Updated firefox/nss/rootcerts packages fix security vulnerability

NSSToken objects were referenced via direct points, and could have been accessed in an unsafe way on different threads, leading to a use-after-free and potentially exploitable crash CVE-2022-1097. After a VR Process is destroyed, a reference to it may have been retained and used, leading to a...

Updated thunderbird packages fix security vulnerabilities

The updated thunderbird packages fix security vulnerabilities: Use-after-free in NSSToken objects CVE-2022-1097. Use-after-free after VR Process destruction CVE-2022-1196. OpenPGP revocation information was ignored CVE-2022-1197. Denial of Service via complex regular expressions CVE-2022-24713...

CVE-2022-29869

cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = equal sign characters but is not a valid credentials file...

SUSE-SU-2022:1437-1 Security update for buildah

This update for buildah fixes the following issues: - CVE-2022-27651: Fixed incorrect default inheritable capabilities for linux container bsc1197870. Update to version 1.25.1. The following non-security bugs were fixed: - add workaround for https://bugzilla.opensuse.org/showbug.cgi?id=1183043...

CVE-2022-23457

ESAPI The OWASP Enterprise Security API is a free, open source, web application security control library. Prior to version 2.3.0.0, the default implementation of Validator.getValidDirectoryPathString, String, File, boolean may incorrectly treat the tested input string as a child of the specified...

GSD-2022-1002471 drbd: Fix five use after free bugs in get_initial_state

drbd: Fix five use after free bugs in getinitialstate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.311 by commit...

GSD-2022-1002440 ath9k_htc: fix uninit value bugs

ath9khtc: fix uninit value bugs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.276 by commit e352acdd378e9263cc4c6018e588f2dac7161d07, it...

GSD-2022-1002308 drbd: Fix five use after free bugs in get_initial_state

drbd: Fix five use after free bugs in getinitialstate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.238 by commit...

GSD-2022-1002253 ath9k_htc: fix uninit value bugs

ath9khtc: fix uninit value bugs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.189 by commit 4d244b731188e0b63fc40a9d2dec72e9181fb37c, it...

GSD-2022-1002097 ath9k_htc: fix uninit value bugs

ath9khtc: fix uninit value bugs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.110 by commit 11f11ac281f0c0b363d2940204f28bae0422ed71, it...

GSD-2022-1001944 ax25: Fix UAF bugs in ax25 timers

ax25: Fix UAF bugs in ax25 timers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.112 by commit 5c62d3bf14100a88d30888b925fcb61a8c11c012...

GSD-2022-1001862 ath9k_htc: fix uninit value bugs

ath9khtc: fix uninit value bugs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.33 by commit 0b700f7d06492de34964b6f414120043364f8191, it...

GSD-2022-1001639 ax25: Fix UAF bugs in ax25 timers

ax25: Fix UAF bugs in ax25 timers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.35 by commit 85f25bb9a0051198af48ac2f3afc9f16f2277114. F...

GSD-2022-1001242 ath9k_htc: fix uninit value bugs

ath9khtc: fix uninit value bugs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit 5abf2b761b998063f5e2bae93fd4ab10e2a80f10, it w...

GSD-2022-1000956 ax25: Fix UAF bugs in ax25 timers

ax25: Fix UAF bugs in ax25 timers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.4 by commit 76ff66bb3b22f202c226ddbb0a811f8fb8aab2fa. Fo...

PT-2022-29515

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue concerns uninit value bugs in the ath9k htc component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.17.2,...

PT-2022-29825

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.35 through 5.16.18 Description The issue is related to uninit value bugs in the ath9k htc component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 2.6.35...

PT-2022-30370

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.35 through 5.10.109 Description The issue is related to uninit value bugs in the ath9k htc component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 2.6.3...

PT-2022-30776

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.35 through 4.9.310 Description The issue is related to uninit value bugs in the ath9k htc component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 2.6.35...

CVE-2022-28367

OWASP AntiSamy before 1.6.6 allows XSS via HTML tag smuggling on STYLE content with crafted input. The output serializer does not properly encode the supposed Cascading Style Sheets CSS content...