CVE-2024-50003 affecting package kernel for versions less than 5.15.173.1-1

CVE-2024-50003 affecting package kernel for versions less than 5.15.173.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-50205 affecting package kernel for versions less than 5.15.173.1-1

CVE-2024-50205 affecting package kernel for versions less than 5.15.173.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-49944 affecting package kernel for versions less than 5.15.173.1-1

CVE-2024-49944 affecting package kernel for versions less than 5.15.173.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-49997 affecting package kernel for versions less than 5.15.173.1-1

CVE-2024-49997 affecting package kernel for versions less than 5.15.173.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-49902 affecting package kernel for versions less than 5.15.173.1-1

CVE-2024-49902 affecting package kernel for versions less than 5.15.173.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-49851 affecting package kernel for versions less than 5.15.173.1-1

CVE-2024-49851 affecting package kernel for versions less than 5.15.173.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-49957 affecting package kernel for versions less than 5.15.173.1-1

CVE-2024-49957 affecting package kernel for versions less than 5.15.173.1-1. An upgraded version of the package is available that resolves this issue...

postgresql security update

13.18-1 - Update to 13.18...

CVE-2024-55565

nanoid aka Nano ID before 5.0.9 mishandles non-integer values. 3.3.8 is also a fixed version...

CVE-2024-55566

ColPack 1.0.10 through 9a7293a has a predictable temporary file located under /tmp with a name derived from an unseeded RNG. The impact can be overwriting files or making ColPack graphing unavailable to other users...

CVE-2024-55566

ColPack 1.0.10 through 9a7293a has a predictable temporary file located under /tmp with a name derived from an unseeded RNG. The impact can be overwriting files or making ColPack graphing unavailable to other users...

CVE-2023-40547 affecting package shim for versions less than 15.8-5

CVE-2023-40547 affecting package shim for versions less than 15.8-5. An upgraded version of the package is available that resolves this issue...

CVE-2023-40551 affecting package shim for versions less than 15.8-5

CVE-2023-40551 affecting package shim for versions less than 15.8-5. An upgraded version of the package is available that resolves this issue...

CVE-2022-28737 affecting package shim for versions less than 15.8-5

CVE-2022-28737 affecting package shim for versions less than 15.8-5. An upgraded version of the package is available that resolves this issue...

CVE-2024-54001

Kanboard is project management software that focuses on the Kanban methodology. HTML can be injected and stored into the application settings section. The fields applicationlanguage, applicationdateformat,applicationtimezone and applicationtimeformat allow arbirary user input which is reflected...

CVE-2024-24786 affecting package prometheus for versions less than 2.45.4-6

CVE-2024-24786 affecting package prometheus for versions less than 2.45.4-6. A patched version of the package is available...

GHSA-WWQ9-3CPR-MM53 vulnerabilities

Vulnerabilities for packages: wasmcloud, qdrant, berg, cedar, wit-bindgen, wash, shadowsocks-rust, starship, linkerd2-proxy, cargo-audit, pixi, tealdeer, nushell, buck2, xh, wadm...

CVE-2024-53140

In the Linux kernel, the following vulnerability has been resolved: netlink: terminate outstanding dump on socket close Netlink supports iterative dumping of data. It provides the families the following ops: - start - optional kicks off the dumping process - dump - actual dump helper, keeps getti...

CVE-2024-53139

In the Linux kernel, the following vulnerability has been resolved: sctp: fix possible UAF in sctpv6available A lockdep report 1 with CONFIGPROVERCULIST=y hints that sctpv6available is calling devgetbyindexrcu and ipv6chkaddr without holding rcu. 1 ============================= WARNING: suspiciou...

CVE-2024-53130

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix null-ptr-deref in blockdirtybuffer tracepoint When using the "block:blockdirtybuffer" tracepoint, markbufferdirty may cause a NULL pointer dereference, or a general protection fault when KASAN is enabled. This happens...