Questions - together.jolla.com

154

views

no

answers

3

votes

2020-03-30 10:29:44 +0300 lpr

Fix a use-after-free vulnerability in the glob function when expanding ~user in glibc CVE-2020-1752

324

views

no

answers

10

votes

2020-03-24 10:22:32 +0300 lpr

Update libjpeg-turbo to libjpeg-turbo-2.0.1-0ubuntu2.2 to fix CVE-2018-20330 CVE-2018-19664 CVE-2019-2201 CVE-2018-14498 CVE-2018-1152 CVE-2017-15232 high remote

586

views

no

answers

20

votes

2020-03-24 10:19:19 +0300 lpr

Update openjpeg to openjpeg-2.3.1-1ubuntu4 to fix CVE-2019-12973 CVE-2020-6851 CVE-2020-8112 CVE-2018-20847 CVE-2018-21010 CVE-2018-5727 CVE-2017-17480 CVE-2018-14423 CVE-2018-18088 CVE-2018-5785 CVE-2018-6616 critical remote

835

views

1

answer

15

votes

2020-03-24 10:18:28 +0300 lpr

Remove waitqueue when thread exits in kernel-staging-android-binder CVE-2019-2215 high

356

views

no

answers

8

votes

2020-03-09 13:31:47 +0300 AlexOm

remove entry from qseecom_registered_app_list in kernel-drivers-qseecom CVE-2016-8480 remote

1k

views

2

answers

9

votes

2020-02-13 23:43:54 +0300 misc11

Critical Bluetooth Vulnerability in Android (CVE-2020-0022) Effect on SFOS?

142

views

no

answers

3

votes

2020-01-15 10:33:46 +0300 lpr

buffer over-read in downsample_row_box_filter in poppler CVE-2019-9631 critical remote [released]

173

views

no

answers

4

votes

2019-07-24 17:41:26 +0300 lpr

heap-based buffer over-read in glibc CVE-2019-9169 critical remote [released]

11k

views

5

answers

215

votes

2019-07-24 15:51:25 +0300 jovirkku

Do we get a fix for glibc security issues?

290

views

no

answers

1

vote

2019-02-22 14:55:26 +0300 rozgwi

'System down' - systemd vulnerability

192

views

no

answers

2

votes

2019-02-21 09:17:09 +0300 lpr

crypto set sk to NULL when af_alg_release in kernel-net CVE-2019-8912 critical remote

1k

views

2

answers

15

votes

2019-02-01 13:56:03 +0300 allenlisa1987

vulnerability tcp RFC 5961 of linux kernel since v3.2 [released]

1k

views

no

answers

34

votes

2019-01-27 19:07:51 +0300 lpr

Mozilla Security Advisory 2017-10 sailfish nss vulnerable CVE-2017-5461 CVE-2017-5462 (critical remote) [released]

852

views

1

answer

5

votes

2018-12-05 19:27:23 +0300 dominican

Is Alien Dalvik affected by the Android vulnerabilities? [answered]

8k

views

no

answers

288

votes

2018-09-04 21:18:14 +0300 lpr

upgrade Qualcomm drivers to more recent level

294

views

no

answers

10

votes

2018-07-17 09:55:31 +0300 lpr

Fix various small issues in cci driver in kernel-msm-camera CVE-2014-9783 remote

203

views

no

answers

3

votes

2018-07-17 09:51:57 +0300 lpr

Remove requirement for lock_page() in get_futex_key() in kernel-futex CVE-2018-9422

93

views

no

answers

6

votes

2018-06-26 07:59:53 +0300 lpr

convert DM printk macros to pr_<level> macros & fix printk() rate limiting code & fix race between dm_get_from_kobject() and __dm_destroy() in kernel-dm CVE-2017-18203

90

views

no

answers

5

votes

2018-06-26 07:46:48 +0300 lpr

Invoke __perf_event_disable() if interrupts are already disabled & Simplify the perf-hwbp code, fix documentation in kernel-perf CVE-2018-1000199

93

views

no

answers

5

votes

2018-06-26 07:37:16 +0300 lpr

Prevent overflow by strengthen input validation in kernel-futex CVE-2018-6927

87

views

no

answers

5

votes

2018-06-26 07:31:23 +0300 lpr

prevent UAF in snd_pcm_info in kernel-ALSA-pcm CVE-2017-0861

117

views

no

answers

8

votes

2018-06-25 11:09:22 +0300 lpr

Fix racy pool initializations & Don't allow resizing pool in use & More protection for concurrent write and ioctl races in kernel-sound-ALSA-seq CVE-2018-7566

89

views

no

answers

6

votes

2018-06-25 10:09:46 +0300 lpr

verify size of a new chunk in _sctp_make_chunk() in kernel-net-sctp CVE-2018-5803

