mageia

Updated nvidia-current packages fix security vulnerabilities

Updated nvidia-current packages fix security vulnerabilities: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where a local user with basic capabilities can cause improper input validation, which may lead to denial of service, escalation of...

2022-08-18T18:45:48

mageia

Updated nvidia390 packages fix security vulnerabilities

Updated nvidia390 packages fix security vulnerabilities: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where a local user with basic capabilities can cause improper input validation, which may lead to denial of service, escalation of privileges,...

2022-08-18T18:45:48

redhat

(RHSA-2022:6051) Important: Logging Subsystem 5.5.0 - Red Hat OpenShift security update

Logging Subsystem 5.5.0 - Red Hat OpenShift Security Fix(es): kubeclient: kubeconfig parsing error can lead to MITM attacks (CVE-2022-0759) golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631) golang: out-of-bounds read in golang.org/x/text/language leads to DoS...

10.0 CVSS

2022-08-18T16:00:25

redhat

(RHSA-2022:6113) Important: Red Hat Application Interconnect 1.0 Release (rpms)

This release addresses several security issues in the underlying golang compiler by moving to golang version 1.17.12. Security Fixes: Important: - golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631) Moderate: - golang: net/http: improper sanitization of Transfer-Encoding header...

2022-08-18T14:51:43

debian

[SECURITY] [DLA 3076-1] freecad security update

Debian LTS Advisory DLA-3076-1 debian-lts@lists.debian.org https://www.debian.org/lts/security/ Emilio Pozuelo Monfort August 18, 2022 https://wiki.debian.org/LTS Package : freecad Version : 0.18~pre1+dfsg1-5+deb10u1 CVE...

7.6 CVSS

2022-08-18T12:20:22

debian

[SECURITY] [DSA 5213-1] schroot security update

Debian Security Advisory DSA-5213-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso August 18, 2022 https://www.debian.org/security/faq Package : schroot CVE ID : CVE-2022-2787 Julian Gilbey...

2022-08-18T11:57:49

debian

[SECURITY] [DLA 3075-1] schroot security update

Debian LTS Advisory DLA-3075-1 debian-lts@lists.debian.org https://www.debian.org/lts/security/ Salvatore Bonaccorso August 18, 2022 https://wiki.debian.org/LTS Package : schroot Version : 1.6.10-6+deb10u1 CVE ID :...

2022-08-18T10:57:22

debian

[SECURITY] [DLA 3074-1] epiphany-browser security update

Debian LTS Advisory DLA-3074-1 debian-lts@lists.debian.org https://www.debian.org/lts/security/ Emilio Pozuelo Monfort August 18, 2022 https://wiki.debian.org/LTS Package : epiphany-browser Version : 3.32.1.2-3~deb10u2 CVE...

5.0 CVSS

2022-08-18T07:54:52

suse

Security update for podman (important)

An update that fixes three vulnerabilities is now available. Description: This update for podman fixes the following issues: Updated to version 3.4.7: - CVE-2022-1227: Fixed an issue that could allow an attacker to publish a malicious image to a public registry and run arbitrary code in...

6.8 CVSS

2022-08-18T00:00:00

oraclelinux

cri-o security update

[1.22.5-1] - Addresses...

7.8 CVSS

2022-08-18T00:00:00

ubuntu

PostgreSQL vulnerability

Sven Klemm discovered that PostgreSQL incorrectly handled extensions. An attacker could possibly use this issue to execute arbitrary code when extensions are created or...

2022-08-18T00:00:00

ubuntu

Linux kernel (AWS) vulnerabilities

Roger Pau Monné discovered that the Xen virtual block driver in the Linux kernel did not properly initialize memory pages to be used for shared communication with the backend. A local attacker could use this to expose sensitive information (guest kernel memory). (CVE-2022-26365) Roger Pau Monné...

3.6 CVSS

2022-08-18T00:00:00

debian

[SECURITY] [DSA 5212-1] chromium security update

Debian Security Advisory DSA-5212-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff August 18, 2022 https://www.debian.org/security/faq Package : chromium CVE ID : CVE-2022-2852 CVE-2022-2853...

2022-08-17T22:57:57

slackware

[slackware-security] vim

New vim and vim-gvim packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/vim-8.2.4649-i586-2_slack15.0.txz: Rebuilt. Fix use after free, out-of-bounds read, and heap based buffer overflow. ...

2022-08-17T20:47:32

cloudlinux

Fixed CVE-2022-2581 in vim

CVE-2022-2581: fix illegal memory access when pattern starts with illegal...

2022-08-17T18:58:03

cloudlinux

Fixed 13 CVEs in expat

CVE-2022-25236: Fix insertion of namespace-separator characters into namespace URIs CVE-2022-25235: Fix malformed UTF-8 sequences which can lead to arbitrary code execution CVE-2022-25315: Fix integer overflow in storeRawNames() CVE-2022-22822: Fix integer overflow in addBinding()...

9.0 CVSS

2022-08-17T18:50:48

cloudlinux

Fixed CVE-2022-37434 in zlib

CVE-2022-37434: fix possible buffer overflow when getting a gzip header extra field with...

2022-08-17T18:47:33

cloudlinux

Fixed CVE-2022-29154 in rsync

CVE-2022-29154: fix arbitrary file write vulnerability via malicious rysnc server (MITM attack) Add '%check unset DISPLAY ' section but disable broken 'daemon' and 'hardlinks'...

2022-08-17T18:45:47

cloudlinux

Fixed CVEs in exim: CVE-2022-37451, CVE-2022-37452

CVE-2022-37452: fix heap-based buffer overflow for the alias list in host_name_lookup() CVE-2022-37451: fix invalid free in...

2022-08-17T18:41:10

aix

AIX is vulnerable to arbitrary command execution due to OpenSSL

IBM SECURITY ADVISORY First Issued: Wed Aug 17 16:39:03 CDT 2022 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/openssl_advisory36.asc https://aix.software.ibm.com/aix/efixes/security/openssl_advisory36.asc...

10.0 CVSS

2022-08-17T16:39:03

bulletinFamily:unix order:published

Updated nvidia-current packages fix security vulnerabilities

Updated nvidia390 packages fix security vulnerabilities

(RHSA-2022:6051) Important: Logging Subsystem 5.5.0 - Red Hat OpenShift security update

(RHSA-2022:6113) Important: Red Hat Application Interconnect 1.0 Release (rpms)

[SECURITY] [DLA 3076-1] freecad security update

[SECURITY] [DSA 5213-1] schroot security update

[SECURITY] [DLA 3075-1] schroot security update

[SECURITY] [DLA 3074-1] epiphany-browser security update

Security update for podman (important)

cri-o security update

PostgreSQL vulnerability

Linux kernel (AWS) vulnerabilities

[SECURITY] [DSA 5212-1] chromium security update

[slackware-security] vim

Fixed CVE-2022-2581 in vim

Fixed 13 CVEs in expat

Fixed CVE-2022-37434 in zlib

Fixed CVE-2022-29154 in rsync

Fixed CVEs in exim: CVE-2022-37451, CVE-2022-37452

AIX is vulnerable to arbitrary command execution due to OpenSSL