Unbreakable Enterprise kernel-container security update

5.4.17-2136.310.7.1 - rds: copyfromuser only once per rdssendmsg system call Hans Westgaard Ry Orabug: 33981855 CVE-2022-21385...

CVE-2022-35166

libjpeg commit 842c7ba was discovered to contain an infinite loop via the component JPEG::ReadInternal...

CVE-2022-35452

OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b0b2c...

CVE-2022-21485 affecting package mysql for versions less than 8.0.29-1

CVE-2022-21485 affecting package mysql for versions less than 8.0.29-1. An upgraded version of the package is available that resolves this issue...

Tor - Unspecified high severity vulnerability

Tor organization reports: TROVE-2022-001...

CVE-2022-2060

Cross-site Scripting XSS - Stored in GitHub repository dolibarr/dolibarr prior to 16.0...

CVE-2022-30688

needrestart 0.8 through 3.5 before 3.6 is prone to local privilege escalation. Regexes to detect the Perl, Python, and Ruby interpreters are not anchored, allowing a local user to escalate privileges when needrestart tries to detect if interpreters are using old source files...

CVE-2021-40145 affecting package gd for versions less than 2.3.0-5

CVE-2021-40145 affecting package gd for versions less than 2.3.0-5. A patched version of the package is available...

CVE-2022-27652

A flaw was found in cri-o, where containers were incorrectly started with non-empty default permissions. A vulnerability was found in Moby Docker Engine where containers started incorrectly with non-empty inheritable Linux process capabilities. This flaw allows an attacker with access to programs...

CVE-2021-37159 affecting package kernel for versions less than 5.15.2.1-1

CVE-2021-37159 affecting package kernel for versions less than 5.15.2.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-45095 affecting package kernel for versions less than 5.15.18.1-1

CVE-2021-45095 affecting package kernel for versions less than 5.15.18.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-29265 affecting package kernel for versions less than 5.10.78.1-1

CVE-2021-29265 affecting package kernel for versions less than 5.10.78.1-1. A patched version of the package is available...

CVE-2021-32675 affecting package redis for versions less than 6.2.6-1

CVE-2021-32675 affecting package redis for versions less than 6.2.6-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-26635

Removed by vendor...

ROS-20220301-02

Vim text editor vulnerability, related to NULL pointer dereferencing error in Vim when switching tabs in command line window. when switching tabs in a command line window. Exploitation of the vulnerability could allow an attacker, remotely to perform a denial-of-service DoS attack...

CVE-2022-21719

GLPI is a free asset and IT management software package. All GLPI versions prior to 9.5.7 are vulnerable to reflected cross-site scripting. Version 9.5.7 contains a patch for this issue. There are no known workarounds...

UBUNTU-CVE-2021-44717

Go before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file or unintended network connection as a consequence of erroneous closing of file descriptor 0 after file-descriptor exhaustion...

CVE-2021-45951

Removed by vendor...

Updated privoxy packages fix security vulnerabilities

Updated privoxy packages fix security vulnerabilities: A security issue has been found in Privoxy before version 3.0.33. geturlspecparam did not free memory of compiled pattern spec before bailing CVE-2021-44540. A security issue has been found in Privoxy before version 3.0.33...

CVE-2021-36133

The OPTEE-OS CSU driver for NXP i.MX SoC devices lacks security access configuration for several models, resulting in TrustZone bypass because the NonSecure World can perform arbitrary memory read/write operations on Secure World memory. This involves a DMA capable peripheral...