[SECURITY] Fedora 41 Update: apr-1.7.5-1.fc41

The mission of the Apache Portable Runtime APR is to provide a free library of C data structures and routines, forming a system portability layer to as many operating systems as possible, including Unices, MS Win32, BeOS and OS/2...

RHSA-2023:7392 Red Hat Security Advisory: c-ares security update

Bulletin has no description...

RHSA-2023:3662 Red Hat Security Advisory: c-ares security update

Bulletin has no description...

RHSA-2023:3660 Red Hat Security Advisory: c-ares security update

Bulletin has no description...

RHSA-2023:3677 Red Hat Security Advisory: c-ares security update

Bulletin has no description...

RHSA-2023:3665 Red Hat Security Advisory: c-ares security update

Bulletin has no description...

RHSA-2023:3741 Red Hat Security Advisory: c-ares security update

Bulletin has no description...

RHSA-2023:3583 Red Hat Security Advisory: c-ares security update

Bulletin has no description...

RHSA-2023:3584 Red Hat Security Advisory: c-ares security update

Bulletin has no description...

RHSA-2023:3559 Red Hat Security Advisory: c-ares security update

Bulletin has no description...

RHSA-2022:2043 Red Hat Security Advisory: c-ares security update

Bulletin has no description...

UBUNTU-CVE-2024-46691

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Move unregister out of atomic section Commit '9329933699b3 "soc: qcom: pmicglink: Make client-lock non-sleeping"' moved the pmicglink client list under a spinlock, as it is accessed by the rpmsg/glink callback,...

CVE-2024-46691

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Move unregister out of atomic section Commit '9329933699b3 "soc: qcom: pmicglink: Make client-lock non-sleeping"' moved the pmicglink client list under a spinlock, as it is accessed by the rpmsg/glink callback,...

K000141051: c-ares vulnerability CVE-2024-25629

Security Advisory Description c-ares is a C library for asynchronous DNS requests. aresreadline is used to parse local configuration files such as /etc/resolv.conf, /etc/nsswitch.conf, the HOSTALIASES file, and if using a c-ares version prior to 1.27.0, the /etc/hosts file. If any of these...

usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group

...

init/main.c: Fix potential static_command_line memory overflow

...

[SECURITY] Fedora 40 Update: libell-0.69-1.fc40

The Embedded Linux Library ELL provides core, low-level functionality for system daemons. It typically has no dependencies other than the Linux kernel, C standard library, and libdl for dynamic linking. While ELL is designed to be efficient and compact enough for use on embedded Linux platforms, ...

PT-2024-39077

Name of the Vulnerable Software and Affected Versions: LearnPress – WordPress LMS Plugin versions up to, and including, 4.2.7 Description: The issue allows unauthenticated attackers to perform SQL Injection via the c fields parameter of the "/wp-json/lp/v1/courses/archive-course" REST API endpoin...

CVE-2024-6596

An unauthenticated remote attacker can run malicious c code included in curve files and execute commands in the users context...

SUSE-SU-2024:3186-1 Security update for buildah

This update for buildah fixes the following issues: Update to version 1.35.4: CVE-2024-3727 updates bsc1224117 Bump go-jose CVE-2024-28180 Bump ocicrypt and go-jose CVE-2024-28180 Update to version 1.35.3: correctly configure /etc/hosts and resolv.conf buildah: refactor resolv/hosts setup. rename...