Letzte Aktivitäten

  • Micha

    Hat eine Antwort im Thema Debian Security Advisory verfasst.
    Beitrag
    Package : chromium

    CVE ID : CVE-2022-2156 CVE-2022-2157 CVE-2022-2158 CVE-2022-2160

    CVE-2022-2161 CVE-2022-2162 CVE-2022-2163 CVE-2022-2164

    CVE-2022-2165


    Multiple security issues were discovered in Chromium, which could result in the execution…
  • Micha

    Hat eine Antwort im Thema Debian Security Advisory verfasst.
    Beitrag
    Package : firejail

    CVE ID : CVE-2022-31214

    Debian Bug : 1012510


    Matthias Gerstner discovered that the --join option of Firejail, a sandbox to restrict an application environment, was susceptible to local privilege escalation to root.


    For…
  • Micha

    Hat eine Antwort im Thema Debian Security Advisory verfasst.
    Beitrag
    Package : slurm-wlm

    CVE ID : CVE-2022-29500 CVE-2022-29501

    Debian Bug : 1010633 1010634


    Two security issues were discovered in the Simple Linux Utility for Resource Management (SLURM), a cluster resource management and job scheduling…
  • Micha

    Hat eine Antwort im Thema Debian Security Advisory verfasst.
    Beitrag
    Package : vlc

    CVE ID : not yet available


    Multiple vulnerabilities were discovered in the VLC media player, which could result in the execution of arbitrary code or denial of service if a malformed file is opened.


    For the oldstable…
  • Micha

    Hat eine Antwort im Thema Debian Security Advisory verfasst.
    Beitrag
    Package : chromium

    CVE ID : CVE-2022-2007 CVE-2022-2008 CVE-2022-2010 CVE-2022-2011


    Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.


    For…
  • Micha

    Hat eine Antwort im Thema Debian Security Advisory verfasst.
    Beitrag
    Package : containerd

    CVE ID : CVE-2022-24769 CVE-2022-31030


    Two vulnerabilities were discovered that the containerd container runtime, which could result in denial of service or incomplete restriction of capabilities.


    For the stable…
  • Micha

    Hat eine Antwort im Thema Debian Security Advisory verfasst.
    Beitrag
    Package : linux

    CVE ID : CVE-2022-0494 CVE-2022-0854 CVE-2022-1012 CVE-2022-1729

    CVE-2022-1786 CVE-2022-1789 CVE-2022-1852 CVE-2022-1966

    CVE-2022-1972 CVE-2022-1974 CVE-2022-1975 CVE-2022-21499

    CVE-2022-28893


    Several vulnerabilities have been…
  • Micha

    Hat eine Antwort im Thema Debian Security Advisory verfasst.
    Beitrag
    Package : ntfs-3g

    CVE ID : CVE-2021-46790 CVE-2022-30783 CVE-2022-30784 CVE-2022-30785

    CVE-2022-30786 CVE-2022-30787 CVE-2022-30788 CVE-2022-30789

    Debian Bug : 1011770


    Several vulnerabilities were discovered in NTFS-3G, a read-write NTFS…
  • Micha

    Hat eine Antwort im Thema Debian Security Advisory verfasst.
    Beitrag
    Package : python-bottle

    CVE ID : CVE-2022-31799


    Elton Nokaj discovered that incorrect error handling in Bottle, a WSGI framework for Python, could result in the disclosure of sensitive information.


