPYLRVxRYKSqP61rwUoyPlaOB39vtraKdMiTvjm8VNUS655lPB/VOZibVhI8+ym4  
/H7mXtJXBN8LsdVx4+Nnr2wc4ZFtVXUGdyChER8+VmfLDtfwkZk=  
=futv  
-----END PGP SIGNATURE-----

Debian Security Advisory 5777-1

Gentoo Linux Security Advisory 202409-30 - Multiple vulnerabilities have been found in yt-dlp, the worst of which could result in arbitrary code execution. Versions greater than or equal to 2024.07.01 are affected.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -  
Gentoo Linux Security Advisory                           GLSA 202409-30  
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -  
                                           https://security.gentoo.org/  
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

 Severity: Normal  
    Title: yt-dlp: Multiple Vulnerabilities  
     Date: September 28, 2024  
     Bugs: #909780, #917355, #935316  
       ID: 202409-30

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Synopsis  
========

Multiple vulnerabilities have been found in yt-dlp, the worst of which  
could result in arbitrary code execution.

Background  
==========

yt-dlp is a youtube-dl fork with additional features and fixes.

Affected packages  
=================

Package          Vulnerable    Unaffected  
---------------  ------------  -------------  
net-misc/yt-dlp  < 2024.07.01  >= 2024.07.01

Description  
===========

Multiple vulnerabilities have been found in yt-dlp. Please review the  
referenced CVE identifiers for details.

Impact  
======

Please review the referenced CVE identifiers for details.

Workaround  
==========

There is no known workaround at this time.

Resolution  
==========

All yt-dlp users should upgrade to the latest version:

  # emerge --sync  
  # emerge --ask --oneshot --verbose ">=net-misc/yt-dlp-2024.07.01"

References  
==========

[ 1 ] CVE-2023-35934  
      https://nvd.nist.gov/vuln/detail/CVE-2023-35934  
[ 2 ] CVE-2023-46121  
      https://nvd.nist.gov/vuln/detail/CVE-2023-46121  
[ 3 ] CVE-2024-38519  
      https://nvd.nist.gov/vuln/detail/CVE-2024-38519

Availability  
============

This GLSA and any updates to it are available for viewing at  
the Gentoo Security Website:

 https://security.gentoo.org/glsa/202409-30

Concerns?  
=========

Security is a primary focus of Gentoo Linux and ensuring the  
confidentiality and security of our users' machines is of utmost  
importance to us. Any security concerns should be addressed to  
security@gentoo.org or alternatively, you may file a bug at  
https://bugs.gentoo.org.

License  
=======

Copyright 2024 Gentoo Foundation, Inc; referenced text  
belongs to its owner(s).

The contents of this document are licensed under the  
Creative Commons - Attribution / Share Alike license.

https://creativecommons.org/licenses/by-sa/2.5

Gentoo Linux Security Advisory 202409-30

Gentoo Linux Security Advisory 202409-29 - Multiple vulnerabilities have been discovered in Docker, the worst of which could result in denial of service. Versions greater than or equal to 25.0.4 are affected.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -  
Gentoo Linux Security Advisory                           GLSA 202409-29  
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -  
                                           https://security.gentoo.org/  
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

 Severity: Low  
    Title: Docker: Multiple Vulnerabilities  
     Date: September 28, 2024  
     Bugs: #816273, #869407, #877653, #886509, #903804, #905336, #925022  
       ID: 202409-29

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Synopsis  
========

Multiple vulnerabilities have been discovered in Docker, the worst of  
which could result in denial of service.

Background  
==========

Docker contains the the core functions you need to create Docker images  
and run Docker containers

Affected packages  
=================

Package                Vulnerable    Unaffected  
---------------------  ------------  ------------  
app-containers/docker  < 25.0.4      >= 25.0.4

Description  
===========

Multiple vulnerabilities have been discovered in Docker. Please review  
the CVE identifiers referenced below for details.

Impact  
======

Please review the referenced CVE identifiers for details.

Workaround  
==========

There is no known workaround at this time.

Resolution  
==========

All Docker users should upgrade to the latest version:

  # emerge --sync  
  # emerge --ask --oneshot --verbose ">=app-containers/docker-25.0.4"

References  
==========

[ 1 ] CVE-2021-41089  
      https://nvd.nist.gov/vuln/detail/CVE-2021-41089  
[ 2 ] CVE-2021-41091  
      https://nvd.nist.gov/vuln/detail/CVE-2021-41091  
[ 3 ] CVE-2022-36109  
      https://nvd.nist.gov/vuln/detail/CVE-2022-36109  
[ 4 ] CVE-2022-41717  
      https://nvd.nist.gov/vuln/detail/CVE-2022-41717  
[ 5 ] CVE-2023-26054  
      https://nvd.nist.gov/vuln/detail/CVE-2023-26054  
[ 6 ] CVE-2023-28840  
      https://nvd.nist.gov/vuln/detail/CVE-2023-28840  
[ 7 ] CVE-2023-28841  
      https://nvd.nist.gov/vuln/detail/CVE-2023-28841  
[ 8 ] CVE-2023-28842  
      https://nvd.nist.gov/vuln/detail/CVE-2023-28842  
[ 9 ] CVE-2024-23650  
      https://nvd.nist.gov/vuln/detail/CVE-2024-23650  
[ 10 ] CVE-2024-23651  
      https://nvd.nist.gov/vuln/detail/CVE-2024-23651  
[ 11 ] CVE-2024-23652  
      https://nvd.nist.gov/vuln/detail/CVE-2024-23652  
[ 12 ] CVE-2024-23653  
      https://nvd.nist.gov/vuln/detail/CVE-2024-23653  
[ 13 ] CVE-2024-24557  
      https://nvd.nist.gov/vuln/detail/CVE-2024-24557

Availability  
============

This GLSA and any updates to it are available for viewing at  
the Gentoo Security Website:

 https://security.gentoo.org/glsa/202409-29

Concerns?  
=========

Security is a primary focus of Gentoo Linux and ensuring the  
confidentiality and security of our users' machines is of utmost  
importance to us. Any security concerns should be addressed to  
security@gentoo.org or alternatively, you may file a bug at  
https://bugs.gentoo.org.

