24 matches found
scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()
...
SUSE-SU-2025:0814-1 Security update for python
This update for python fixes the following issues: - Reference to no longer used 'bracketedhost' variable in the fix for CVE-2025-0938 bsc1236705, bsc1223694...
RHSA-2019:3335 Red Hat Security Advisory: python27:2.7 security and bug fix update
Bulletin has no description...
RHSA-2024:0242 Red Hat Security Advisory: java-17-openjdk security and bug fix update
Bulletin has no description...
RHSA-2014:1785 Red Hat Security Advisory: openstack-neutron security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2013:0528 Red Hat Security Advisory: ipa security, bug fix and enhancement update
Bulletin has no description...
RHSA-2018:3837 Red Hat Security Advisory: ansible security and bug fix update
Bulletin has no description...
RHSA-2017:3466 Red Hat Security Advisory: qemu-kvm-rhev security and bug fix update
Bulletin has no description...
RHBA-2020:5307 Red Hat Bug Fix Advisory: openvswitch2.11 bug fix and enhancement update
Bulletin has no description...
RHSA-2016:0308 Red Hat Security Advisory: rabbitmq-server security and bugfix update
Bulletin has no description...
RHSA-2009:1528 Red Hat Security Advisory: samba security and bug fix update
Bulletin has no description...
CVE-2024-36899 gpiolib: cdev: Fix use after free in lineinfo_changed_notify
In the Linux kernel, the following vulnerability has been resolved: gpiolib: cdev: Fix use after free in lineinfochangednotify The use-after-free issue occurs as follows: when the GPIO chip device file is being closed by invoking gpiochrdevrelease, watchedlines is freed by bitmapfree, but the...
CVE-2023-29011 Git for Windows's config file of `connect.exe` is susceptible to malicious placing
Git for Windows, the Windows port of Git, ships with an executable called connect.exe, which implements a SOCKS5 proxy that can be used to connect e.g. to SSH servers via proxies when certain ports are blocked for outgoing connections. The location of connect.exe's config file is hard-coded as...
ALSA-2022:7447 Moderate: pcs security, bug fix, and enhancement update
The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fixes: pcs: improper authentication via PAM CVE-2022-1049 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information,...
SUSE-SU-2022:2351-1 Security update for python3
This update for python3 fixes the following issues: Security issues fixed: - CVE-2021-3572: Update bundled pip wheel to the latest SLE version bsc1186819 - CVE-2015-20107: avoid command injection in the mailcap module bsc1198511. Other bugs fixed: - Remove shebangs from from python-base libraries...
PYSEC-2021-551
TensorFlow is an end-to-end open source platform for machine learning. Sending invalid argument for rowpartitiontypes of tf.rawops.RaggedTensorToTensor API results in a null pointer dereference and undefined behavior. The implementation accesses the first element of a user supplied list of values...
GHSA-38J9-7PP9-2HJW Invalid session token expiration
HashiCorp Vault and Vault Enterprise allowed the renewal of nearly-expired token leases and dynamic secret leases specifically, those within 1 second of their maximum TTL, which caused them to be incorrectly treated as non-expiring during subsequent use. Fixed in 1.5.9, 1.6.5, and 1.7.2...
ALBA-2021:1913 SDL and gstreamer bug fix and enhancement update
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...
OPENSUSE-SU-2020:2111-1 Security update for fontforge
This update for fontforge fixes the following issues: - fix for Use-after-free heap in the SFDGetFontMetaData function and the crash bsc1178308 CVE-2020-25690. This update was imported from the SUSE:SLE-15:Update update project...
SUSE-SU-2020:3413-1 Security update for xen
This update for xen fixes the following issues: Security issue fixed: - CVE-2020-28368: Fixed the Intel RAPL sidechannel attack, aka PLATYPUS attack, aka XSA-351 bsc1178591. Non-security issues fixed: - Updated to Xen 4.12.4 bug fix release bsc1027519. - Fixed a panic during MSI cleanup on AMD...