RUSTSEC-2022-0090 `libsqlite3-sys` via C SQLite CVE-2022-35737

It was sometimes possible for SQLite versions = 1.0.12, 3.39.2 to allow an array-bounds overflow when large string were input into SQLite's printf function. As libsqlite3-sys bundles SQLite, it is susceptible to the vulnerability. libsqlite3-sys was updated to bundle the patched version of SQLite...

The vulnerability of the set_sys_time() function implementation in the Robustel R1510 software-defined VPN routers allows a hacker to execute arbitrary commands.

The vulnerability of the setsystime function implementation in Robustel R1510 VPN routers lies in the lack of measures to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by sending speciall...

[SECURITY] Fedora 36 Update: golang-github-sophaskins-efs2tar-0-0.5.20210317git4db1b0f.fc36

efs2tar is a tool that converts SGI EFS-formatted filesystem images ie, the result of dd-ing a whole device in to a file in to tarballs. It was based entirely on NetBSD's sys/fs/efs...

[SECURITY] Fedora 35 Update: golang-github-sophaskins-efs2tar-0-0.4.20210317git4db1b0f.fc35

efs2tar is a tool that converts SGI EFS-formatted filesystem images ie, the result of dd-ing a whole device in to a file in to tarballs. It was based entirely on NetBSD's sys/fs/efs...

PT-2022-20215

Name of the Vulnerable Software and Affected Versions Software affected versions not specified Description The system allows unauthorized viewing of usernames and passwords, enabling access to the system. The issue is accessible via the "http://api/sys username passwd.cmd" API endpoint...

GO-2022-0493 Incorrect privilege reporting in syscall and golang.org/x/sys/unix

When called with a non-zero flags parameter, the Faccessat function can incorrectly report that a file is accessible...

OESA-2022-1748 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: Using the ioctl function to modify the vcfont.height value through PIOFONT can cause the KASAN: vmalloc-out-of-bounds in sysimageblit problem. Requires tty group permissions to access the device file /dev/tty1.CVE-2021-33656...

CVE-2022-33329

Multiple command injection vulnerabilities exist in the webserver ajax endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network packets can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.The /ajax/setsystime/...

golang.org/x/sys/unix has Incorrect privilege reporting in syscall

Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Reporting in syscall. When called with a non-zero flags parameter, the Faccessat function could incorrectly report that a file is accessible. Specific Go Packages Affected golang.org/x/sys/unix...

Malicious code in libfuzzer-sys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d92c76a6cc9a5059441f93a540e6540b1d219fbbbeb718dc19dfeed550206e1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4299 Malicious code in libfuzzer-sys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d92c76a6cc9a5059441f93a540e6540b1d219fbbbeb718dc19dfeed550206e1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-212 Malicious code in @dsgn-sys/editor-elements-corvid-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c7fe3693887a0b35be470744969abc99f121ce0eb8036ce3f5eef87d8cf515c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Fedora: Security Advisory for golang-x-sys (FEDORA-2022-1da581ac6d)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for golang-x-sys (FEDORA-2022-725ac93b48)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: golang-x-sys-0-23.20220604gitbc2c85a.fc35

Go packages for low-level interactions with the operating system...

[SECURITY] Fedora 36 Update: golang-x-sys-0-23.20220604gitbc2c85a.fc36

Go packages for low-level interactions with the operating system...

PT-2022-19828 · Publiccms · Publiccms

Name of the Vulnerable Software and Affected Versions: PublicCMS versions 4.0.202204.a and below Description: The issue is related to an information leak in the component /views/directive/sys/SysConfigDataDirective.java. Recommendations: For PublicCMS versions 4.0.202204.a and below, consider...

new packages: perl-Sys-Syslog

An update is available for perl-Sys-Syslog. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

new packages: perl-Sys-MemInfo

An update is available for perl-Sys-MemInfo. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

new packages: perl-Sys-CPU

An update is available for perl-Sys-CPU. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...