libksba security update

CentOS Errata and Security Advisory CESA-2022:7088 An update for libksba is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

GSD-2022-1005333 arm64: errata: Remove AES hwcap for COMPAT tasks

arm64: errata: Remove AES hwcap for COMPAT tasks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

xorg security update

CentOS Errata and Security Advisory CESA-2022:5905 An update for xorg-x11-server is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Security update for atheme (important)

openSUSE Security Update: Security update for atheme Announcement ID: openSUSE-SU-2022:10018-1 Rating: important References: 1174075 1195989 Cross-References: CVE-2022-24976 CVSS scores: CVE-2022-24976 NVD : 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: openSUSE Backports...

gzip security update

CentOS Errata and Security Advisory CESA-2022:2191 An update for gzip is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

minizip, zlib security update

CentOS Errata and Security Advisory CESA-2022:2213 An update for zlib is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Information Exposure

Overview katello is a package that adds Content and Subscription Management to Foreman Affected versions of this package are vulnerable to Information Exposure via an errata-related API. An authenticated user can expose internal IDs. This is caused by an incomplete fix for CVE-2016-3072...

katello SQL Injection vulnerability

A SQL injection flaw was found in katello's errata-related API. An authenticated remote attacker can craft input data to force a malformed SQL query to the backend database, which will leak internal IDs. This is issue is related to an incomplete fix for CVE-2016-3072. Version 3.10 and older is...

GHSA-JX5V-788G-QW58 katello SQL Injection vulnerability

A SQL injection flaw was found in katello's errata-related API. An authenticated remote attacker can craft input data to force a malformed SQL query to the backend database, which will leak internal IDs. This is issue is related to an incomplete fix for CVE-2016-3072. Version 3.10 and older is...

katello SQL Injection vulnerability

A SQL injection flaw was found in katello's errata-related API. An authenticated remote attacker can craft input data to force a malformed SQL query to the backend database, which will leak internal IDs. This is issue is related to an incomplete fix for CVE-2016-3072. Version 3.10 and older is...

Security update for minidlna (moderate)

openSUSE Security Update: Security update for minidlna Announcement ID: openSUSE-SU-2022:0079-1 Rating: moderate References: 1181400 1196814 Cross-References: CVE-2022-26505 CVSS scores: CVE-2022-26505 SUSE: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Backports...

Security update for conmon, libcontainers-common, libseccomp, podman (moderate)

openSUSE Security Update: Security update for conmon, libcontainers-common, libseccomp, podman Announcement ID: openSUSE-SU-2022:23018-1 Rating: moderate References: 1176804 1177598 1181640 1182998 1188520 1188914 1193166 1193273 SLE-22714 Cross-References: CVE-2020-14370 CVE-2020-15157...

Security update for go1.17 (important)

openSUSE Security Update: Security update for go1.17 Announcement ID: openSUSE-SU-2022:0723-1 Rating: important References: 1190649 1195834 1195835 1195838 Cross-References: CVE-2022-23772 CVE-2022-23773 CVE-2022-23806 CVSS scores: CVE-2022-23772 NVD : 7.5...

GSD-2022-1000499 arm64: errata: Add detection for TRBE trace data corruption

arm64: errata: Add detection for TRBE trace data corruption This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.10 by commit...

GSD-2022-1000494 arm64: errata: Add detection for TRBE invalid prohibited states

arm64: errata: Add detection for TRBE invalid prohibited states This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.10 by commit...

openldap security update

CentOS Errata and Security Advisory CESA-2022:0621 An update for openldap is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

firefox security update

CentOS Errata and Security Advisory CESA-2022:0514 An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

thunderbird security update

CentOS Errata and Security Advisory CESA-2022:0127 An update for thunderbird is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Security update for watchman (important)

openSUSE Security Update: Security update for watchman Announcement ID: openSUSE-SU-2022:0016-1 Rating: important References: 1181400 1194470 Cross-References: CVE-2022-21944 Affected Products: openSUSE Backports SLE-15-SP3 An update that solves one vulnerability and has one errata is now...

ctdb, libsmbclient, libwbclient, samba security update

CentOS Errata and Security Advisory CESA-2021:5192 An update for samba is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...