Updated perl-Convert-ASN1 package fixes security vulnerability

perl-Convert-ASN1 aka the Convert::ASN1 module for Perl through 0.27 allows remote attackers to cause an infinite loop via unexpected input CVE-2013-7488...

Important: Red Hat Security Advisory: kpatch-patch security update

An update is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links...

DEBIAN-CVE-2021-34552

Pillow through 8.2.0 and PIL aka Python Imaging Library through 1.1.7 allow an attacker to pass controlled parameters directly into a convert function to trigger a buffer overflow in Convert.c...

ALPINE-CVE-2021-34552

Pillow through 8.2.0 and PIL aka Python Imaging Library through 1.1.7 allow an attacker to pass controlled parameters directly into a convert function to trigger a buffer overflow in Convert.c...

PYSEC-2021-331

Pillow through 8.2.0 and PIL aka Python Imaging Library through 1.1.7 allow an attacker to pass controlled parameters directly into a convert function to trigger a buffer overflow in Convert.c...

UBUNTU-CVE-2021-34552

Pillow through 8.2.0 and PIL aka Python Imaging Library through 1.1.7 allow an attacker to pass controlled parameters directly into a convert function to trigger a buffer overflow in Convert.c...

CVE-2021-34552

Pillow through 8.2.0 and PIL aka Python Imaging Library through 1.1.7 allow an attacker to pass controlled parameters directly into a convert function to trigger a buffer overflow in Convert.c...

CVE-2021-34552

Pillow through 8.2.0 and PIL aka Python Imaging Library through 1.1.7 allow an attacker to pass controlled parameters directly into a convert function to trigger a buffer overflow in Convert.c...

PT-2021-28354

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the involvement of specific functions: stbi convert ...

PT-2021-4557

Name of the Vulnerable Software and Affected Versions Pillow versions 8.2.0 and earlier PIL aka Python Imaging Library versions 1.1.7 and earlier Description The issue is related to a buffer overflow in Convert.c, which can be triggered by passing controlled parameters directly into a convert...

CVE-2021-34552

Pillow through 8.2.0 and PIL aka Python Imaging Library through 1.1.7 allow an attacker to pass controlled parameters directly into a convert function to trigger a buffer overflow in Convert.c...

CVE-2021-34552

Pillow through 8.2.0 and PIL aka Python Imaging Library through 1.1.7 allow an attacker to pass controlled parameters directly into a convert function to trigger a buffer overflow in Convert.c...

PT-2021-29260

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.5 through v5.12.9 Description The issue is related to a NULL pointer dereference in the convert variable location function. This problem was introduced in version v5.5 and is fixed in version v5.12.10. The actual impac...

PT-2021-25266

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.5 through v5.12.9 Description: The issue is related to a NULL pointer dereference in the convert variable location function. This problem was introduced in version v5.5 and is fixed in version v5.12.10. The actual...

PT-2021-29229

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.5 through v5.10.42 Description The issue is related to a NULL pointer dereference in the convert variable location function. This problem was introduced in version v5.5 and is fixed in version v5.10.43. The actual impa...

PT-2021-25235

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.5 through v5.10.42 Description The issue is related to a NULL pointer dereference in the convert variable location function. This problem was introduced in version v5.5 and is fixed in version v5.10.43. The actual impa...

SUSE: Security Advisory (SUSE-SU-2021:0183-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-33564

An argument injection vulnerability in the Dragonfly gem before 1.4.0 for Ruby allows remote attackers to read and write to arbitrary files via a crafted URL when the verifyurl option is disabled. This may lead to code execution. The problem occurs because the generate and process features...

Design/Logic Flaw

An argument injection vulnerability in the Dragonfly gem before 1.4.0 for Ruby allows remote attackers to read and write to arbitrary files via a crafted URL when the verifyurl option is disabled. This may lead to code execution. The problem occurs because the generate and process features...

CVE-2021-33564

Summary: CVE-2021-33564 affects the Dragonfly Ruby Gem prior to 1.4.0. An argument injection flaw allows remote attackers to read and write arbitrary files via a crafted URL when the verify_url option is disabled, potentially enabling arbitrary code execution. The root cause is described as misha...