[SECURITY] Fedora 34 Update: python-mpmath-1.2.1-2.fc34

Mpmath is a pure-Python library for multiprecision floating-point arithmetic. It provides an extensive set of transcendental functions, unlimited exponent sizes, complex numbers, interval arithmetic, numerical integration and differentiation, root-finding, linear algebra, and much more. Almost an...

The vulnerability in the implementation of the ti_sysbios_rts_MemAlloc_alloc() function (tirtos/packages/ti/sysbios/rts/MemAlloc.xdt) in the software development kit for microcontroller families SimpleLink, including CC13XX, CC26XX, CC32XX, and MSP432E4, allows a malicious actor to execute arbitrary code or cause a service failure.

The vulnerability of the tisysbiosrtsMemAllocalloc implementation tirtos/packages/ti/sysbios/rts/MemAlloc.xdt in the software development kit for microcontroller families SimpleLink, including CC13XX, CC26XX, CC32XX, and MSP432E4, is caused by a numerical overflow. Exploiting this vulnerability c...

The vulnerability in the implementation of the HeapTrack_alloc() function (kernel/tirtos/packages/ti/sysbios/heaps/HeapTrack.c) of the software development kit for microcontroller series CC13XX, CC26XX, CC32XX, and MSP432E4 allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the HeapTrackalloc function implementation kernel/tirtos/packages/ti/sysbios/heaps/HeapTrack.c in the software development kit for microcontroller series CC13XX, CC26XX, CC32XX, and MSP432E4 arises due to a numerical overflow condition. Exploiting this vulnerability can allow...

USN-5061-1: Scilab vulnerabilities

It was discovered that Scilab did not properly sanitize XML inputs. An atacker could use a crafted XML file to cause a denial of service or possibly execute arbitrary code...

The vulnerability of the command-line utility tools in the util-linux package allows a attacker to execute arbitrary code on the target system.

The vulnerability of the command-line utility tools in util-linux involves a numerical overflow in ipcutils.c. Exploiting this vulnerability allows an attacker to send special data to the application and trigger a numerical overflow...

The vulnerability of the wordexp() function in the library that handles system calls and core glibc functions allows a hacker to read arbitrary files.

The vulnerability of the wordexp function in the library, which handles system calls and core glibc functions, is caused by a numerical overflow. Exploiting this vulnerability could allow an attacker to read arbitrary files...

The vulnerability of the RestoreMSCWarning() function in the ImageMagick console graphics editor’s /coders/pdf.c component allows a malicious actor to cause a service failure due to a numerical overflow condition.

The vulnerability of the RestoreMSCWarning function in the ImageMagick console-based graphics editor’s /coders/pdf.c component is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially created PDF file...

MGASA-2021-0304 Updated systemd packages fix a security vulnerability

A flaw was found in systemd, where it mishandles numerical usernames beginning with decimal digits, or "0x" followed by hexadecimal digits. When the usernames are used by systemd, for example in service units, an unexpected user may be used instead. In some particular configurations, this flaw...

The vulnerability in the array distribution of the library for working with PKCS P11-kit modules allows a hacker to cause a service failure.

The vulnerability in the array distribution of the library for working with PKCS P11-kit modules is caused by a numerical overflow. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure through using calls like realloc or calloc...

The vulnerability of the Titanium CNC system, related to privilege management errors, allows a hacker to elevate their privileges within the system and execute arbitrary code.

The vulnerability of the Titanium CNC system is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges within the system and execute arbitrary code...

Oracle Linux 8 : systemd (ELSA-2021-1611)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-1611 advisory. 239-45.0.1 - backport upstream pstore tmpfiles patch Orabug: 31420486 - udev rules: fix memory hot add and remove Orabug: 31310273 - fix to enable...

RHEL 8 : systemd (RHSA-2021:1611)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:1611 advisory. The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides...

CentOS 8 : systemd (CESA-2021:1611)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1611 advisory. - systemd: Spoofing of XDGSEAT allows for actions to be checked against allowactive instead of allowany CVE-2019-3842 - systemd: Mishandles numerical...

systemd security, bug fix, and enhancement update

An update is available for systemd. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The systemd packages contain systemd, a system and service manager for Linux,...

Google TensorFlow 数字错误漏洞

Google TensorFlow is an end-to-end open source machine learning platform. A security vulnerability exists in pooling in Google TensorFlow. No details of the vulnerability are provided at this time...

Google TensorFlow 数字错误漏洞

Google TensorFlow is an end-to-end open source machine learning platform. A security vulnerability exists in the convolutional code in Google TensorFlow. No details of the vulnerability are provided at this time...

Google TensorFlow 数字错误漏洞

Google TensorFlow is an end-to-end open source machine learning platform. A security vulnerability exists in SVDF in Google TensorFlow. No details of the vulnerability are provided at this time...

The vulnerability of the CNCSoft-B software, related to reading beyond the buffer boundaries, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the CNCSoft-B numerical control software system relates to reading data beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of the Mojo browser platform for Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code.

The vulnerability of the Mojo browser platform for Google Chrome and Microsoft Edge is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

EulerOS Virtualization 2.9.0 : systemd (EulerOS-SA-2021-1738)

According to the version of the systemd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A flaw was found in systemd, where it mishandles numerical usernames beginning with decimal digits, or '0x' followed by hexadecimal...