EulerOS Virtualization 3.0.6.6 : gnutls (EulerOS-SA-2023-2411)

According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providing...

EulerOS Virtualization 3.0.6.6 : libxml2 (EulerOS-SA-2023-2412)

According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XMLPARSEHUGE parser option...

EulerOS Virtualization 3.0.6.6 : device-mapper-multipath (EulerOS-SA-2023-2420)

According to the versions of the device-mapper-multipath packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - multipath-tools 0.7.0 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited alone or...

EulerOS Virtualization 3.0.6.6 : sssd (EulerOS-SA-2023-2438)

According to the versions of the sssd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - sssd: libssscertmap fails to sanitise certificate data used in LDAP filters CVE-2022-4254 Note that Tenable Network Security has...

EulerOS Virtualization 3.0.6.6 : ppp (EulerOS-SA-2023-2433)

According to the versions of the ppp package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A vulnerability classified as problematic has been found in ppp. Affected is the function dumpppp of the file pppdump/pppdump.c of th...

EulerOS Virtualization 3.0.6.6 : libjpeg-turbo (EulerOS-SA-2023-2398)

According to the versions of the libjpeg-turbo packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a...

EulerOS Virtualization 3.0.6.6 : python-mako (EulerOS-SA-2023-2416)

According to the versions of the python-mako package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This...

EulerOS Virtualization 3.0.6.6 : shim-signed (EulerOS-SA-2023-2436)

According to the versions of the shim-signed packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The public API function BIOnewNDEF is a helper function used for streaming ASN.1 data via a BIO. It is primarily used...

EulerOS Virtualization 3.0.6.6 : kernel (EulerOS-SA-2023-2444)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : roccatreportevent in drivers/hid/hid-roccat.c in the Linux kernel through 5.19.12 has a race condition and resultant use-after-free...

EulerOS Virtualization 3.0.6.6 : sqlite (EulerOS-SA-2023-2437)

According to the versions of the sqlite packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In SQlite 3.31.1, a potential null pointer derreference was found in the INTERSEC query processing. CVE-2020-35525 Note that...

EulerOS Virtualization 3.0.6.6 : glib2 (EulerOS-SA-2023-2410)

According to the versions of the glib2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak content from files owned by privilege...

EulerOS Virtualization 3.0.6.6 : libvirt (EulerOS-SA-2023-2445)

According to the versions of the libvirt packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A use-after-free flaw was found in libvirt. The qemuMonitorUnregister function in qemuProcessHandleMonitorEOF is called using...

EulerOS Virtualization 3.0.6.6 : bind (EulerOS-SA-2023-2404)

According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - By flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the resolver's performance,...

EulerOS Virtualization 3.0.6.6 : colord (EulerOS-SA-2023-2407)

According to the versions of the colord packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - There are two Information Disclosure vulnerabilities in colord, and they lie in colord/src/cd-device-db.c and...

EulerOS Virtualization 3.0.6.6 : pixman (EulerOS-SA-2023-2413)

According to the versions of the pixman packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In libpixman in Pixman before 0.42.2, there is an out-of-bounds write aka heap-based buffer overflow in rasterizeedges8 due to an...

EulerOS Virtualization 3.0.6.6 : ghostscript (EulerOS-SA-2023-2423)

According to the versions of the ghostscript packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A heap-based buffer overwrite vulnerability was found in GhostScript's lp8000printpage function in the gdevlp8k.c file. This...

EulerOS Virtualization 3.0.6.6 : samba (EulerOS-SA-2023-2434)

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure the client had sent enough data to...

EulerOS Virtualization 3.0.6.6 : libxslt (EulerOS-SA-2023-2399)

According to the versions of the libxslt packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Use after free in Blink XSLT in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap...

CLSA-2023-1690294029 kernel: Fix of 29 CVEs

ALSA: pcm: Fix races among concurrent prealloc proc writes CVE-2022-1048 - ALSA: pcm: Fix races among concurrent prepare and hwparams/hwfree calls CVE-2022-1048 - ALSA: pcm: Fix races among concurrent read/write and buffer changes CVE-2022-1048 - ALSA: pcm: Fix races among concurrent hwparams and...

Security Bulletin: Multiple vulnerabilities affect IBM Data Virtualization on Cloud Pak for Data

Summary This bulletin addresses multiple vulnerabilities in Data Virtualization on IBM Cloud Pak for Data. Note that Data Virtualization is rebranded to Watson Query starting in IBM Cloud Pak for Data version 4.6. Vulnerability Details CVEID:CVE-2022-37598 DESCRIPTION: Node.js UglifyJS module cou...