UVI-2021-1000093 net: hso: fix NULL-deref on disconnect regression

net: hso: fix NULL-deref on disconnect regression This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.1 by commit...

The SolarWinds Hackers Aren’t ‘Back.’ They Never Went Away

A new phishing campaign from Russian spies targeted USAID, among others. But it’s less an escalation than a regression to the mean...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

[SECURITY] [DSA 4916-2] prosody regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-4916-2 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 21, 2021 https://www.debian.org/security/faq -...

DSA-4916-2 prosody - regression update

Bulletin has no description...

SUSE SLES15 Security Update : redis (SUSE-SU-2021:1652-1)

This update for redis fixes the following issues : redis was updated to 6.0.13 : CVE-2021-29477: Integer overflow in STRALGO LCS command bsc1185729 CVE-2021-29478: Integer overflow in COPY command for large intsets bsc1185730 Cluster: Skip unnecessary check which may prevent failure detection Fix...

SUSE-SU-2021:1652-1 Security update for redis

This update for redis fixes the following issues: redis was updated to 6.0.13: CVE-2021-29477: Integer overflow in STRALGO LCS command bsc1185729 CVE-2021-29478: Integer overflow in COPY command for large intsets bsc1185730 Cluster: Skip unnecessary check which may prevent failure detection Fix...

SUSE-SU-2021:1648-1 Security update for xen

This update for xen fixes the following issues: Security issue fixed: - CVE-2021-28689: Fixed some x86 speculative vulnerabilities with bare non-shim 32-bit PV guests XSA-370 bsc1185104 - Make sure xencommons is in a format as expected by fillup. bsc1185682 Each comment needs to be followed by an...

openSUSE Security Update : redis (openSUSE-2021-682)

This update for redis fixes the following issues : redis 6.0.13 - CVE-2021-29477: Integer overflow in STRALGO LCS command boo1185729 - CVE-2021-29478: Integer overflow in COPY command for large intsets boo1185730 - Cluster: Skip unnecessary check which may prevent failure detection - Fix...

Security update for virtualbox (important)

openSUSE Security Update: Security update for virtualbox Announcement ID: openSUSE-SU-2021:0723-1 Rating: important References: 1182918 Cross-References: CVE-2021-2145 CVE-2021-2250 CVE-2021-2264 CVE-2021-2266 CVE-2021-2279 CVE-2021-2280 CVE-2021-2281 CVE-2021-2282 CVE-2021-2283 CVE-2021-2284...

SUSE SLES12 Security Update : xen (SUSE-SU-2021:1580-1)

This update for xen fixes the following issues : A recent systemd update caused a regression in 'xenstored.service' systemd now fails to track units that use systemd-notify. bsc1183790 Add a fix to delay between the call to 'systemd-notify' and the final exit of the wrapper script. bsc1185021,...

OPENSUSE-SU-2021:0691-1 Security update for vlc

This update for vlc fixes the following issues: Update to version 3.0.13: + Demux: - Adaptive: fix artefacts in HLS streams with wrong profiles/levels - Fix regression on some MP4 files for the audio track - Fix MPGA and ADTS probing in TS files - Fix Flac inside AVI files - Fix VP9/Webm artefact...

OPENSUSE-SU-2021:0682-1 Security update for redis

This update for redis fixes the following issues: redis 6.0.13 CVE-2021-29477: Integer overflow in STRALGO LCS command boo1185729 CVE-2021-29478: Integer overflow in COPY command for large intsets boo1185730 Cluster: Skip unnecessary check which may prevent failure detection Fix performance...

DLA-2648-2 mediawiki - regression update

Bulletin has no description...

Security update for redis (important)

openSUSE Security Update: Security update for redis Announcement ID: openSUSE-SU-2021:0682-1 Rating: important References: 1178205 1182657 1185729 1185730 ECO-2417 ECO-2867 PM-1547 PM-1615 PM-1622 PM-1681 SLE-11578 SLE-12821 Cross-References: CVE-2021-21309 CVE-2021-29477 CVE-2021-29478 CVSS...

[SECURITY] [DLA 2648-2] mediawiki regression update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2648-2 [email protected] https://www.debian.org/lts/security/ Abhijith PA May 07, 2021 https://wiki.debian.org/LTS -...

USN-4918-3: ClamAV regression

USN-4918-1 fixed vulnerabilities in ClamAV. The updated package could fail to properly scan in some situations. This update fixes the problem. Original advisory details: It was discovered that ClamAV incorrectly handled parsing Excel documents. A remote attacker could possibly use this issue to...

USN-4918-3 clamav regression

USN-4918-1 fixed vulnerabilities in ClamAV. The updated package could fail to properly scan in some situations. This update fixes the problem. Original advisory details: It was discovered that ClamAV incorrectly handled parsing Excel documents. A remote attacker could possibly use this issue to...

Object injection via local phar file

This is a security release. SECURITY Fixes CVE-2020-36326, a regression of CVE-2018-19296 object injection introduced in 6.1.8, see SECURITY.md for details Reject more file paths that look like URLs, matching RFC3986 spec, blocking URLS using schemes such as ssh2 Ensure method signature consisten...

USN-4916-2: Linux kernel regression

USN-4916-1 fixed vulnerabilities in the Linux kernel. Unfortunately, the fix for CVE-2021-3493 introduced a memory leak in some situations. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that the overlayfs implementation in the Linu...