USN-5317-1: Linux kernel vulnerabilities

Nick Gregory discovered that the Linux kernel incorrectly handled network offload functionality. A local attacker could use this to cause a denial of service or possibly execute arbitrary code. CVE-2022-25636 Enrico Barberis, Pietro Frigo, Marius Muench, Herbert Bos, and Cristiano Giuffrida...

Ubuntu: Security Advisory (USN-5318-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-5317-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-5319-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Multiple speculative security issues

ISSUE DESCRIPTION Note: Multiple issues are contained in this XSA due to their interactions. 1 Researchers at VU Amsterdam have discovered Spectre-BHB, pertaining to the use of Branch History between privilege levels. ARM have assigned CVE-2022-23960. Intel have assigned CVE-2022-0001 Branch...

SUSE SLES15 Security Update : binutils (SUSE-SU-2020:3552-1)

This update for binutils fixes the following issues : binutils was updated to version 2.35.1 jscECO-2373 Additional branch fixes applied on top of 2.35.1 : Fixes PR26520, aka bsc1179036, a problem in addr2line with certain DWARF variable descriptions. Also fixes PR26711, PR26656, PR26655, PR26929...

SUSE SLED15 / SLES15 Security Update : binutils (SUSE-SU-2020:3060-1)

This update for binutils fixes the following issues : binutils was updated to version 2.35. jscECO-2373 Update to binutils 2.35 : The assembler can now produce DWARF-5 format line number tables. Readelf now has a 'lint' mode to enable extra checks of the files it is processing. Readelf will now...

openSUSE Security Update : binutils (openSUSE-2020-1804)

This update for binutils fixes the following issues : binutils was updated to version 2.35. jscECO-2373 Update to binutils 2.35 : - The assembler can now produce DWARF-5 format line number tables. - Readelf now has a 'lint' mode to enable extra checks of the files it is processing. - Readelf will...

Windows Speculative Execution Configuration Check

Binary data microsoftwindowsspecexecution.nbin...

Fedora 26 : xen (2018-0746dac335)

update Xen page-table isolation XPTI mitigation and add Branch Target Injection BTI mitigation for XSA-254 DoS via non-preemptable L3/L4 pagetable freeing XSA-252 1549568 grant table v2 - v1 transition may crash Xen XSA-255 1549570 x86 PVH guest without LAPIC may DoS the host XSA-256 1549572 Note...

Fedora 27 : xen (2018-c553a586c8)

add Xen page-table isolation XPTI mitigation and Branch Target Injection BTI mitigation for XSA-254 DoS via non-preemptable L3/L4 pagetable freeing XSA-252 1549568 grant table v2 - v1 transition may crash Xen XSA-255 1549570 x86 PVH guest without LAPIC may DoS the host XSA-256 1549572 Note that...

CVE-2006-7159

Directory traversal vulnerability in include/prunetorrents.php in BTI-Tracker 1.3.2 aka btitracker allows remote attackers to delete arbitrary files via ".." sequences in the TORRENTSDIR parameter in a prune action...

CVE-2006-7159

CVE-2006-7159 affects BTI-Tracker 1.3.2 (btitracker). A directory traversal in include/prune_torrents.php via the TORRENTSDIR parameter in a prune action allows remote attackers to delete arbitrary files. This is a file-system traversal vulnerability (no authentication required per the descriptio...

CVE-2006-7159

Directory traversal vulnerability in include/prunetorrents.php in BTI-Tracker 1.3.2 aka btitracker allows remote attackers to delete arbitrary files via ".." sequences in the TORRENTSDIR parameter in a prune action...