CVE-2021-20228 affecting package ansible for versions less than 2.12.1-1

CVE-2021-20228 affecting package ansible for versions less than 2.12.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-36160 affecting package httpd for versions less than 2.4.52-1

CVE-2021-36160 affecting package httpd for versions less than 2.4.52-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-0318 affecting package vim for versions less than 8.2.4233-1

CVE-2022-0318 affecting package vim for versions less than 8.2.4233-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-42385 affecting package busybox for versions less than 1.35.0-1

CVE-2021-42385 affecting package busybox for versions less than 1.35.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-23308 affecting package libxml2 for versions less than 2.9.13-1

CVE-2022-23308 affecting package libxml2 for versions less than 2.9.13-1. An upgraded version of the package is available that resolves this issue...

[ASA-202204-8] xz: arbitrary command execution

Arch Linux Security Advisory ASA-202204-8 ========================================= Severity: High Date : 2022-04-07 CVE-ID : CVE-2022-1271 Package : xz Type : arbitrary command execution Remote : No Link : https://security.archlinux.org/AVG-2665 Summary ======= The package xz before version...

Vulnerabilities fixed in Tomcat for Ubuntu

Vulnerabilities have been fixed in Tomcat. The vulnerabilities potentially allow a malicious party to cause a denial-of-service cause, access sensitive data or execute code execute code with privileges from the vulnerable application. These vulnerabilities have already been described in several...

[SECURITY] [DLA 2965-1] cacti security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2965-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler March 29, 2022 https://wiki.debian.org/LTS -...

CVE-2020-36318 affecting package rust 1.47.0-2

CVE-2020-36318 affecting package rust 1.47.0-2. An upgraded version of the package is available that resolves this issue...

CVE-2021-44533 affecting package nodejs 14.18.1-1

CVE-2021-44533 affecting package nodejs 14.18.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-24407 affecting package cyrus-sasl 2.1.27-4

CVE-2022-24407 affecting package cyrus-sasl 2.1.27-4. An upgraded version of the package is available that resolves this issue...

CVE-2022-24051 affecting package mariadb 10.3.32-1

CVE-2022-24051 affecting package mariadb 10.3.32-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-21294 affecting package openjdk8 1.8.0.292-1

CVE-2022-21294 affecting package openjdk8 1.8.0.292-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-21305 affecting package openjdk8 1.8.0.292-1

CVE-2022-21305 affecting package openjdk8 1.8.0.292-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-21271 affecting package openjdk8 1.8.0.292-1

CVE-2022-21271 affecting package openjdk8 1.8.0.292-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-0368 affecting package vim 8.2.4151-1

CVE-2022-0368 affecting package vim 8.2.4151-1. An upgraded version of the package is available that resolves this issue...

[slackware-security] cyrus-sasl

New cyrus-sasl packages are available for Slackware 14.2, 15.0, and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/cyrus-sasl-2.1.28-i586-1slack15.0.txz: Upgraded. This update fixes bugs and security issues. For more information, see:...

Debian DSA-5081-1 : redis - security update

The remote Debian 10 / 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5081 advisory. - It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a Debian-specific Lua sandbox escape, which could result in...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-thunderbird-91.6.1-i686-1slack15.0.txz: Upgraded. This release contains security fixes and improvements. For mor...

[slackware-security] aaa_base

New aaabase packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/aaabase-15.0-i586-4slack15.0.txz: Rebuilt. If root's mailbox did not already exist, it would be created with insecure permissions...