PT-2025-8177

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been resolved, specifically in the ASoC: codecs: wc938x component. The problem occurred when accessing enums using integers, which resulted in array out o...

PT-2025-8179

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been identified, related to the ASoC: codecs: va-macro component. The issue arises when accessing enums using integers, which can lead to array ou...

PT-2025-8180

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been identified, specifically in the ASoC: codecs: rx-macro component. The issue arises when accessing enums using integers, which can lead to arr...

firefox security update

91.6.0-1.0.1 - Remove upstream references Orabug: 30143292 - Update distribution for Oracle Linux Orabug: 30143292 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file - Enabled aarch64 build 91.6.0-1 - Update to 91.6.0 build1 91.5.0-2 - Use default update channel to fi...

Critical: samba

Issue Overview: Out-of-bounds heap read/write vulnerability in VFS module vfsfruit allows code execution CVE-2021-44142 Affected Packages: samba Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras...

.NET 5.0 security and bugfix update

5.0.211-1.0.1 - Support AArch64 on Oracle Linux Orabug: 32738620 - Include new Oracle Linux runtime IDs Add 1000-Add-missing-OL-RIDs.patch 5.0.211-1 - Update to .NET SDK 5.0.211 and Runtime 5.0.14 - Resolves: RHBZ2047767...

Exploit for Out-of-bounds Write in Polkit_Project Polkit

CVE-2021-4034 Precompiled builds for CVE-2021-4034. Of course...

java-1.8.0-openjdk security and bug fix update

1:1.8.0.322.b06-2 - Fix FIPS issues in native code and with initialisation of java.security.Security - Related: rhbz2039366 1:1.8.0.322.b06-1 - Update to aarch64-shenandoah-jdk8u322-b06 EA - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of...

Local Privilege Escalation in polkits pkexec

A bug exists in the polkit pkexec binary in how it processes arguments. If the binary is provided with no arguments, it will continue to process environment variables as argument variables, but without any security checking. By using the execve call we can specify a null argument list and populat...

Important: xorg-x11-server

Issue Overview: A flaw was found in the Xorg-x11-server. An out-of-bounds access issue can occur in the SProcRenderCompositeGlyphs function due to improper validation of the request length. CVE-2021-4008 A flaw was found in xorg-x11-server. An out-of-bounds access can occur in the...

firefox security update

91.5.0-1.0.2 - Enabled aarch64 builds 91.5.0-1.0.1 - Remove upstream references Orabug: 30143292 - Update distribution for Oracle Linux Orabug: 30143292 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 91.5.0-1 - Update to 91.5.0 build1...

Photon OS 3.0: Vim PHSA-2022-3.0-0338

An update of the vim package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-3.0-0338. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc'...

binutils:fuzz_objdump: Heap-buffer-overflow in bfd_getl64

Detailed Report: https://oss-fuzz.com/testcase?key=6030863257698304 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzobjdump Job Type: aflasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x615000002067 Crash State: bfdgetl64 bfdelf64swapdynin...

Ubuntu Overlayfs Local Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule '2021 Ubuntu Overlayfs LPE', 'Description' = %q This module exploits a vulnerability in Ubuntu's implementation of overlayfs. The vulnerability is...

binutils:fuzz_disassemble: Dynamic-stack-buffer-overflow in extract_fields

Detailed Report: https://oss-fuzz.com/testcase?key=4841616307781632 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzdisassemble Job Type: aflasanbinutils Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow READ 4 Crash Address: 0x7ffd6af68020 Crash State: extractfields...

binutils:fuzz_disassemble: Dynamic-stack-buffer-overflow in extract_fields

Detailed Report: https://oss-fuzz.com/testcase?key=5150351905390592 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzdisassemble Job Type: aflasanbinutils Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow READ 4 Crash Address: 0x7ffc0693c1c0 Crash State: extractfields...

binutils:fuzz_disassemble: Dynamic-stack-buffer-overflow in extract_fields

Detailed Report: https://oss-fuzz.com/testcase?key=5956071865319424 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzdisassemble Job Type: aflasanbinutils Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow READ 4 Crash Address: 0x7ffeba31a940 Crash State: extractfields aarch64extf...

kernel security update

4.18.0-348.2.15.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

gcc security and bug fix update

8.5.0-3.0.2 - Fix Orabug 33451471 and backport CTF/BTF enhancements ctfc: Free CTF container elements in ctfcdeletecontainer ctf: Do not warn for CTF not supported for GNU GIMPLE ICE in btffinalize when compiling with -gbtf PR debug/102507, Orabug 33451471 Reviewed-by: Jose E. Marchesi 8.5.0-3.0....

openSUSE: Security Advisory for binutils (openSUSE-SU-2021:1475-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...