OS: Debian
Multiple security issues have been discovered in the PostgreSQL database system, which could result in the execution of arbitrary code or disclosure of memory content. |
A buffer overflow was discovered in Graphviz, which could potentially result in the execution of arbitrary code when processing a malformed file. |
Jemery Galindo discovered an out-of-bounds memory access in Hivex, a library to parse Windows Registry hive files. For the stable distribution (buster), this problem has been fixed in |
The Qualys Research Labs reported several vulnerabilities in Exim, a mail transport agent, which could result in local privilege escalation and remote code execution. |
OS: Redhat
Red Hat AMQ Streams 1.6.4 is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which |
An update for rh-dotnet31-dotnet is now available for .NET Core on Red Hat Enterprise Linux. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, |
An update for rh-dotnet50-dotnet is now available for .NET on Red Hat Enterprise Linux. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, |
An update for openshift-istio-kiali-rhel8-operator-container is now available for OpenShift Service Mesh 2.0. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, |
OS: Debian LTS
One security issue has been discovered in libgetdata CVE-2021-20204 |
CVE-2018-10196 NULL pointer dereference vulnerability in the rebuild_vlists function in lib/dotgen/conc.c in the dotgen library allows |
Several issues were found in Redmine, a project management web application, which could lead to cross-site scripting, information disclosure, and reading arbitrary files from the server. |
It was discovered that there was a potential memory corruption vulnerability in the lz4 compression algorithm library. For Debian 9 "Stretch", this problem has been fixed in version |
OS: Fedora
The 5.11.9 stable kernel update contains a number of important fixes across the tree. |
The 5.11.9 stable kernel update contains a number of important fixes across the tree. |
The 5.11.9 stable kernel update contains a number of important fixes across the tree. |
**MariaDB 10.4.19** Release notes: https://mariadb.com/kb/en/mariadb-10419-release-notes/ |
OS: Slackware
New bind packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. |
New seamonkey packages are available for Slackware 14.2 and -current to fix security issues. |
New irssi packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. |
New dnsmasq packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. |
OS: Ubuntu
Kerberos could be made to consume unlimited resources if it received specially crafted ASN.1. |
OpenLDAP could be made to crash if it received specially crafted network traffic. |
Several security issues were fixed in PostgreSQL. |
USN-4607-1 introduced a regression in OpenJDK. |
CVEMAP.ORG: Vulnerabilities & Exposures
Exploit-DB.com
OS: Mageia
Some severe exploitable vulnerabilities were discovered and fixed (CVE-2021-2154 and CVE-2021-2166). This is a regular update, which brings the usual improvements in innodb, galera. See upstream advisory. |
This update fixes a divide-by-zero crash bug (and probable vulnerability) in interlaced images with extra compressed data beyond the nominal end of the image data. (found by "chiba of topsec alpha lab") (rhbz#1949800). References: |
Nagios 4.4.5 allows an attacker, who already has administrative access to change the "URL for JSON CGIs" configuration setting, to modify the Alert Histogram and Trends code via crafted versions of the archivejson.cgi, objectjson.cgi, and statusjson.cgi files (CVE-2020-13977). |
Deleting an attachment of a decrypted encrypted message stored on a remote server (e.g. an IMAP server) causes KMail to upload the decrypted content of the message to the remote server. This is not easily noticeable by the user because KMail does not display the decrypted content. |
OS: Arch
The package bind before version 9.16.15-1 is vulnerable to multiple issues including arbitrary code execution and denial of service. |
The package virtualbox before version 6.1.20-1 is vulnerable to multiple issues including arbitrary code execution, arbitrary filesystem access and information disclosure. |
The package libupnp before version 1.14.6-1 is vulnerable to content spoofing. |
The package chromium before version 90.0.4430.85-1 is vulnerable to multiple issues including arbitrary code execution and sandbox escape. |
OS: Suse
The container suse/sle15 was updated. The following patches have been included in this update: |
The container sles-15-sp2-chost-byos-v20210506 was updated. The following patches have been included in this update: |
The container suse-sles-15-sp2-chost-byos-v20210506-gen2 was updated. The following patches have been included in this update: |
The container suse/sles12sp5 was updated. The following patches have been included in this update: |
NIST Vulnerability Database
NIST Vulnerability Database
OS: Gentoo
Multiple vulnerabilities have been found in Exim, the worst of which allows remote attackers to execute arbitrary code. |
Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which could result in the arbitrary execution of code. |
Multiple vulnerabilities have been found in Mozilla Thunderbird, the worst of which could result in the arbitrary execution of code. |
Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could result in the arbitrary execution of code. |
OS: OpenSuse
An update that solves two vulnerabilities and has one errata is now available. |
An update that solves two vulnerabilities and has 55 fixes is now available. |
An update that solves two vulnerabilities and has three fixes is now available. |
An update that fixes one vulnerability is now available. |
OS: Scientific
postgresql: Reconnection can downgrade connection security settings (CVE-2020-25694) * postgresql: Multiple features escape "security restricted operation" sandbox (CVE-2020-25695) * postgresql: TYPE in pg_temp executes arbitrary SQL during SECURITY DEFINER execution (CVE-2019-10208) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other [More...] |
bind: An assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itself (CVE-2021-25215) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE --- SL7 x86_64 - bind-9.11.4-26.P2.el7_9.5.x86_64.rpm - bind-chroot-9.11.4-26.P2.el7_9.5.x86_ [More...] |
openldap: NULL pointer dereference for unauthenticated packet in slapd (CVE-2020-25692) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE --- SL7 x86_64 - openldap-2.4.44-23.el7_9.i686.rpm - openldap-2.4.44-23.el7_9.x86_64.rpm - openldap-clients-2.4.44-23.el7_9.x86_64.rpm - openldap-debugin [More...] |
nss: TLS 1.3 CCS flood remote DoS Attack (CVE-2020-25648) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE Bug Fix(es): * FTBFS: Paypal Cert expired * FTBFS: IKE CLASS_1563 fails gtest * Cannot compile code with nss headers and -Werror=strict-prototypes * CA HSM ncipher token disabled after [More...] |
OS: CentOS
Upstream details at : https://access.redhat.com/errata/RHSA-2021:0617 |
Upstream details at : https://access.redhat.com/errata/RHSA-2021:1469 |
Upstream details at : https://access.redhat.com/errata/RHSA-2020:4076 |
Upstream details at : https://access.redhat.com/errata/RHSA-2018:3140 |