PT-2022-30603

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.238 Description A potential issue exists due to a deadlock in concurrent rename whiteout and inode writeback in the ubifs component. The actual impact and attack plausibility have not yet been proven...

PT-2022-30043

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue is related to a double free error in the rename whiteout function, specifically affecting the whiteout ui-data component. This problem was introduced in version v4.9 and is fixed in...

PT-2022-29717

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue is related to a double free in the rename whiteout function for whiteout ui-data. This problem was introduced in version v4.9 and is fixed in Linux Kernel version v5.16.19. The actu...

PT-2022-30482

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.189 Description A potential issue exists due to a deadlock in concurrent rename whiteout and inode writeback in the ubifs component. The actual impact and attack plausibility have not yet been proven...

PT-2022-30304

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description The issue is related to a double free in the rename whiteout function for whiteout ui-data. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...

PT-2022-29393

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description A double free issue was discovered in the rename whiteout function of the ubifs component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-29392

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v4.9 through v5.17.1 Description A potential issue exists due to a deadlock in concurrent rename whiteout and inode writeback in the ubifs component. The actual impact and attack plausibility have not yet been proven...

PT-2022-29715

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description A potential issue exists due to a deadlock in concurrent rename whiteout and inode writeback. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-30602

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.238 Description The issue is related to a double free in the rename whiteout function for whiteout ui-data. The actual impact and attack plausibility have not yet been proven. Recommendations For versions...

PT-2022-30483

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.189 Description The issue is related to a double free in the rename whiteout function for whiteout ui-data. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...

kernel security, bug fix, and enhancement update

3.10.0-1160.62.1.OL7 - Update Oracle Linux certificates Ilya Okomin - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and shim-x64 = 15-2.0.9 - Update oraclekernel-sig-key...

March 28, 2022—KB5011563 (OS Build 22000.593) Preview

None None...

CVE-2022-26254

WoWonder The Ultimate PHP Social Network Platform v4.0.0 was discovered to contain an access control issue which allows unauthenticated attackers to arbitrarily change group ID names...

Envato WoWonder security vulnerabilities

Envato WoWonder is an application from the Australian company Envato. It provides a PHP social networking script. A security vulnerability exists in WoWonder The Ultimate PHP Social Network Platform v4.0.0 that could allow an unauthenticated attacker to arbitrarily change group ID names...

A race condition accessing file object in the Linux kernel OverlayFS subsystem was found in the way users do rename in specific way with OverlayFS. A local user could use this flaw to crash the system.

...

CVE-2022-0377

Users of the LearnPress WordPress plugin before 4.1.5 can upload an image as a profile avatar after the registration. After this process the user crops and saves the image. Then a "POST" request that contains user supplied name of the image is sent to the server for renaming and cropping of the...

PT-2022-13138 · WordPress · Learnpress

Name of the Vulnerable Software and Affected Versions: LearnPress WordPress plugin versions prior to 4.1.5 Description: The issue allows users to upload an image as a profile avatar after registration, which is then cropped and saved. A "POST" request is sent to the server to rename and crop the...

CVE-2022-0377: Use of a Broken or Risky Cryptographic Algorithm

Users of the LearnPress WordPress plugin before 4.1.5 can upload an image as a profile avatar after the registration. After this process the user crops and saves the image. Then a "POST" request that contains user supplied name of the image is sent to the server for renaming and cropping of the...

DEBIAN-CVE-2021-20321

A race condition accessing file object in the Linux kernel OverlayFS subsystem was found in the way users do rename in specific way with OverlayFS. A local user could use this flaw to crash the system...

CVE-2021-20321

A race condition accessing file object in the Linux kernel OverlayFS subsystem was found in the way users do rename in specific way with OverlayFS. A local user could use this flaw to crash the system...