GSD-2022-1008109 mISDN: fix possible memory leak in mISDN_register_device()

mISDN: fix possible memory leak in mISDNregisterdevice This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.154 by commit...

GSD-2022-1008052 nilfs2: fix use-after-free bug of ns_writer on remount

nilfs2: fix use-after-free bug of nswriter on remount This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.155 by commit...

GSD-2022-1007949 ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network

ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.79 by commit...

GSD-2022-1007940 mctp: Fix an error handling path in mctp_init()

mctp: Fix an error handling path in mctpinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.79 by commit...

GSD-2022-1007787 dmaengine: ti: k3-udma-glue: fix memory leak when register device fail

dmaengine: ti: k3-udma-glue: fix memory leak when register device fail This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.9 by commit...

CVE-2022-45915

ILIAS before 7.16 allows OS Command Injection...

MGASA-2022-0450 Updated erlang packages fix security vulnerability

In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client Authentication Bypass in certain client-certification situations for SSL, TLS, and DTLS. CVE-2022-37026...

CVE-2022-23470 Arbitrary file access in the Galaxy data analysis platform

Galaxy is an open-source platform for data analysis. An arbitrary file read exists in Galaxy 22.01 and Galaxy 22.05 due to the switch to Gunicorn, which can be used to read any file accessible to the operating system user under which Galaxy is running. This vulnerability affects Galaxy 22.01 and...

DLA-3219-1 jhead - security update

Bulletin has no description...

PUB-A-238479990

Bulletin has no description...

PUB-A-233438137

Bulletin has no description...

PUB-A-238932493

In validvasecmfccheck of drmaccesscontrol.c, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-239700137

In getWpcAuthChallengeResponse of WirelessCharger.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

PUB-A-160818461

In hidoutputreport of hid-core.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

PUB-A-228694391

Bulletin has no description...

PUB-A-242536278

In BroadcastSmsConfigsRequestData::encode of smsdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PUB-A-228560539

Bulletin has no description...

CVE-2022-44262

ff4j 1.8.1 is vulnerable to Remote Code Execution RCE...

Drop What You're Doing and Update iOS, Android, and Windows

Plus: Major patches dropped this month for Chrome, Firefox, VMware, Cisco, Citrix, and SAP...

code injection in phpxmlrpc/phpxmlrpc

code injection in Wrapper::buildClientWrapperCode via manipulation of the $client argument. It was possible to force the client to access local files or connect to undesired urls instead of the intended target server's url...