License  
=======

Copyright 2024 Gentoo Foundation, Inc; referenced text  
belongs to its owner(s).

The contents of this document are licensed under the  
Creative Commons - Attribution / Share Alike license.

https://creativecommons.org/licenses/by-sa/2.5

Gentoo Linux Security Advisory 202409-29

A single command line can show you about 20,000 instances of CWE-73 issues with Microsoft Windows.

    Hi @ll,<https://cwe.mitre.org/data/definitions/73.html>CWE-73: External Control of File Name or Pathis a well-known and well-documented weakness.<https://seclists.org/fulldisclosure/2020/Mar/48> as well as<https://skanthak.homepage.t-online.de/offender.html> demonstrate how to(ab)use just one instance of this weakness (introduced about 7 years agowith Microsoft Defender, so-called "security software") due to anenvironment variable in the (registered) path name of an executable fileto gain execution of arbitrary code.But that's of course not the only instance of this VERY EASY to exploitweakness present in ALL versions of Windows since more than 30 (in words:THIRTY) years -- start a command processor and run the following commandline to show about 20,000 instances of path names registered with (user-controlled) environment variables:    REG.exe QUERY HKEY_LOCAL_MACHINE /C /D /F "%*%\\" /Sstay tuned, and far away from the vulnerable crap made in RedmondStefan KanthakPS: just yesterday, Microsoft dared to publish    <https://www.microsoft.com/en-us/security/blog/2024/09/23/securing-our-future-september-2024-progress-update-on-microsofts-secure-future-initiative-sfi/>,    bragging "we've dedicated the equivalent of 34,000 full-time engineers    to SFI-making it the largest cybersecurity engineering effort in history"    What about dedicating the equivalent of just ONE full-time employee to    every instance of just ONE ow Windows weaknesses?

Microsoft CWE-73 Weakness

Debian Linux Security Advisory 5776-1 - Albert Cervera discovered two missing authorisation checks in the Tryton application platform.

    -----BEGIN PGP SIGNED MESSAGE-----Hash: SHA512- -------------------------------------------------------------------------Debian Security Advisory DSA-5776-1                   security@debian.orghttps://www.debian.org/security/                       Moritz MuehlenhoffSeptember 27, 2024                    https://www.debian.org/security/faq- -------------------------------------------------------------------------Package        : tryton-serverCVE ID         : not yet availableAlbert Cervera discovered two missing authorisation checks in the Trytonapplication platform.For the stable distribution (bookworm), this problem has been fixed inversion 6.0.29-2+deb12u3.We recommend that you upgrade your tryton-server packages.For the detailed security status of tryton-server please refer toits security tracker page at:https://security-tracker.debian.org/tracker/tryton-serverFurther information about Debian Security Advisories, how to applythese updates to your system and frequently asked questions can befound at: https://www.debian.org/security/Mailing list: debian-security-announce@lists.debian.org-----BEGIN PGP SIGNATURE-----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a8Sz-----END PGP SIGNATURE-----

Debian Security Advisory 5776-1

Gentoo Linux Security Advisory 202409-28 - Multiple vulnerabilities have been discovered in HashiCorp Consul, the worst of which could result in denial of service. Versions greater than or equal to 1.15.10 are affected.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -  
Gentoo Linux Security Advisory                           GLSA 202409-28  
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -  
                                           https://security.gentoo.org/  
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

 Severity: Low  
    Title: HashiCorp Consul: Multiple Vulnerabilities  
     Date: September 28, 2024  
     Bugs: #885997  
       ID: 202409-28

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Synopsis  
========

Multiple vulnerabilities have been discovered in HashiCorp Consul, the  
worst of which could result in denial of service.

Background  
==========

HashiCorp Consul is a tool for service discovery, monitoring and  
configuration.

Affected packages  
=================

Package           Vulnerable    Unaffected  
----------------  ------------  ------------  
app-admin/consul  < 1.15.10     >= 1.15.10

Description  
===========

Multiple vulnerabilities have been found in HashiCorp Consul. Please  
review the CVE identifiers referenced below for details.

Impact  
======

Please review the CVE identifiers referenced below for details.

Workaround  
==========

There is no known workaround at this time.

Resolution  
==========

All HashiCorp Consul users should upgrade to the latest version:

  # emerge --sync  
  # emerge --ask --oneshot --verbose ">=app-admin/consul-1.15.10"

References  
==========

[ 1 ] CVE-2022-41717  
      https://nvd.nist.gov/vuln/detail/CVE-2022-41717

Availability  
============

This GLSA and any updates to it are available for viewing at  
the Gentoo Security Website:

 https://security.gentoo.org/glsa/202409-28

Concerns?  
=========

Security is a primary focus of Gentoo Linux and ensuring the  
confidentiality and security of our users' machines is of utmost  
importance to us. Any security concerns should be addressed to  
security@gentoo.org or alternatively, you may file a bug at  
https://bugs.gentoo.org.

License  
=======

Copyright 2024 Gentoo Foundation, Inc; referenced text  
belongs to its owner(s).

The contents of this document are licensed under the  
Creative Commons - Attribution / Share Alike license.

https://creativecommons.org/licenses/by-sa/2.5

Latest News