nginx:1.18 security update

1.18.0-3.1.0.1 - Remove Red Hat references Orabug: 29498217 1:1.18.0-3.1 - Resolves: 1963178 - CVE-2021-23017 nginx:1.18/nginx: Off-by-one in ngxresolvercopy when labels are followed by a pointer to a root domain name...

UVI-2021-1000710 misc/uss720: fix memory leak in uss720_probe

misc/uss720: fix memory leak in uss720probe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.4.271 by commit...

GSD-2021-1000690 tipc: skb_linearize the head skb when reassembling msgs

tipc: skblinearize the head skb when reassembling msgs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.271 by commit...

GSD-2021-1000680 net: usb: fix memory leak in smsc75xx_bind

net: usb: fix memory leak in smsc75xxbind This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.235 by commit...

UVI-2021-1000669 mld: fix panic in mld_newpack()

mld: fix panic in mldnewpack This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.235 by commit 221142038f36d9f28b64e83e954774da4d4ccd17, it wa...

GSD-2021-1000665 iommu/vt-d: Fix sysfs leak in alloc_iommu()

iommu/vt-d: Fix sysfs leak in allociommu This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.193 by commit...

GSD-2021-1000661 NFS: fix an incorrect limit in filelayout_decode_layout()

NFS: fix an incorrect limit in filelayoutdecodelayout This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.193 by commit...

GSD-2021-1000656 drm/meson: fix shutdown crash when component not probed

drm/meson: fix shutdown crash when component not probed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.193 by commit...

UVI-2021-1000632 tipc: wait and exit until all work queues are done

tipc: wait and exit until all work queues are done This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.124 by commit...

UVI-2021-1000625 btrfs: do not BUG_ON in link_to_fixup_dir

btrfs: do not BUGON in linktofixupdir This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.124 by commit 0ed102453aa1cd12fefde8f6b60b9519b0b1f00...

GSD-2021-1000625 btrfs: do not BUG_ON in link_to_fixup_dir

btrfs: do not BUGON in linktofixupdir This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.124 by commit 0ed102453aa1cd12fefde8f6b60b9519b0b1f00...

UVI-2021-1000617 cxgb4: avoid accessing registers when clearing filters

cxgb4: avoid accessing registers when clearing filters This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.124 by commit...

GSD-2021-1000611 net/sched: fq_pie: fix OOB access in the traffic path

net/sched: fqpie: fix OOB access in the traffic path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.42 by commit...

UVI-2021-1000611 net/sched: fq_pie: fix OOB access in the traffic path

net/sched: fqpie: fix OOB access in the traffic path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.42 by commit...

GSD-2021-1000575 net: zero-initialize tc skb extension on allocation

net: zero-initialize tc skb extension on allocation This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.42 by commit...

UVI-2021-1000568 s390/dasd: add missing discipline function

s390/dasd: add missing discipline function This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.9 by commit...

UVI-2021-1000557 NFS: Don't corrupt the value of pg_bytes_written in nfs_do_recoalesce()

NFS: Don't corrupt the value of pgbyteswritten in nfsdorecoalesce This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.9 by commit...

UVI-2021-1000555 tipc: wait and exit until all work queues are done

tipc: wait and exit until all work queues are done This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.9 by commit...

GSD-2021-1000555 tipc: wait and exit until all work queues are done

tipc: wait and exit until all work queues are done This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.9 by commit...

GSD-2021-1000547 mptcp: fix data stream corruption

mptcp: fix data stream corruption This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.9 by commit 18e7f0580da15cac1e79d73683ada5a9e70980f8, it...