Moderate: Red Hat Security Advisory: libarchive security update

An update for libarchive is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

openSUSE 15 Security Update : wdiff (openSUSE-SU-2022:10031-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2022:10031-1 advisory. - The make distcheck rule in GNU Automake before 1.11.6 and 1.12.x before 1.12.2 grants world-writable permissions to the extraction directory, whi...

Carel pCOWeb HVAC BACnet Gateway 2.1.0 Unauthenticated Directory Traversal

Summary pCO sistema is the solution CAREL offers its customers for managing HVAC/R applications and systems. It consists of programmable controllers, user interfaces, gateways and communication interfaces, remote management systems to offer the OEMs working in HVAC/R a control system that is...

RLSA-2022:5252 Moderate: libarchive security update

The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file...

openSUSE: Security Advisory for various (openSUSE-SU-2022:10032-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GNU LibreDWG Resource Management Error Vulnerability (CNVD-2022-5225)

GNU LibreDWG is a C language library from the GNU community for working with DWG files. GNU LibreDWG is vulnerable to a resource management error, and no details of the vulnerability are currently available...

GNU LibreDWG Denial of Service Vulnerability (CNVD-2022-52259)

GNU LibreDWG is a GNU community library for processing DWG files in C. A denial of service vulnerability exists in GNU LibreDWG, which stems from an assertion failure in the program. A remote attacker could exploit this vulnerability to cause a denial of service...

GNU LibreDWG Resource Management Error Vulnerability (CNVD-2022-52256)

GNU LibreDWG is a C language library from the GNU community for working with DWG files. GNU LibreDWG is vulnerable to a resource management error, and no details of the vulnerability are currently available...

GNU LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2022-52252)

GNU LibreDWG is a C language library from the GNU community for working with DWG files. GNU LibreDWG suffers from a heap buffer overflow vulnerability, for which no detailed vulnerability details are currently available...

GNU LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2022-52254)

GNU LibreDWG is a C language library from the GNU community for working with DWG files. GNU LibreDWG suffers from a heap buffer overflow vulnerability, for which no detailed vulnerability details are currently available...

GNU LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2022-52257)

GNU LibreDWG is a C language library from the GNU community for working with DWG files. GNU LibreDWG suffers from a heap buffer overflow vulnerability, for which no detailed vulnerability details are currently available...

GNU LibreDWG Stack Overflow Vulnerability

GNU LibreDWG is a C language library from the GNU community for working with DWG files. GNU LibreDWG is vulnerable to a stack overflow vulnerability, for which no detailed vulnerability details are currently available...

GNU LibreDWG Double Release Vulnerability (CNVD-2022-52258)

GNU LibreDWG is a C language library from the GNU community for working with DWG files. GNU LibreDWG suffers from a double-release vulnerability, for which no detailed vulnerability details are currently available...

Fedora: Security Advisory for openssl1.1 (FEDORA-2022-b651cb69e6)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

libredwg 缓冲区错误漏洞

GNU LibreDWG is a C language library from the GNU community for working with DWG files. GNU LibreDWG suffers from a heap buffer overflow vulnerability, for which no detailed vulnerability details are currently available...

Fedora: Security Advisory for python3.10 (FEDORA-2022-5ea8aa7518)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for python3.6 (FEDORA-2022-cece1d07d9)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for python3.9 (FEDORA-2022-0be85556b4)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Adobe Bridge Multiple Vulnerabilities (APSB22-25) - Mac OS X

The host is missing an important security update according to Adobe June update. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Amazon Linux AMI : xz (ALAS-2022-1598)

The version of xz installed on the remote host is prior to 5.2.2-1.14. It is, therefore, affected by a vulnerability as referenced in the ALAS-2022-1598 advisory. An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name...