Lucene search
+L

3731 matches found

Github Security Blog
Github Security Blog
added 2021/08/25 8:44 p.m.22 views

Wrong memory orderings violates mutual exclusion in spin

Wrong memory orderings inside the RwLock implementation allow for two writers to acquire the lock at the same time. The drop implementation used Ordering::Relaxed, which allows the compiler or CPU to reorder a mutable access on the locked data after the lock has been yielded. Only users of the...

7.8CVSS7.4AI score0.01423EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2021/08/21 8:26 a.m.6 views

OPENSUSE-SU-2021:1176-1 Security update for java-1_8_0-openjdk

This update for java-180-openjdk fixes the following issues: - Update to version jdk8u302 icedtea 3.20.0 - CVE-2021-2341: Improve file transfers. bsc1188564 - CVE-2021-2369: Better jar file validation. bsc1188565 - CVE-2021-2388: Enhance compiler validation. bsc1188566 - CVE-2021-2161: Less...

7.5CVSS6AI score0.04238EPSS
SaveExploits0References9
OPENSUSE Linux
OPENSUSE Linux
added 2021/08/21 12:0 a.m.92 views

Security update for java-1_8_0-openjdk (important)

openSUSE Security Update: Security update for java-180-openjdk Announcement ID: openSUSE-SU-2021:1176-1 Rating: important References: 1185056 1188564 1188565 1188566 Cross-References: CVE-2021-2161 CVE-2021-2341 CVE-2021-2369 CVE-2021-2388 CVSS scores: CVE-2021-2161 NVD : 5.9...

7.5CVSS7AI score0.04238EPSS
SaveExploits0References4
OSV
OSV
added 2021/08/20 8:38 a.m.14 views

OPENSUSE-SU-2021:2798-1 Security update for java-1_8_0-openjdk

This update for java-180-openjdk fixes the following issues: - Update to version jdk8u302 icedtea 3.20.0 - CVE-2021-2341: Improve file transfers. bsc1188564 - CVE-2021-2369: Better jar file validation. bsc1188565 - CVE-2021-2388: Enhance compiler validation. bsc1188566 - CVE-2021-2161: Less...

7.5CVSS6AI score0.04238EPSS
SaveExploits0References9
OSV
OSV
added 2021/08/20 8:34 a.m.9 views

SUSE-SU-2021:2797-1 Security update for java-1_8_0-openjdk

This update for java-180-openjdk fixes the following issues: - Update to version jdk8u302 icedtea 3.20.0 - CVE-2021-2341: Improve file transfers. bsc1188564 - CVE-2021-2369: Better jar file validation. bsc1188565 - CVE-2021-2388: Enhance compiler validation. bsc1188566 - CVE-2021-2161: Less...

7.5CVSS6AI score0.04238EPSS
SaveExploits0References9
OPENSUSE Linux
OPENSUSE Linux
added 2021/08/20 12:0 a.m.72 views

Security update for java-1_8_0-openjdk (important)

openSUSE Security Update: Security update for java-180-openjdk Announcement ID: openSUSE-SU-2021:2798-1 Rating: important References: 1185056 1188564 1188565 1188566 Cross-References: CVE-2021-2161 CVE-2021-2341 CVE-2021-2369 CVE-2021-2388 CVSS scores: CVE-2021-2161 NVD : 5.9...

7.5CVSS7AI score0.04238EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2021/08/10 4:14 p.m.46 views

Moderate: Red Hat Security Advisory: rust-toolset:rhel8 security, bug fix, and enhancement update

An update for the rust-toolset:rhel8 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

9.8CVSS6.9AI score0.0289EPSS
SaveExploits5References9
AlmaLinux
AlmaLinux
added 2021/08/10 12:1 p.m.26 views

gcc-toolset-10-valgrind bug fix and enhancement update

GCC Toolset is a compiler toolset that provides recent versions of development tools. GCC Toolset is an Application Stream packaged as a Software Collection. Bug fixes: incorrect pkgconfig virtual provides in devel packages BZ1968378 For instructions on usage, see Using GCC Toolset linked from th...

2.8AI score
SaveExploits0References1
Rockylinux
Rockylinux
added 2021/08/10 12:1 p.m.17 views

gcc-toolset-10-valgrind bug fix and enhancement update

An update is available for gcc-toolset-10-valgrind. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GCC Toolset is a compiler toolset that provides recent versio...

