Fedora: Security Advisory for varnish (FEDORA-2022-babfbc2622)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

unbound security, bug fix, and enhancement update

1.16.2-2 - Require openssl tool for unbound-keygen 2116802 1.16.2-1 - Update to 1.16.2 2087120 1.16.0-3 - Disable ED25519 and ED448 in FIPS mode 2079548 1.16.0-2 - Restart keygen service before every unbound start 2094336 1.16.0-1 - Update to 1.16.0 2087120 1.15.0-1 - Update to 1.15.0 2030608 -...

Maggioli SpA Appalti & Contratti 安全漏洞

Maggioli SpA Appalti & Contratti is a modular platform of Maggioli SpA. It consists of several integrated web applications to support Italian public administrations in the computerization and telematics management of their processes. A security vulnerability exists in Maggioli SpA Appalti &...

PT-2022-26168 · Xwiki · Xwiki Platform

Name of the Vulnerable Software and Affected Versions: XWiki Platform versions prior to 13.10.8 XWiki Platform versions prior to 14.6 Description: The XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The application allows anyone with view...

Flat PM < 3.0.13 - Reflected Cross-Site Scripting

The plugin does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin PoC v 3.0.13 the blockid needs to start with an existing block ID...

kernel: ASoC: SOF: Intel: Fix NULL ptr dereference when ENOMEM

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: Fix NULL ptr dereference when ENOMEM Do not call snddmafreepages when snddmaallocpages returns -ENOMEM because it leads to a NULL pointer dereference bug. The dmesg says: T1387 sof-audio-pci-intel-tgl...

GSD-2022-1007478 mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages

mm,hugetlb: take hugetlblock before decrementing h-resvhugepages This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.264 by commit...

CVE-2022-34312

IBM CICS TX 11.1 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 229447...

CVE-2022-34312

IBM CICS TX 11.1 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 229447...

Code injection

IBM CICS TX 11.1 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 229447...

CVE-2022-34312

CVE-2022-34312 affects IBM CICS TX 11.1. The vulnerability allows web pages to be stored locally and read by another user on the same system, constituting an information disclosure. Affected products include IBM CICS TX Standard and IBM CICS TX Advanced (both 11.1). The issue’s base metrics show ...

PT-2022-34956 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.6 Description: The issue is related to the hugetlb lock not being taken before decrementing h-resv huge pages. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2022-35733 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.264 Description: The issue concerns a potential security vulnerability in the Linux Kernel. It involves taking the hugetlb lock before decrementing h-resv huge pages. The actual impact and attack...

IBM CICS TX 信息泄露漏洞

IBM CICS TX is a comprehensive, single transaction runtime package from International Business Machines IBM. An information disclosure vulnerability exists in IBM CICS TX version 11.1 that originates from allowing web pages to be stored locally and be readable by other users on the system...

PT-2022-35817 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.298 Description: A potential issue exists where the hugetlb lock is not taken before decrementing h-resv huge pages. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2022-35460 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.153 Description: The issue is related to the hugetlb lock not being taken before decrementing h-resv huge pages. This could potentially lead to security vulnerabilities, although the actual impact and atta...

PT-2022-35888 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.332 Description: The issue is related to the hugetlb lock not being taken before decrementing h-resv huge pages. This could potentially lead to security vulnerabilities, although the actual impact and attac...

PT-2022-35618 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.223 Description: A potential issue exists where the hugetlb lock is not taken before decrementing h-resv huge pages. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

[SECURITY] Fedora 37 Update: php-8.1.12-1.fc37

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

GHSA-44MR-8VMM-WJHG Wasmtime out of bounds read/write with zero-memory-pages configuration

Impact There is a bug in Wasmtime's implementation of its pooling instance allocator when the allocator is configured to give WebAssembly instances a maximum of zero pages of memory. In this configuration the virtual memory mapping for WebAssembly memories did not meet the compiler-required...