DEBIAN-CVE-2022-49062

In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix KASAN slab-out-of-bounds in cachefilessetvolumexattr Use the actual length of volume coherency data when setting the xattr to avoid the following KASAN report. BUG: KASAN: slab-out-of-bounds in...

UBUNTU-CVE-2022-49147

In the Linux kernel, the following vulnerability has been resolved: block: Fix the maximum minor value is blkallocextminor idaallocrange..., min, max, ... returns values from min to max, inclusive. So, NREXTDEVT is a valid idx returned by blkallocextminor. This is an issue because in deviceadddis...

CVE-2022-49131 ath11k: fix kernel panic during unload/load ath11k modules

In the Linux kernel, the following vulnerability has been resolved: ath11k: fix kernel panic during unload/load ath11k modules Call netifnapidel from ath11kahbfreeextirq to fix the following kernel panic when unload/load ath11k modules for few iterations. 971.201365 Unable to handle kernel paging...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the sfc driver failing to reinitialize the xdp queue after changing the size of the rx/tx ring buffer, causi...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from ext4 in parseapplysbmountoptions that could lead to a memory leak...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the EXT4FCREPLAY bit being incorrectly used in the sstate, which could lead to memory corruption...

GHSA-GMGG-93H8-CP32 vulnerabilities

Vulnerabilities for packages: firefox-esr, firefox...

GHSA-4JV6-884H-V282 vulnerabilities

Vulnerabilities for packages: firefox-esr, firefox...

GHSA-JV24-5J5X-M8W6 vulnerabilities

Vulnerabilities for packages: firefox-esr, firefox...

GHSA-QXF6-G9X3-8W74 vulnerabilities

Vulnerabilities for packages: firefox-esr, firefox...

GHSA-HH4J-JWJV-8726 vulnerabilities

Vulnerabilities for packages: firefox-esr, firefox...

GHSA-2FG8-6GGF-J2JG vulnerabilities

Vulnerabilities for packages: firefox-esr...

GHSA-7GGP-CP85-R5CG vulnerabilities

Vulnerabilities for packages: firefox-esr...

GHSA-8XFX-RJ4P-23JM vulnerabilities

Vulnerabilities for packages: aws-network-policy-agent, cosign-fips, apache-beam-python-3.11-sdk, k8ssandra-client-fips, protoc-gen-go, cass-operator-fips-no-pvc-delete, prometheus-node-exporter-fips, rabbitmq-messaging-topology-operator, helm-operator-fips, policy-controller-fips, fulcio,...

GHSA-J7VJ-RW65-4V26 vulnerabilities

Vulnerabilities for packages: aws-network-policy-agent, cosign-fips, apache-beam-python-3.11-sdk, k8ssandra-client-fips, protoc-gen-go, cass-operator-fips-no-pvc-delete, prometheus-node-exporter-fips, rabbitmq-messaging-topology-operator, helm-operator-fips, policy-controller-fips, fulcio,...

GHSA-HW49-2P59-3MHJ vulnerabilities

Vulnerabilities for packages: aws-network-policy-agent, cosign-fips, protoc-gen-go, cass-operator-fips-no-pvc-delete, prometheus-node-exporter-fips, rabbitmq-messaging-topology-operator, helm-operator-fips, policy-controller-fips, fulcio, kubevela, kyverno-policy-reporter-ui, hubble,...

Palo Alto Networks Cortex XDR code-related vulnerabilities

Palo Alto Networks Cortex XDR is an extended detection and response platform that natively integrates network, endpoint, cloud, and third-party data from Palo Alto Networks, USA. A code issue vulnerability exists in Palo Alto Networks Cortex XDR, which stems from a faulty detection mechanism that...

CVE-2024-13554

The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the reorderroute function in all versions up to, and including, 3.0.13. This makes it possible for unauthenticated attackers to reorder pos...

firefox: thunderbird: Potential opening of private browsing tabs in normal browsing windows

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A race condition could have led to private browsing tabs being opened in normal browsing windows. This could have resulted in a potential privacy leak...

firefox: thunderbird: Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.7

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Memory safety bugs present in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6. Some of these bugs showed evidence of memory...