CVE-2022-21321 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2022-21322 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2022-21315 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2022-21309 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2022-21324 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2022-21314 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2022-21297 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2022-21280 vulnerabilities

Vulnerabilities for packages: mysql...

DLA-2888-1 nvidia-graphics-drivers - security update

Bulletin has no description...

MGASA-2022-0020 Updated openexr packages fix security vulnerability

OpenEXR 3.1.0 through 3.1.3 has a heap-based buffer overflow in Imf31::LineCompositeTask::execute called from IlmThread31::NullThreadPoolProvider::addTask and IlmThread31::ThreadPool::addGlobalTask. CVE-2021-45942...

CVE-2021-33828

The filesantivirus component before 1.0.0 for ownCloud mishandles the protection mechanism by which malicious files that have been uploaded to a public share are supposed to be deleted upon detection...

CVE-2021-45769

A NULL pointer dereference in AcseConnectionparseMessage at src/mms/isoacse/acse.c of libiec61850 v1.5.0 can lead to a segmentation fault or application crash...

CVE-2021-45763

GPAC v1.1.0 was discovered to contain an invalid call in the function gfnodechanged. This vulnerability can lead to a Denial of Service DoS...

MGASA-2022-0008 Updated suricata packages fix security vulnerability

Critical evasion in suricata CVE-2021-35063...

OPENSUSE-SU-2022:0040-1 Security update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-operator-container

This update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-operator-container fixes the following issues: - CVE-2021-43565: Fixes a vulnerability in the golang.org/x/crypto/ssh package which allowed unauthenticated clients to cau...

GHSA-P46C-W9M3-7QR2 Use of Uninitialized Resource in flumedb.

Affected versions of this crate passes an uninitialized buffer to a user-provided Read implementation. There are two of such cases gooffsetlog::readentry & offsetlog::readentry. Arbitrary Read implementations can read from the uninitialized buffer memory exposure and also can return incorrect...

Missing Initialization of Resource in pnet

An issue was discovered in the pnet crate before 0.27.2 for Rust. There is a segmentation fault upon attempted dereference of an uninitialized descriptor because of an erroneous IcmpTransportChannelIterator compiler optimization...

GHSA-FG7R-2G4J-5CGR Race Condition in tokio

If a tokio::sync::oneshot channel is closed via the oneshot::Receiver::close method, a data race may occur if the oneshot::Sender::send method is called while the corresponding oneshot::Receiver is awaited or calling tryrecv. When these methods are called concurrently on a closed channel, the two...

GHSA-CM8G-544F-P9X9 Use After Free in rusqlite

An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. createcollation has a use-after-free...

Prototype Pollution

oro/platform is vulnerable to prototype pollution. An attacker is able to inject arbitrary properties into existing construct prototypes and modify attributes such as proto, constructorprototype, and constructor.prototype...