shadow-utils bug fix and enhancement update

An update is available for shadow-utils. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux...

alsa-utils bug fix and enhancement update

An update is available for alsa-utils. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9...

flatpak-xdg-utils bug fix and enhancement update

An update is available for flatpak-xdg-utils. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

Moderate: libtirpc security update

The libtirpc packages contain SunLib's implementation of transport-independent remote procedure call TI-RPC documentation, which includes a library required by programs in the nfs-utils and rpcbind packages. Security Fixes: libtirpc: DoS vulnerability with lots of connections CVE-2021-46828 For...

ALSA-2022:8400 Moderate: libtirpc security update

The libtirpc packages contain SunLib's implementation of transport-independent remote procedure call TI-RPC documentation, which includes a library required by programs in the nfs-utils and rpcbind packages. Security Fixes: libtirpc: DoS vulnerability with lots of connections CVE-2021-46828 For...

Malicious Package

Overview pipstyle is a malicious package. This is a malicious package, which contains a copy of the W4SP Stealer malware in utils.py. The malicious code cannot be executed but it could be invoked if this package were called by another one due to dependency confusion. Remediation Avoid using all...

Path traversal

A Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in spacewalk/Uyuni of SUSE Linux Enterprise Module for SUSE Manager Server 4.2, SUSE Linux Enterprise Module for SUSE Manager Server 4.3, SUSE Manager Server 4.2 allows remote attackers to read files...

shadow-utils bug fix and enhancement update

An update is available for shadow-utils. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux...

nfs-utils bug fix and enhancement update

An update is available for nfs-utils. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8....

alsa-utils bug fix and enhancement update

An update is available for alsa-utils. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8...

flatpak-xdg-utils bug fix and enhancement update

An update is available for flatpak-xdg-utils. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

kvm_utils security update

hivex 1.3.18-21 - Bounds check for block exceeding page length CVE-2021-3504 resolves: rhbz1950501 1.3.18 - Resolves: bz1810193 Upgrade components in virt:rhel module:stream for RHEL-8.3 release 1.3.18 - Resolves: bz1810193 Upgrade components in virt:rhel module:stream for RHEL-8.3 release 1.3.15...

CVE-2022-37603

A flaw was found in loader-utils webpack library. When the url variable from interpolateName is set, the prototype can be polluted. This issue could lead to a regular expression Denial of Service ReDoS, affecting the availability of the affected component...

Amazon Linux 2022 : cifs-utils, cifs-utils-devel, cifs-utils-info (ALAS2022-2022-204)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-204 advisory. A stack-based buffer overflow issue was found in pifs-utils. Parsing the mount.cifs ip command-line argument can lead to local attackers gaining root privileges. CVE-2022-27239 A flaw was found...

DEBIAN-CVE-2022-43254

GPAC v2.1-DEV-rev368-gfd054169b-master was discovered to contain a memory leak via the component gflistnew at utils/list.c...

Memory corruption

GPAC v2.1-DEV-rev368-gfd054169b-master was discovered to contain a memory leak via the component gflistnew at utils/list.c...

UBUNTU-CVE-2022-43254

GPAC v2.1-DEV-rev368-gfd054169b-master was discovered to contain a memory leak via the component gflistnew at utils/list.c...

CVE-2022-43254

GPAC v2.1-DEV-rev368-gfd054169b-master has a memory leak in gf_list_new (utils/list.c). Exploitation context is not provided in the documents; CVSS indicates MEDIUM overall with local access and high availability impact. The Gentoo GLSA 202408-21 notes a resolution by upgrading to GPAC ≥ 2.2.0. I...

CVE-2022-43254

GPAC v2.1-DEV-rev368-gfd054169b-master was discovered to contain a memory leak via the component gflistnew at utils/list.c...

GPAC 安全漏洞

GPAC is an open source multimedia framework. A security vulnerability exists in GPAC v2.1, which stems from a memory leak in the gflistnew component of utils/list.c. The vulnerability is caused by the presence of a memory leak in the gflistnew component of utils/list.c...