Ubuntu 16.04 ESM : Pillow vulnerabilities (USN-5227-2)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5227-2 advisory. USN-5227-1 fixed several vulnerabilities in Pillow. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Tenable has...

[SECURITY] [DLA 2882-1] sphinxsearch security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2882-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz January 17, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2881-1] thunderbird security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2881-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort January 16, 2022 https://wiki.debian.org/LTS -...

Debian DLA-2881-1 : thunderbird - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2881 advisory. - Mozilla developers Calixte Denizet, Kershaw Chang, Christian Holler, Jason Kratzer, Gabriele Svelto, Tyson Smith, Simon Giesecke, and Steve Fink reported memory...

Ubuntu: Security Advisory (USN-5227-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 20.04 LTS : systemd vulnerability (USN-5226-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5226-1 advisory. It was discovered that systemd-tmpfiles employed uncontrolled recursion when removing deeply nested directory hierarchies. A local attacker could exploit this to...

USN-5225-1: lxml vulnerability

It was discovered that lxml incorrectly handled certain XML and HTML files. An attacker could possibly use this issue to execute arbitrary code...

USN-5224-1: Ghostscript vulnerabilities

It was discovered that Ghostscript incorrectly handled certain PostScript files. If a user or automated system were tricked into processing a specially crafted file, a remote attacker could possibly use this issue to cause Ghostscript to crash, resulting in a denial of service, or possibly execut...

Ubuntu 20.04 LTS : Exiv2 regression (USN-5043-2)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5043-2 advisory. USN-5043-1 fixed vulnerabilities in Exiv2. The update introduced a new regression that could cause a crash in applications using libexiv2. This update fixes the...

Debian DLA-2878-1 : roundcube - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2878 advisory. - Roundcube before 1.4.13 and 1.5.x before 1.5.2 allows XSS via an HTML e-mail message with crafted Cascading Style Sheets CSS token sequences. CVE-2021-46144 Note that...

Debian DLA-2877-1 : gdal - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2877 advisory. - GDAL through 3.0.1 has a poolDestroy double free in OGRExpatRealloc in ogr/ogrexpat.cpp when the 10MB threshold is exceeded. CVE-2019-17545 - GDAL 3.3.0 through...

USN-5218-1: Linux kernel (OEM) vulnerabilities

Nadav Amit discovered that the hugetlb implementation in the Linux kernel did not perform TLB flushes under certain conditions. A local attacker could use this to leak or alter data from other processes that use huge pages. CVE-2021-4002 It was discovered that the eBPF implementation in the Linux...

USN-5217-1: Linux kernel (OEM) vulnerabilities

It was discovered that the NFS server implementation in the Linux kernel contained an out-of-bounds write vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2021-4090 It was discovered that the eBPF implementation in th...

Ubuntu 20.04 LTS : Linux kernel (OEM) vulnerabilities (USN-5218-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5218-1 advisory. Nadav Amit discovered that the hugetlb implementation in the Linux kernel did not perform TLB flushes under certain conditions. A local attacker could us...

Ubuntu 20.04 LTS : Linux kernel vulnerability (USN-5219-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-5219-1 advisory. It was discovered that the eBPF implementation in the Linux kernel did not properly validate the memory size of certain ring buffer operation arguments. A local...

KB5009585: Windows 10 LTS 1507 Security Updates (January 2022)

The remote Windows host is missing security update 5009585. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2022-21962, CVE-2022-21959,...

Ubuntu 20.04 LTS : Linux kernel (OEM) vulnerabilities (USN-5217-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5217-1 advisory. It was discovered that the NFS server implementation in the Linux kernel contained an out-of-bounds write vulnerability. A local attacker could use this ...

[SECURITY] [DLA 2876-1] vim security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2876-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky January 10, 2022 https://wiki.debian.org/LTS -...

USN-5215-1: NLTK vulnerability

Srikantha Prathi discovered that NLTK incorrectly handled specially crafted input. An attacker could use this vulnerability to cause a denial of service...

Debian DLA-2876-1 : vim - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2876 advisory. - fileio.c in Vim prior to 8.0.1263 sets the group ownership of a .swp file to the editor's primary group which may be different from the group ownership of the...