CVE-2024-6409 is a race condition vulnerability in OpenSSH server's signal handling that may allow remote code execution by an unprivileged user. The issue occurs when the sshd process handles a SIGALRM signal asynchronously during authentication timeout, invoking non-async-signal-safe functions like syslog(). This affects OpenSSH versions from 9.0 up to but not including 9.0.3. Red Hat has released security updates addressing this flaw for Red Hat Enterprise Linux 9 and related products. No known exploits are reported in the wild.
.NET 6.0 versions prior to SDK 6.0.132 and Runtime 6.0.32 contain a vulnerability that allows denial of service (DoS) when parsing X.509 content and Object Identifiers. This issue is tracked as CVE-2024-38095. Red Hat and SUSE have released security updates addressing this vulnerability in their respective .NET 6.0 packages for Red Hat Enterprise Linux 8 and related distributions. The vulnerability is rated as moderate severity by Red Hat Product Security. No CVSS score is provided in the advisory. The fix is available and should be applied to mitigate the issue.
A security update for OpenSSH addresses a vulnerability (CVE-2024-6387) involving a race condition in signal handling that could allow remote code execution. This affects Red Hat Enterprise Linux 9 variants and OpenShift Container Platform versions 4.15 up to but not including 4.16. The vulnerability has a CVSS v3.1 base score of 8.1, indicating high severity. Users should upgrade to the updated packages and images provided by Red Hat to mitigate the issue.
A vulnerability in the QEMU disk image utility (qemu-img) 'info' command allows a specially crafted image file containing a json:{} value describing block devices in QMP to cause excessive memory or CPU consumption. This can lead to denial of service or unintended read/write access to an existing external file on the host running the process. The issue affects the Advanced Virtualization module used in Red Hat environments with KVM. The severity is assessed as high. No CVSS score is provided.
Multiple security vulnerabilities have been identified in Git, a distributed version control system, including several remote code execution (RCE) flaws and issues related to insecure hardlinks and symlink bypass. These vulnerabilities affect local and recursive cloning operations. A security update addressing these issues has been released by Red Hat for Red Hat Enterprise Linux 9 and related distributions. The update mitigates the risks posed by these vulnerabilities.
Red Hat has issued an important security update upgrading Firefox to version 115.12.0 ESR and Thunderbird to 115.12 to address multiple vulnerabilities. These include use-after-free bugs in networking and JavaScript object transplant, timing attacks leaking external protocol handlers, sandbox bypasses by iframes, cross-origin image leaks, and memory corruption issues. The update fixes memory safety bugs affecting Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12. Users are advised to apply the update and restart the affected applications.
Flatpak versions prior to 1.10.9, 1.12.9, 1.14.6, and 1.15.8 contain a vulnerability that allows a malicious or compromised Flatpak application to execute arbitrary code outside its sandbox. This sandbox escape is due to improper handling of the --command argument in the flatpak run command, which can be exploited via the org.freedesktop.portal.Background.RequestBackground interface. The vulnerability is addressed by changes in how arguments are passed to bubblewrap (bwrap) and mitigated in xdg-desktop-portal 1.18.4 by restricting command creation. Patches are available in the specified fixed versions.
Multiple security issues were addressed in the nodejs-electron-27.3.3-1.1 package distributed on the GA media of openSUSE Tumbleweed. These fixes improve the security posture of the affected package. No specific vulnerability details or affected versions are provided.
A low severity security vulnerability (CVE-2024-25629) exists in the c-ares C library used for asynchronous DNS requests and name resolving. The vulnerability is an out-of-bounds read in the ares__read_line() function. Red Hat has issued a security advisory (RHSA-2024:3842) providing updates for Red Hat Enterprise Linux 9 and its variants to address this issue. The update fixes the out-of-bounds read to prevent potential memory safety issues. No known exploits are reported in the wild. The vulnerability affects multiple architectures and variants of Red Hat Enterprise Linux 9. A patch is available and should be applied to affected systems.
A security update for Ruby has been issued by the SUSE Product Security Team addressing vulnerabilities including CVE-2024-27280 and related CVEs. The update corresponds functionally to Red Hat advisory RHSA-2024:3670. The severity of these vulnerabilities is assessed as low. No specific affected Ruby versions are explicitly stated beyond certain SUSE package versions. No CVSS score is provided, and no known exploits are reported in the wild.
A security update for the Linux kernel addresses two vulnerabilities: a possible use-after-free and null pointer dereference in the IPv6 Segment Routing (SR) implementation (CVE-2024-26735), and a reference leak in the sysfs subsystem (CVE-2024-26993). These issues affect Red Hat Enterprise Linux 9 and related distributions. The update is rated as moderate severity and requires a system reboot to apply. No known exploits are reported in the wild at this time.
libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C.
Security Fix(es):
* nghttp2: CONTINUATION frames DoS (CVE-2024-28182,VU#421644.5)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Multiple moderate-severity vulnerabilities have been identified in the Linux kernel packages used by Red Hat Enterprise Linux 9. These issues involve netfilter nf_tables handling of anonymous sets with timeout flags, sanitization of protocol numbers in custom expectations, and prevention of perpetual headroom growth in IP tunnels. Red Hat has released a security update that addresses these vulnerabilities. Applying the update requires a system reboot to take effect.
Multiple security vulnerabilities have been identified in Node.js, including denial of service issues via the fetch() function and CONTINUATION frames, an out-of-bounds read in the c-ares library, and HTTP request smuggling via content length obfuscation. These vulnerabilities affect Node.js as packaged in Red Hat Enterprise Linux 8 and related distributions. Red Hat has issued security updates addressing these issues.
Mozilla Firefox versions prior to 115.11.0 ESR contain multiple security vulnerabilities including arbitrary JavaScript execution in PDF.js, retention of IndexedDB files in private browsing mode, permissions request bypass via clickjacking, cross-origin response content-type distinction, use-after-free when printing to PDF, and various memory safety bugs. These issues are addressed in Firefox ESR 115.11.0 and Firefox 126. The update is rated as important by Red Hat Product Security and affects Red Hat Enterprise Linux 9 variants. Users should upgrade to Firefox ESR 115.11.0 or later to mitigate these vulnerabilities.
This security update addresses vulnerabilities identified in dotnet8.0 as referenced by the Red Hat advisory RHSA-2024:2842. The update is provided by the SUSE Product Security Team and relates to CVE-2024-30045. No specific affected versions or detailed technical information are provided in the available data. The severity is assessed as low.
.NET 7.0 for Red Hat Enterprise Linux received an important security update addressing multiple vulnerabilities, including a stack buffer overrun in the Double Parse function (CVE-2024-30045) and a denial of service in ASP.NET Core due to a deadlock (CVE-2024-30046). These vulnerabilities could cause application crashes or service disruption. Updated .NET SDK 7.0.119 and .NET Runtime 7.0.19 versions are available to remediate these issues.
A use-after-free vulnerability (CWE-416) exists in the XMLReader component of the libxml2 library, tracked as CVE-2024-25062. This vulnerability affects multiple versions of Red Hat Enterprise Linux 8 and 9 across various architectures. Exploitation could lead to memory corruption or application crashes. Red Hat has released security updates to address this issue and recommends applying these updates and restarting the desktop session for the fix to take effect. The severity is rated as moderate.