PT-2022-33753 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.63 Description: The issue is related to refcount bugs in the meson vpu has available connectors function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kern...

PT-2022-34044 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.138 Description: The issue is related to refcount bugs in the meson vpu has available connectors function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2022-34116 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.137 Description: The issue is related to sleep in atomic context bugs caused by dev coredump. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

GSD-2022-1005257 mwifiex: fix sleep in atomic context bugs caused by dev_coredumpv

mwifiex: fix sleep in atomic context bugs caused by devcoredumpv This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005113 drm/meson: Fix refcount bugs in meson_vpu_has_available_connectors()

drm/meson: Fix refcount bugs in mesonvpuhasavailableconnectors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

SUSE: Security Advisory (SUSE-SU-2022:3281-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2022-33371 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v4.10 through v5.19.3 Description: The issue is related to refcount bugs in the meson vpu has available connectors function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2022-33515 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue is related to sleep in atomic context bugs caused by dev coredump. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-33315 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.6 Description: The issue is related to use-after-free bugs caused by pn532 cmd timeout in the pn533 NFC component. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

SUSE: Security Advisory (SUSE-SU-2022:3282-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2022:3282-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-36879: Fixed an issue in xfrmexpandpolicies in net/xfrm/xfrmpolicy.c where a refcount could be dropped twice bnc1201948. - CVE-2022-3028: Fixed ra...

NFT flashloan against governance voting

Lines of code Vulnerability details Impact Specifically, to support a proposal, the voting power is counted at the time of the proposal creation time. However, there are multiple services that support NFT flashloan, e.g., NFTuloan . Since the voting power is counted as the proposal creation time,...

SUSE: Security Advisory (SUSE-SU-2022:3264-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 8 : firefox (RHSA-2021:2214)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2021:2214 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to versi...

RHEL 8 : thunderbird (RHSA-2021:2264)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:2264 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 78.11.0. Security Fixes: Mozilla:...

SUSE-SU-2022:3273-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Mozilla Firefox was updated to 102.2.0esr ESR: Fixed: Various stability, functionality, and security fixes. - MFSA 2022-34 bsc1202645 CVE-2022-38472 bmo1769155 Address bar spoofing via XSLT error handling CVE-2022-38473 bmo1771685...

SUSE-SU-2022:3272-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Mozilla Firefox was updated to 102.2.0esr ESR: Fixed: Various stability, functionality, and security fixes. - MFSA 2022-34 bsc1202645 CVE-2022-38472 bmo1769155 Address bar spoofing via XSLT error handling CVE-2022-38473 bmo1771685...

Mozilla Firefox ESR Security Advisory (MFSA2021-49) - Mac OS X

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

RHEL 9 : firefox (RHSA-2022:4873)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:4873 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

istio security update

istio 1.13.7-1 - Added Oracle specific files for 1.13.7-1 olcne 1.4.7-1 - Upgrade Istio from 1.13.5 to 1.13.7 to resolve the CVE-2022-31045 1.4.6-2 - Fix bug in gen-certs-helper script to change permission of node.key to allow opc user to copy over - Update gen-certs-helper script to skip printin...