OS: Arch
The package python-django before version 4.0.4-1 is vulnerable to sql injection. |
The package xz before version 5.2.5-3 is vulnerable to arbitrary command execution. |
The package gzip before version 1.12-1 is vulnerable to arbitrary command execution. |
The package libtiff before version 4.3.0-2 is vulnerable to multiple issues including arbitrary code execution and denial of service. |
OS: OpenSuse
An update that fixes 6 vulnerabilities is now available. |
An update that fixes 6 vulnerabilities is now available. |
An update that solves two vulnerabilities and has two fixes is now available. |
An update that fixes one vulnerability is now available. |
OS: Gentoo
Multiple vulnerabilities have been found in Oracle JDK and JRE, the worst of which could result in the arbitrary execution of code. |
Multiple vulnerabilities have been discovered in Fetchmail, the worst of which could result in email disclosure to third parties. |
Multiple vulnerabilities have been discovered in libaacplus, the worst of which could result in denial of service. |
Multiple vulnerabilities have been discovered in GRUB, the worst of which may allow for secureboot bypass. |
OS: Scientific
open-vm-tools: local root privilege escalation in the virtual machine (CVE-2022-31676) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE SL7 x86_64 open-vm-tools-11.0.5-3.el7_9.4.x86_64.rpm open-vm-tools-debuginfo-11.0.5-3.el7_9.4.x86_64.rpm open-vm-tools-desktop-11.0.5-3.el7_9.4.x8 [More...] |
systemd-resolved: use-after-free when dealing with DnsStream in resolved-dns-stream.c (CVE-2022-2526) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE SL7 x86_64 libgudev1-219-78.el7_9.7.i686.rpm libgudev1-219-78.el7_9.7.x86_64.rpm systemd-219-78.el7_9.7.x86_64.rpm systemd-debu [More...] |
This update upgrades Firefox to version 91.13.0 ESR. * Mozilla: Address bar spoofing via XSLT error handling (CVE-2022-38472) * Mozilla: Cross-origin XSLT Documents would have inherited the parent's permissions (CVE-2022-38473) * Mozilla: Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2 (CVE-2022-38477) * Mozilla: Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2, and F [More...] |
This update upgrades Thunderbird to version 91.13.0. * Mozilla: Address bar spoofing via XSLT error handling (CVE-2022-38472) * Mozilla: Cross-origin XSLT Documents would have inherited the parent's permissions (CVE-2022-38473) * Mozilla: Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2 (CVE-2022-38477) * Mozilla: Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2, and F [More...] |
OS: Debian
A heap-based buffer overflow vulnerability was discovered in gdal, a Geospatial Data Abstraction Library, which could result in denial of service or potentially the execution of arbitrary code, if a specially crafted file is processed with the PCIDSK driver. |
Multiple security issues were discovered in Thunderbird, which could result in denial of service or the execution of arbitrary code. For the stable distribution (bullseye), these problems have been fixed in |
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, CSP bypass or session fixation. |
Rhodri James discovered a heap use-after-free vulnerability in the doContent function in Expat, an XML parsing C library, which could result in denial of service or potentially the execution of arbitrary code, if a malformed XML file is processed. |
NIST Vulnerability Database
OS: Suse
An update that fixes 6 vulnerabilities is now available. |
An update that fixes 6 vulnerabilities is now available. |
An update that fixes two vulnerabilities is now available. |
An update that fixes one vulnerability is now available. |
OS: Redhat
Red Hat Advanced Cluster Management for Kubernetes 2.4.6 General Availability release images, which fix bugs and update container images. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, |
An update for firefox is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability |
An update for firefox is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, |
An update for firefox is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability |
OS: Debian LTS
Multiple security issues were discovered in Thunderbird, which could result in denial of service or the execution of arbitrary code. Debian follows the Thunderbird upstream releases. Support for the 91.x |
Two security issues were discovered in dovecot: IMAP and POP3 email server. CVE-2021-33515 |
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, CSP bypass or session fixation. |
Several security vulnerabilities have been discovered in Poppler, a PDF rendering library, that could lead to denial of service or possibly other unspecified impact when processing maliciously crafted documents. |
OS: CentOS
Upstream details at : https://access.redhat.com/errata/RHSA-2022:6381 |
Upstream details at : https://access.redhat.com/errata/RHSA-2022:6170 |
Upstream details at : https://access.redhat.com/errata/RHSA-2022:6160 |
Upstream details at : https://access.redhat.com/errata/RHSA-2022:6169 |
OS: Slackware
New vim packages are available for Slackware 15.0 and -current to fix a security issue. |
New dnsmasq packages are available for Slackware 14.0, 14.1, 14.2, 15.0, and -current to fix a security issue. |
New bind packages are available for Slackware 15.0 and -current to fix security issues. |
New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues. |
OS: Mageia
When injecting an HTML base element, some requests would ignore the CSP's base-uri settings and accept the injected element's base instead (CVE-2022-40956). By injecting a cookie with certain special characters, an attacker on a |
A buffer overflow issue which may lead to arbitrary code execution was addressed with improved memory handling. (CVE-2022-32886) Visiting a website that frames malicious content may lead to UI spoofing. he issue was addressed with improved UI handling. (CVE-2022-32891) |
tcprewrite in Tcpreplay 4.4.1 has a reachable assertion in get_layer4_v6 in common/get.c. (CVE-2022-27939) tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_ipv6_next in common/get.c. (CVE-2022-27940) |
When injecting an HTML base element, some requests would ignore the CSP's base-uri settings and accept the injected element's base instead (CVE-2022-40956). By injecting a cookie with certain special characters, an attacker on a |
CVEMAP.ORG: Vulnerabilities & Exposures
NIST Vulnerability Database
OS: Fedora
- Update to latest upstream (105.0.1) |
- update to 9.0.9 tagged upstream community sources, see CHANGELOG - resolve CVE-2022-35957 grafana: Escalation from admin to server admin when auth proxy is used (rhbz#2128565) |
**Redis 7.0.5** - Released Wed Sep 21 20:00:00 IST 2022 Upgrade urgency: SECURITY, contains fixes to security issues. Security Fixes: * (**CVE-2022-35951**) Executing a XAUTOCLAIM command on a stream key in a specific state, with a specially crafted COUNT argument, may cause an integer overflow, a subsequent heap overflow, and potentially lead to remote code |
Update to 102.3.0 ; https://www.mozilla.org/en- US/security/advisories/mfsa2022-42/ ; https://www.thunderbird.net/en- US/thunderbird/102.3.0/releasenotes/ |
OS: Ubuntu
Several security issues were fixed in the Linux kernel. |
Several security issues were fixed in Ghostscript. |
Several security issues were fixed in WebKitGTK. |
Several security issues were fixed in Squid. |
Exploit-DB.com