A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c.
RHSA-2021:3477
RHV-H security update (redhat-virtualization-host) 4.3.18
Released 2021-09-09 · Red Hat rating Important · View on Red Hat →
Fixed in
- RHEL 7-based RHEV-H for RHEV 4 (build requirements) redhat-virtualization-host-4.3.18-20210903.0.el7_9, redhat-virtualization-host-image-update-4.3.18-20210903.0.el7_9
- Red Hat Virtualization 4 Hypervisor for RHEL 7 redhat-virtualization-host-4.3.18-20210903.0.el7_9, redhat-virtualization-host-image-update-4.3.18-20210903.0.el7_9
Fixes 5 records
LookupCol.c in X.Org X through X11R7.7 and libX11 before 1.7.1 might allow remote…
LookupCol.c in X.Org X through X11R7.7 and libX11 before 1.7.1 might allow remote attackers to execute arbitrary code.
Command injection in sssd
A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-fetch and cache-expire subcommands.
Use after free in kernel
A flaw was found in the "Routing decision" classifier in the Linux kernel's Traffic Control networking subsystem in the way it handled changing of classification filters, leading to a use-after-free condition.
net/bluetooth/hci_request.c in the Linux kernel through 5.12.2 has a race condition for removal of the HCI controller.
net/bluetooth/hci_request.c in the Linux kernel through 5.12.2 has a race condition for removal of the HCI controller.