777

views

1

answer

28

votes

2018-03-08 10:46:25 +0300 TMavica

Please update the kernel in 2.20

128

views

no

answers

3

votes

2018-03-06 10:19:14 +0300 lpr

take care of truncations done by sk_filter() in kernel-net-tcp CVE-2016-8645

68

views

no

answers

3

votes

2018-03-06 09:55:10 +0300 lpr

fix out of bound writes in __ip6_append_data() in kernel-net-ipv6 CVE-2017-9242

94

views

no

answers

3

votes

2018-03-06 09:53:32 +0300 lpr

{bnep,cmtp}_add_connection() should verify that it's dealing with l2cap socket in kernel-bluetooth CVE-2017-15868

118

views

no

answers

2

votes

2018-02-28 08:56:58 +0300 lpr

refactor v4l2... in kernel-media-video CVE-2017-13166

179

views

no

answers

6

votes

2018-02-28 08:38:57 +0300 lpr

Heap OOB write in rds_message_alloc_sgs() CVE-2018-5332 & null pointer dereference in rds_atomic_free_op CVE-2018-5333 & Fix NULL pointer dereference in __rds_rdma_map CVE-2018-7492 in kernel-net-rds

198

views

no

answers

4

votes

2018-01-22 09:35:58 +0300 lpr

116 questions

Fix a use-after-free vulnerability in the glob function when expanding ~user in glibc CVE-2020-1752

Update libjpeg-turbo to libjpeg-turbo-2.0.1-0ubuntu2.2 to fix CVE-2018-20330 CVE-2018-19664 CVE-2019-2201 CVE-2018-14498 CVE-2018-1152 CVE-2017-15232 high remote

Update openjpeg to openjpeg-2.3.1-1ubuntu4 to fix CVE-2019-12973 CVE-2020-6851 CVE-2020-8112 CVE-2018-20847 CVE-2018-21010 CVE-2018-5727 CVE-2017-17480 CVE-2018-14423 CVE-2018-18088 CVE-2018-5785 CVE-2018-6616 critical remote

Remove waitqueue when thread exits in kernel-staging-android-binder CVE-2019-2215 high

remove entry from qseecom_registered_app_list in kernel-drivers-qseecom CVE-2016-8480 remote

Critical Bluetooth Vulnerability in Android (CVE-2020-0022) Effect on SFOS?

buffer over-read in downsample_row_box_filter in poppler CVE-2019-9631 critical remote [released]

heap-based buffer over-read in glibc CVE-2019-9169 critical remote [released]

Do we get a fix for glibc security issues?

'System down' - systemd vulnerability

crypto set sk to NULL when af_alg_release in kernel-net CVE-2019-8912 critical remote

vulnerability tcp RFC 5961 of linux kernel since v3.2 [released]

Mozilla Security Advisory 2017-10 sailfish nss vulnerable CVE-2017-5461 CVE-2017-5462 (critical remote) [released]

Is Alien Dalvik affected by the Android vulnerabilities? [answered]

upgrade Qualcomm drivers to more recent level

Fix various small issues in cci driver in kernel-msm-camera CVE-2014-9783 remote

Remove requirement for lock_page() in get_futex_key() in kernel-futex CVE-2018-9422

convert DM printk macros to pr_<level> macros & fix printk() rate limiting code & fix race between dm_get_from_kobject() and __dm_destroy() in kernel-dm CVE-2017-18203

Invoke __perf_event_disable() if interrupts are already disabled & Simplify the perf-hwbp code, fix documentation in kernel-perf CVE-2018-1000199

Prevent overflow by strengthen input validation in kernel-futex CVE-2018-6927

prevent UAF in snd_pcm_info in kernel-ALSA-pcm CVE-2017-0861

Fix racy pool initializations & Don't allow resizing pool in use & More protection for concurrent write and ioctl races in kernel-sound-ALSA-seq CVE-2018-7566

verify size of a new chunk in _sctp_make_chunk() in kernel-net-sctp CVE-2018-5803

Please update the kernel in 2.20

take care of truncations done by sk_filter() in kernel-net-tcp CVE-2016-8645

fix out of bound writes in __ip6_append_data() in kernel-net-ipv6 CVE-2017-9242

{bnep,cmtp}_add_connection() should verify that it's dealing with l2cap socket in kernel-bluetooth CVE-2017-15868

refactor v4l2... in kernel-media-video CVE-2017-13166

Heap OOB write in rds_message_alloc_sgs() CVE-2018-5332 & null pointer dereference in rds_atomic_free_op CVE-2018-5333 & Fix NULL pointer dereference in __rds_rdma_map CVE-2018-7492 in kernel-net-rds

hmac - require that the underlying hash algorithm is unkeyed in kernel-crypto CVE-2017-17806

Featured Tags

Tracked Questions

Tag search

Tags