ALT-BU-2023-4741-1
Branch sisyphus update bulletin.
Package util-linux updated to version 2.39.1-alt2 for branch sisyphus in task 326337.
Closed bugs
util-linux: loongarch64 FTBFS
Closed vulnerabilities
Modified: 2024-11-21
CVE-2023-0330
A vulnerability in the lsi53c895a device affects the latest version of qemu. A DMA-MMIO reentrancy problem may lead to memory corruption bugs like stack overflow or use-after-free.
- https://access.redhat.com/security/cve/CVE-2023-0330
- https://access.redhat.com/security/cve/CVE-2023-0330
- RHBZ#2160151
- RHBZ#2160151
- [debian-lts-announce] 20231005 [SECURITY] [DLA 3604-1] qemu security update
- [debian-lts-announce] 20231005 [SECURITY] [DLA 3604-1] qemu security update
- https://lists.nongnu.org/archive/html/qemu-devel/2023-01/msg03411.html
- https://lists.nongnu.org/archive/html/qemu-devel/2023-01/msg03411.html
Modified: 2024-11-21
CVE-2023-2861
A flaw was found in the 9p passthrough filesystem (9pfs) implementation in QEMU. The 9pfs server did not prohibit opening special files on the host side, potentially allowing a malicious client to escape from the exported 9p tree by creating and opening a device file in the shared folder.
- https://access.redhat.com/security/cve/CVE-2023-2861
- RHBZ#2219266
- https://lists.debian.org/debian-lts-announce/2024/03/msg00012.html
- https://security.netapp.com/advisory/ntap-20240125-0005/
- https://security.netapp.com/advisory/ntap-20240229-0002/
- https://access.redhat.com/security/cve/CVE-2023-2861
- https://security.netapp.com/advisory/ntap-20240229-0002/
- https://security.netapp.com/advisory/ntap-20240125-0005/
- https://lists.debian.org/debian-lts-announce/2024/03/msg00012.html
- RHBZ#2219266
Modified: 2024-11-21
CVE-2023-3301
A flaw was found in QEMU. The async nature of hot-unplug enables a race scenario where the net device backend is cleared before the virtio-net pci frontend has been unplugged. A malicious guest could use this time window to trigger an assertion and cause a denial of service.
Closed bugs
Нет иконки в трее
Closed vulnerabilities
Modified: 2024-11-21
CVE-2022-2963
A vulnerability found in jasper. This security vulnerability happens because of a memory leak bug in function cmdopts_parse that can cause a crash or segmentation fault.
- https://access.redhat.com/security/cve/CVE-2022-2963
- https://access.redhat.com/security/cve/CVE-2022-2963
- https://bugzilla.redhat.com/show_bug.cgi?id=2118587
- https://bugzilla.redhat.com/show_bug.cgi?id=2118587
- https://github.com/jasper-software/jasper/issues/332
- https://github.com/jasper-software/jasper/issues/332
Modified: 2024-11-21
CVE-2022-40755
JasPer 3.0.6 allows denial of service via a reachable assertion in the function inttobits in libjasper/base/jas_image.c.
Package NetworkManager updated to version 1.43.90-alt2 for branch sisyphus in task 326432.
Closed bugs
NetworkManager-daemon: depends on systemd