UVI-2021-1001788 isdn: mISDN: Fix sleeping function called from invalid context

isdn: mISDN: Fix sleeping function called from invalid context This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.253 by commit...

DSA-4994-1 bind9 - security update

Bulletin has no description...

MGASA-2021-0492 Updated opencryptoki packages fix security vulnerability

It was discovered that openCryptoki incorrectly handled certain EC keys. An attacker could possibly use this issue to cause a invalid curve attack...

Remote Code Execution (RCE)

Storm core is vulnerable to remote code execution RCE attacks. Vulnerable getGroupsCommand function is subject to unsafe deserialization, allowing remote authenticated attackers to execute arbitrary code in the server...

CVE-2021-35646 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2021-35634 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2021-35627 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2021-35625 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2021-35622 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2021-35612 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2021-2479 vulnerabilities

Vulnerabilities for packages: mysql...

SUSE-SU-2021:3481-1 Security update for postgresql10

This update for postgresql10 fixes the following issues: - Fix for build with llvm12 on s390x. bsc1185952 - Re-enable 'icu' for PostgreSQL 10. bsc1179945 - Add postgresqlXX-server-devel as a dependency for postgresql13-server-devel. bsc1187751 - Upgrade to version 10.18. bsc1190177 Upgrade to...

Denial Of Service (DoS)

samba is vulnerable to denial of service. The vulnerability exists due to a null pointer de-reference...

GSD-2021-1001633 usb: dwc2: check return value after calling platform_get_resource()

usb: dwc2: check return value after calling platformgetresource This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.72 by commit...

GSD-2021-1001545 mcb: fix error handling in mcb_alloc_bus()

mcb: fix error handling in mcballocbus This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.249 by commit...

CVE-2021-30846

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, Safari 15, tvOS 15, iOS 15 and iPadOS 15, watchOS 8. Processing maliciously crafted web content may lead to arbitrary code execution...

Denial Of Service (DoS)

MySQL is vulnerable to denial of service. An attacker is able to exploit the vulnerability by accessing the network and crashing the system...

Denial Of Service (DoS)

lua5.3 is vulnerable to denial of service. The vulnerability exists due to a negation overflow and segmentation fault in getlocal and setlocal...

MGASA-2021-0474 Updated xstream/xmlpull/mxparser packages fix security vulnerability

Multiple security vulnerabilities have been discovered in XStream. See references for details...

GHSA-WPVM-WQR4-P7CW Inclusion of Functionality from Untrusted Control Sphere in CKEditor 4

It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted URL-like text into the editor, and then press Enter or Space in the Autolink plugin...