DSA-6617-1 symfony - security update
DSA-6617-1 symfony - security update
unrealircd: unrealircd: Command injection via unescaped message tag
The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing it into replies, which allows any user on a network with two or more linked servers to inject server-to-server commands that are executed with server authority.
Linux Kernel: Mehrere Schwachstellen
kernel: kernel: privilege escalation via missing shared fragment flag in skb_zerocopy
Linux Kernel: Mehrere Schwachstellen
kernel: kernel: Denial of Service via premature connection tracking expiration on TCP RST packets
Linux Kernel: Mehrere Schwachstellen
kernel: kernel: Denial of Service via use-after-free in sch_teql
Linux Kernel: Mehrere Schwachstellen
kernel: kernel: Unauthorized network device access via missing permission checks on ownerless TUN/TAP devices
Linux Kernel: Mehrere Schwachstellen
kernel: kernel: Denial of Service via improper session cleanup in ksmbd
Linux Kernel: Mehrere Schwachstellen
kernel: kernel: ksmbd: Denial of Service via unreclaimed expired sessions
Linux Kernel: Mehrere Schwachstellen
kernel: kernel: ksmbd: Denial of Service via unbounded sessions per connection
Linux Kernel: Mehrere Schwachstellen
kernel: kernel: ksmbd: Denial of Service via use-after-free in session channel handling
Linux Kernel: Mehrere Schwachstellen
kernel: kernel: Denial of Service in ksmbd via deadlock during session cleanup
Linux Kernel: Mehrere Schwachstellen
kernel: kernel: Information disclosure via crafted SMB session setup responses
Linux Kernel: Mehrere Schwachstellen
kernel: kernel: Denial of service via empty truncated responses in SMB client
Linux Kernel: Mehrere Schwachstellen
kernel: kernel: ksmbd: Denial of Service via out-of-bounds write in get_file_stream_info()
Linux Kernel: Mehrere Schwachstellen
kernel: kernel: out-of-bounds read in SMB client via crafted read response
Linux Kernel: Mehrere Schwachstellen
kernel: kernel: Denial of service via use-after-free in ALSA Line 6 audio driver
IBM Aspera Faspex Incorrect Authorization Vulnerability
IBM Aspera Faspex 5.0.0 through 5.0.19 could allow an authorized user to craft a specific message to bypass user authorization and gain full administrative privileges.