2.3AI score
SaveExploits0
OSV
OSV
added 2021/08/10 12:1 p.m.16 views

ALBA-2021:3083 gcc-toolset-10-valgrind bug fix and enhancement update

GCC Toolset is a compiler toolset that provides recent versions of development tools. GCC Toolset is an Application Stream packaged as a Software Collection. Bug fixes: incorrect pkgconfig virtual provides in devel packages BZ1968378 For instructions on usage, see Using GCC Toolset linked from th...

7AI score
SaveExploits0References1
AlmaLinux
AlmaLinux
added 2021/08/10 12:1 p.m.23 views

gcc-toolset-10-elfutils bug fix and enhancement update

GCC Toolset is a compiler toolset that provides recent versions of development tools. GCC Toolset is an Application Stream packaged as a Software Collection. Bug fixes: incorrect pkgconfig virtual provides in devel packages BZ1968380 For instructions on usage, see Using GCC Toolset linked from th...

2.8AI score
SaveExploits0
Rockylinux
Rockylinux
added 2021/08/10 12:1 p.m.18 views

gcc-toolset-10-elfutils bug fix and enhancement update

An update is available for gcc-toolset-10-elfutils. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GCC Toolset is a compiler toolset that provides recent versio...

2.3AI score
SaveExploits0
AlmaLinux
AlmaLinux
added 2021/08/10 11:59 a.m.49 views

Moderate: rust-toolset:rhel8 security, bug fix, and enhancement update

Rust Toolset provides the Rust programming language compiler rustc, the cargo build tool and dependency manager, and required libraries. The following packages have been upgraded to a later upstream version: rust 1.52.1. BZ1953002 Security Fixes: rust: optimization for joining strings can cause...

7.5CVSS1AI score0.0289EPSS
SaveExploits5References7
Tenable Nessus
Tenable Nessus
added 2021/08/09 12:0 a.m.35 views

EulerOS 2.0 SP8 : dhcp (EulerOS-SA-2021-2291)

According to the version of the dhcp packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In ISC DHCP 4.1-ESV-R1 - 4.1-ESV-R16, ISC DHCP 4.4.0 - 4.4.2 Other branches of ISC DHCP i.e., releases in the 4.0.x series or lower and releases in t...

7.4CVSS7.3AI score0.06118EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2021/08/09 12:0 a.m.18 views

Huawei EulerOS: Security Advisory for dhcp (EulerOS-SA-2021-2291)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.4CVSS7.6AI score0.06118EPSS
SaveExploits1References2
OSV
OSV
added 2021/07/19 6:50 a.m.8 views

SUSE-SU-2021:2392-1 Security update for go1.16

This update for go1.16 fixes the following issues: go1.16.6 released 2021-07-12, bsc1182345 includes a security fix to the crypto/tls package, as well as bug fixes to the compiler, and the net and net/http packages. Security issue fixed: CVE-2021-34558: Fixed crypto/tls: clients can panic when...

6.5CVSS7AI score0.06975EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2021/07/13 12:0 a.m.41 views

Amazon Linux AMI : dhcp (ALAS-2021-1510)

The version of dhcp installed on the remote host is prior to 4.1.1-53.P1.29. It is, therefore, affected by a vulnerability as referenced in the ALAS-2021-1510 advisory. A flaw was found in the Dynamic Host Configuration Protocol DHCP. There is a discrepancy between the code that handles...

7.4CVSS7.6AI score0.06118EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2021/07/06 6:9 p.m.79 views

CVE-2021-36085

The CIL compiler in SELinux 3.2 has a use-after-free in cilverifyclassperms called from verifymappermclassperms and hashtabmap...

3.3CVSS5.2AI score0.00457EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2021/07/06 5:20 p.m.71 views

CVE-2021-36086

The CIL compiler in SELinux 3.2 has a use-after-free in cilresetclasspermission called from cilresetclasspermsset and cilresetclasspermslist...

3.3CVSS5.2AI score0.00597EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2021/07/06 5:15 p.m.67 views

CVE-2021-36084

The CIL compiler in SELinux 3.2 has a use-after-free in cilverifyclassperms called from cilverifyclasspermission and cilpreverifyhelper...

3.3CVSS5.2AI score0.00485EPSS
SaveExploits1References3
Rows per page
Query Builder