    For the oldstable distribution (buster),…
  • Micha

    Hat eine Antwort im Thema Debian Security Advisory verfasst.
    Beitrag
    Package : thunderbird

    CVE ID : CVE-2022-1529 CVE-2022-1802 CVE-2022-1834 CVE-2022-31736

    CVE-2022-31737 CVE-2022-31738 CVE-2022-31740 CVE-2022-31741

    CVE-2022-31742 CVE-2022-31747


    Multiple security issues were discovered in Thunderbird, which…
  • Micha

    Hat eine Antwort im Thema Debian Security Advisory verfasst.
    Beitrag
    Package : cifs-utils

    CVE ID : CVE-2022-27239 CVE-2022-29869

    Debian Bug : 1010818


    Jeffrey Bencteux reported two vulnerabilities in cifs-utils, the Common Internet File System utilities, which can result in escalation of privileges…
  • Micha

    Hat eine Antwort im Thema Debian Security Advisory verfasst.
    Beitrag
    Package : firefox-esr

    CVE ID : CVE-2022-31736 CVE-2022-31737 CVE-2022-31738 CVE-2022-31740

    CVE-2022-31741 CVE-2022-31742 CVE-2022-31747


    Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially…
  • Micha

    Hat eine Antwort im Thema Debian Security Advisory verfasst.
    Beitrag
    Package : wpewebkit

    CVE ID : CVE-2022-26700 CVE-2022-26709 CVE-2022-26716 CVE-2022-26717

    CVE-2022-26719 CVE-2022-30293 CVE-2022-30294


    The following vulnerabilities have been discovered in the WPE WebKit web engine:


    CVE-2022-26700


    ryuzaki…
  • Micha

    Hat eine Antwort im Thema Debian Security Advisory verfasst.
    Beitrag
    Package : webkit2gtk

    CVE ID : CVE-2022-26700 CVE-2022-26709 CVE-2022-26716 CVE-2022-26717

    CVE-2022-26719 CVE-2022-30293 CVE-2022-30294


    The following vulnerabilities have been discovered in the WebKitGTK web engine:


    CVE-2022-26700


    ryuzaki…
  • Micha

    Hat eine Antwort im Thema Debian Security Advisory verfasst.
    Beitrag
    Package : trafficserver

    CVE ID : CVE-2021-37147 CVE-2021-37148 CVE-2021-37149 CVE-2021-38161

    CVE-2021-44040 CVE-2021-44759


    Several vulnerabilities were discovered in Apache Traffic Server, a reverse and forward proxy server, which could…
  • Micha

    Hat eine Antwort im Thema Debian Security Advisory verfasst.
    Beitrag
    Package : spip


    It was discovered that SPIP, a website engine for publishing, would allow a malicious user to perform cross-site scripting attacks.


    For the oldstable distribution (buster), this problem has been fixed in version 3.2.4-1+deb10u8.


    For…
  • Micha

    Hat eine Antwort im Thema Debian Security Advisory verfasst.
    Beitrag
    Package : smarty3

    CVE ID : CVE-2021-21408 CVE-2021-26119 CVE-2021-26120 CVE-2021-29454

    CVE-2022-29221

    Debian Bug : 1010375 1011758


    Several security vulnerabilities have been discovered in smarty3, the compiling PHP template engine.…
  • Micha

    Hat eine Antwort im Thema Debian Security Advisory verfasst.
    Beitrag
    Package : rsyslog

    CVE ID : CVE-2022-24903

    Debian Bug : 1010619


    Peter Agten discovered that several modules for TCP syslog reception in rsyslog, a system and kernel logging daemon, have buffer overflow flaws when octet-counted framing is…
  • Micha

    Hat eine Antwort im Thema Debian Security Advisory verfasst.
    Beitrag
    Package : cups

    CVE ID : CVE-2022-26691


    Joshua Mason discovered that a logic error in the validation of the secret key used in the "local" authorisation mode of the CUPS printing system may result in privilege escalation.


    For the oldstable…
  • Micha

    Hat eine Antwort im Thema Debian Security Advisory verfasst.
    Beitrag
    Package : chromium

    CVE ID : CVE-2022-1853 CVE-2022-1854 CVE-2022-1855 CVE-2022-1856

    CVE-2022-1857 CVE-2022-1858 CVE-2022-1859 CVE-2022-1860

    CVE-2022-1861 CVE-2022-1862 CVE-2022-1863 CVE-2022-1864

    CVE-2022-1865 CVE-2022-1866 CVE-2022-1867…