SUSE-SU-2022:4071-1 Security update for python39

This update for python39 fixes the following issues: Security fixes: - CVE-2022-42919: Fixed local privilege escalation via the multiprocessing forkserver start method bsc1204886. - CVE-2022-45061: Fixed a quadratic IDNA decoding time bsc1205244. Other fixes: - Allow building of documentation wit...

fribidi security update

An update is available for fribidi. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list FriBidi is a library to handle bidirectional scripts for example Hebrew,...

CLSA-2022-1665680212 Fixed CVEs in vim: CVE-2022-3296, CVE-2022-3324

CVE-2022-3296: check CSFTRY can be found - CVE-2022-3324: make sure the window width does not become negative...

[SECURITY] [DSA 5232-1] tinygltf security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5232-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 21, 2022 https://www.debian.org/security/faq -...

PT-2022-23863

Name of the Vulnerable Software and Affected Versions DDMAL MEI2Volpiano version 0.8.2 Description The issue is related to an XML External Entity XXE vulnerability, which can lead to a Denial of Service. This occurs due to the usage of the unsafe 'xml.etree' library to parse untrusted XML input...

PT-2022-37521 · Clamav · Clamav

Name of the Vulnerable Software and Affected Versions: clamav versions prior to 0.103.7 Description: The issue is related to the clamav software, where an update to version 0.103.7 fixes several problems, including the upgrade of the UnRAR library to version 6.1.7, a fix for the logical signature...

Important: java-17-amazon-corretto

Issue Overview: Generated code produced by C1 may leak a package-private class to a class from a different package. CVE-2022-21540 MethodHandle.invokeBasic method can be accessed on byte code level from an arbitrary class. CVE-2022-21541 computeNextExponential sometimes returns negative numbers...

CLSA-2022-1657561196 Fixed CVE-2018-5741 in bind

CVE-2018-5741: update krb5,ms-self,subdomain descriptions...

CLSA-2022-1656958574 Fixed CVEs in php-4.module_el8.4.0+2069+2eb69d76.tuxcare.els5: CVE-2022-31626, CVE-2022-31625

CVE-2022-31626: php: password of excessive length triggers buffer overflow leading to RCE - CVE-2022-31625: don't free uninitialized parameters that have led to RCE...

CLSA-2022-1655822366 Update of grub2

Use CloudLinux vendor cert...

CLSA-2022-1655820524 Update of shim

Update to upstream 15.4 version - Add support for Secure Boot...

High-Severity Bug Reported in Google's OAuth Client Library for Java

Google last month addressed a high-severity flaw in its OAuth client library for Java that could be abused by a malicious actor with a compromised token to deploy arbitrary payloads. Tracked as CVE-2021-22573, the vulnerability is rated 8.7 out of 10 for severity and relates to an authentication...

CLSA-2022-1650575725 Update of php 5.3: Fix segfault during graceful Apache restart

ELS-42: Fix segfault during graceful Apache restart...

CLSA-2022-1643124469 Fix of CVE: CVE-2020-36314

CVE-2020-36314: Fix a path traversal vulnerability 1947534...

CLSA-2021-1635459364 Fix CVE(s):

bump to 211.243...

[SECURITY] Fedora 33 Update: python-pillow-7.2.0-8.fc33

Python image processing library, fork of the Python Imaging Library PIL This library provides extensive file format support, an efficient internal representation, and powerful image processing capabilities. There are four subpackages: tk tk interface, qt PIL image wrapper for Qt, devel developmen...

UBUNTU-CVE-2021-29972

A use-after-free vulnerability was found via testing, and traced to an out-of-date Cairo library. Updating the library resolved the issue, and may have remediated other, unknown security vulnerabilities as well. This vulnerability affects Firefox 90...

[SECURITY] Fedora 34 Update: libksysguard-5.21.3.1-1.fc34

KSysGuard library provides API to read and manage processes running on the system...

[SECURITY] Fedora 34 Update: kdecoration-5.21.3-1.fc34

A plugin-based library to create window decorations...

CVE-2020-8935

An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allow an attacker to make an Ecallrestore function call to reallocate untrusted code and overwrite sections of the Enclave memory address. We recommend updating your library...