Bofokoli bo 'maloa bo sa tsoa tsejoa:
- Mefokolo e meraro ho sistimi ea mahala ea LibreCAD e thusoang ke khomphutha le laeborari ea libdxfrw e u lumellang ho tsosa buffer e laoloang le ho khona ho fihlela ts'ebetso ea khoutu ha o bula lifaele tsa DWG le DXF tse hlophisitsoeng ka mokhoa o ikhethileng. Mathata a lokisitsoe ho fihlela joale feela ka mokhoa oa li-patches (CVE-2021-21898, CVE-2021-21899, CVE-2021-21900).
- Ho ba kotsing (CVE-2021-41817) ka mokhoa oa Date.parse o fanoeng laebraring e tloaelehileng ea Ruby. Liphoso tsa lipolelo tse tloaelehileng tse sebelisoang ho hlalosa matsatsi ka mokhoa oa Date.parse li ka sebelisoa ho phethahatsa litlhaselo tsa DoS, tse bakang tšebeliso ea lisebelisoa tsa bohlokoa tsa CPU le tšebeliso ea mohopolo ha ho sebetsanoa le data e hlophisitsoeng ka ho khetheha.
- Kotsi ho sethaleng sa ho ithuta sa mochini oa TensorFlow (CVE-2021-41228), se lumellang khoutu ho sebelisoa ha ts'ebetso e bolokiloeng_model_cli e sebetsa data ea bahlaseli e feta "--input_examples" parameter. Bothata bo bakoa ke tšebeliso ea data ea ka ntle ha u bitsa khoutu ka mosebetsi oa "eval". Taba ena e lokisitsoe likhatisong tsa TensorFlow 2.7.0, TensorFlow 2.6.1, TensorFlow 2.5.2, le TensorFlow 2.4.4.
- Ho ba tlokotsing (CVE-2021-43331) tsamaisong ea tsamaiso ea mangolo ea GNU Mailman e bakoang ke ho tšoara mefuta e itseng ea URL ka phoso. Bothata bo u lumella ho hlophisa ts'ebetso ea khoutu ea JavaScript ka ho hlakisa URL e etselitsoeng ka ho khetheha leqepheng la litlhophiso. Taba e 'ngoe e boetse e khethiloe ho Mailman (CVE-2021-43332), e lumellang mosebelisi ea nang le litokelo tsa mookameli ho hakanya phasewete ea motsamaisi. Litaba li rarollotsoe tokollong ea Mailman 2.1.36.
- Letoto la bofokoli ho mohlophisi oa mongolo oa Vim o ka lebisang ho khaphatseha le ho ts'oaroa ha khoutu ea bahlaseli ha o bula lifaele tse entsoeng ka mokhoa o ikhethileng ka khetho ea "-S" (CVE-2021-3903, CVE-2021-3872, CVE-2021 -3927, CVE -2021-3928, litokiso - 1, 2, 3, 4).
Source: opennet.ru