Category: Advisories

Jann Horn discovered that the Linux kernel did not properly track memory allocations for anonymous VMA mappings in some situations, leading to potential data structure...

A SQL injection vulnerability exits on the Simple Image Gallery System 1.0 application through "id" parameter on the album page. Read More

Several flaws were discovered in jackson-databind, a fast and powerful JSON library for Java. Read More

Multiple security vulnerabilities have been found in Asterisk, an Open Source Private Branch Exchange. Buffer overflows and other programming errors could be exploited for information...

Multiple security issues were discovered in Thunderbird, which could result in denial of service or the execution of arbitrary code. Read More

It was discovered that a race condition existed in the instruction emulator of the Linux kernel on Arm 64-bit systems. A local attacker could use...

FEDORA-2022-53a4a5dd11 Packages in this update: xen-4.15.4-1.fc35 Update description: update to xen-4.15.4 adjust xen.canonicalize.patch remove or adjust patches now included or superceded upstream x86: Multiple speculative...

FEDORA-2022-927df621df Packages in this update: thunderbird-102.5.0-1.fc35 Update description: Update to 102.5.0 ; https://www.mozilla.org/en-US/security/advisories/mfsa2022-49/ ; https://www.thunderbird.net/en-US/thunderbird/102.5.0/releasenotes/ ; https://www.thunderbird.net/en-US/thunderbird/102.4.2/releasenotes/ Update to 102.4.1 ; https://www.thunderbird.net/en-US/thunderbird/102.4.1/releasenotes/ Update to 102.4.0...

FEDORA-2022-05bdce3585 Packages in this update: thunderbird-102.5.0-1.fc36 Update description: Update to 102.5.0 ; https://www.mozilla.org/en-US/security/advisories/mfsa2022-49/ ; https://www.thunderbird.net/en-US/thunderbird/102.5.0/releasenotes/ ; https://www.thunderbird.net/en-US/thunderbird/102.4.2/releasenotes/ Read More

FEDORA-EPEL-2022-30fd5a80a8 Packages in this update: heimdal-7.7.1-1.el7 Update description: This release fixes the following Security Vulnerabilities: CVE-2022-42898 PAC parse integer overflows CVE-2022-3437 Overflows and non-constant time...