Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory.

Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory.

Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory.

Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory.

Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory.

Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory.

Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory.

Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory.

Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory.

Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory.

Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory.

Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory.

Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory.

Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory.

Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory.

Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory.

Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory.

Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory.

Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory.

Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory.

Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory.

Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory.

Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory.

Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory.

Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory.

Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory.

Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory.

Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory.

Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory.

Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory.

Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory.

Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory.

Не показывается splash, если включен вывод на serial console

Не работает plymouth на UEFI с ядром un-def

Уязвимость функции qfq_change_class() ядра операционных систем Linux, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации.

qfq_change_class in net/sched/sch_qfq.c in the Linux kernel before 6.2.13 allows an out-of-bounds write because lmax can exceed QFQ_MIN_LMAX.

После установки на плату без видеокарты не запускается X

Не загружаются iso с plymouth, если в cmdline указать console=ttyS0 или console=tty0

Уязвимость языка программирования Go, связанная с ошибками при обработке специальных символов "<>" в контексте CSS, позволяющая нарушителю выполнить произвольный код

Уязвимость языка программирования Go, связанная с ошибками при обработке пробельных символов в контексте JavaScript, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

Уязвимость языка программирования Go, существующая из-за непринятия мер по нейтрализации специальных элементов, позволяющая нарушителю внедрить произвольные атрибуты в теги HTML

Angle brackets (<>) are not considered dangerous characters when inserted into CSS contexts. Templates containing multiple actions separated by a '/' character can result in unexpectedly closing the CSS context and allowing for injection of unexpected HTML, if executed with untrusted input.

Not all valid JavaScript whitespace characters are considered to be whitespace. Templates containing whitespace characters outside of the character set "\t\n\f\r\u0020\u2028\u2029" in JavaScript contexts that also contain actions may not be properly sanitized during execution.

Templates containing actions in unquoted HTML attributes (e.g. "attr={{.}}") executed with empty input can result in output with unexpected results when parsed due to HTML normalization rules. This may allow injection of arbitrary attributes into tags.

libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lys_parse_mem at lys_parse_mem.c.

libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lysp_stmt_validate_value at lys_parse_mem.c.

An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service via the bgp_capability_llgr() function.

An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service via the bgp_attr_psid_sub() function.

Уязвимость программного многоуровневого коммутатора Open vSwitch, связанная с потерей значимости целого числа, позволяющая нарушителю выполнить произвольный код в целевой системе

Уязвимость программного многоуровневого коммутатора Open vSwitch, связанная с потерей значимости целого числа, позволяющая нарушителю выполнить произвольный код в целевой системе

The TSS (Tuple Space Search) algorithm in Open vSwitch 2.x through 2.17.2 and 3.0.0 allows remote attackers to cause a denial of service (delays of legitimate traffic) via crafted packet data that requires excessive evaluation time within the packet classification algorithm for the MegaFlow cache, aka a Tuple Space Explosion (TSE) attack.

A memory leak was found in Open vSwitch (OVS) during userspace IP fragmentation processing. An attacker could use this flaw to potentially exhaust available memory by keeping sending packet fragments.

An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch.

An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.

A flaw was found in openvswitch (OVS). When processing an IP packet with protocol 0, OVS will install the datapath flow without the action modifying the IP header. This issue results (for both kernel and userspace datapath) in installing a datapath flow matching all IP protocols (nw_proto is wildcarded) for this flow, but with an incorrect action, possibly causing incorrect handling of other IP packets with a != 0 IP protocol that matches this dp flow.