PT-2024-32355

Name of the Vulnerable Software and Affected Versions lib/sm/shared mem affected versions not specified Description The issue is related to improper input validation in the sm mem compat get vmm obj function of lib/sm/shared mem.c, which could allow arbitrary physical memory access. This could le...

RHSA-2022:5326 Red Hat Security Advisory: compat-openssl10 security update

Bulletin has no description...

RHSA-2022:4899 Red Hat Security Advisory: compat-openssl11 security and bug fix update

Bulletin has no description...

EulerOS 2.0 SP8 : compat-openssl (EulerOS-SA-2024-2459)

According to the versions of the compat-openssl package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service attack...

Huawei EulerOS: Security Advisory for compat-openssl (EulerOS-SA-2024-2459)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHSA-2022:1797 Red Hat Security Advisory: compat-exiv2-026 security update

Bulletin has no description...

RHSA-2021:3234 Red Hat Security Advisory: compat-exiv2-023 security update

Bulletin has no description...

RHSA-2021:3230 Red Hat Security Advisory: compat-exiv2-026 security update

Bulletin has no description...

RHSA-2021:3153 Red Hat Security Advisory: compat-exiv2-026 security update

Bulletin has no description...

RHSA-2021:4319 Red Hat Security Advisory: compat-exiv2-026 security update

Bulletin has no description...

RHSA-2019:2051 Red Hat Security Advisory: compat-libtiff3 security update

Bulletin has no description...

RHSA-2022:6967 Red Hat Security Advisory: compat-expat1 security update

Bulletin has no description...

Important: Red Hat Security Advisory: security update Logging for Red Hat OpenShift - 5.9.6

Important Logging for Red Hat OpenShift - 5.9.6 Logging for Red Hat OpenShift - 5.9.6 cluster-logging-rhel9-operator: compat-openssl11CVE-2023-0286...

NewStart CGSL MAIN 6.02 : compat-libtiff3 Vulnerability (NS-SA-2024-0055)

The remote NewStart CGSL host, running version MAIN 6.02, has compat-libtiff3 packages installed that are affected by a vulnerability: - A heap use-after-free vulnerability was found in LibTIFF's tiffcrop utility in the loadImage function. This flaw allows an attacker to pass a crafted TIFF image...

AZL-47791 CVE-2024-42240 affecting package kernel for versions less than 5.15.167.1-1

In the Linux kernel, the following vulnerability has been resolved: x86/bhi: Avoid warning in DB handler due to BHI mitigation When BHI mitigation is enabled, if SYSENTER is invoked with the TF flag set then entrySYSENTERcompat uses CLEARBRANCHHISTORY and calls the clearbhbloop before the TF flag...

SUSE CVE-2024-41020

In the Linux kernel, the following vulnerability has been resolved: filelock: Fix fcntl/close race recovery compat path When I wrote commit 3cad1bc01041 "filelock: Remove locks reliably when fcntl/close race is detected", I missed that there are two copies of the code I was patching: The normal...

SUSE CVE-2024-42084

In the Linux kernel, the following vulnerability has been resolved: ftruncate: pass a signed offset The old ftruncate syscall, using the 32-bit offt misses a sign extension when called in compat mode on 64-bit architectures. As a result, passing a negative length accidentally succeeds in truncati...

DEBIAN-CVE-2024-42084

In the Linux kernel, the following vulnerability has been resolved: ftruncate: pass a signed offset The old ftruncate syscall, using the 32-bit offt misses a sign extension when called in compat mode on 64-bit architectures. As a result, passing a negative length accidentally succeeds in truncati...

UBUNTU-CVE-2024-42084

In the Linux kernel, the following vulnerability has been resolved: ftruncate: pass a signed offset The old ftruncate syscall, using the 32-bit offt misses a sign extension when called in compat mode on 64-bit architectures. As a result, passing a negative length accidentally succeeds in truncati...

DEBIAN-CVE-2024-41020

In the Linux kernel, the following vulnerability has been resolved: filelock: Fix fcntl/close race recovery compat path When I wrote commit 3cad1bc01041 "filelock: Remove locks reliably when fcntl/close race is detected", I missed that there are two copies of the code I was patching: The normal...