AZL-51831 CVE-2024-49769 affecting package python-waitress for versions less than 3.0.1-1

Waitress is a Web Server Gateway Interface server for Python 2 and 3. When a remote client closes the connection before waitress has had the opportunity to call getpeername waitress won't correctly clean up the connection leading to the main thread attempting to write to a socket that no longer...

SUSE-SU-2024:3766-1 Security update for openssl-3

This update for openssl-3 fixes the following issues: - CVE-2023-50782: Implicit rejection in PKCS1 v1.5 bsc1220262 - CVE-2024-41996: Avoid expensive public key validation for known safe-prime groups DHEATATTACK bsc1230698...

SUSE-SU-2024:3765-1 Security update for openssl-1_1

This update for openssl-11 fixes the following issues: - CVE-2023-50782: Implicit rejection in PKCS1 v1.5 bsc1220262...

AZL-51936 CVE-2024-50085 affecting package kernel for versions less than 6.6.64.2-1

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: fix UaF read in mptcppmnlrmaddrorsubflow Syzkaller reported this splat: ================================================================== BUG: KASAN: slab-use-after-free in mptcppmnlrmaddrorsubflow+0xb44/0xcc0...

AZL-51918 CVE-2024-50070 affecting package kernel for versions less than 6.6.64.2-1

In the Linux kernel, the following vulnerability has been resolved: pinctrl: stm32: check devmkasprintf returned value devmkasprintf can return a NULL pointer on failure but this returned value is not checked. Fix this lack and check the returned value. Found by code review...

AZL-52058 CVE-2024-50075 affecting package kernel for versions less than 6.6.64.2-1

In the Linux kernel, the following vulnerability has been resolved: xhci: tegra: fix checked USB2 port number If USB virtualizatoin is enabled, USB2 ports are shared between all Virtual Functions. The USB2 port number owned by an USB2 root hub in a Virtual Function may be less than total USB2 phy...

AZL-51933 CVE-2024-50069 affecting package kernel for versions less than 6.6.64.2-1

In the Linux kernel, the following vulnerability has been resolved: pinctrl: apple: check devmkasprintf returned value devmkasprintf can return a NULL pointer on failure but this returned value is not checked. Fix this lack and check the returned value. Found by code review...

AZL-52089 CVE-2024-50076 affecting package kernel for versions less than 6.6.64.2-1

In the Linux kernel, the following vulnerability has been resolved: vt: prevent kernel-infoleak in confontget font.data may not initialize all memory spaces depending on the implementation of vc-vcsw-confontget. This may cause info-leak, so to prevent this, it is safest to modify it to initialize...

FreeBSD -- Certificate revocation list fetch(1) option fails

Problem Description: The fetch3 library uses environment variables for passing certain information, including the revocation file pathname. The environment variable name used by fetch1 to pass the filename to the library was incorrect, in effect ignoring the option. Impact: Fetch would still...

CVE-2024-50478 WordPress 1-Click Login: Passwordless Authentication plugin 1.4.5 - Broken Authentication vulnerability

Authentication Bypass by Primary Weakness vulnerability in Swoop 1-Click Login: Passwordless Authentication allows Authentication Bypass.This issue affects 1-Click Login: Passwordless Authentication: 1.4.5...

Debian: Security Advisory (DSA-5797-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-5799-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AZL-51884 CVE-2024-50615 affecting package cppcheck for versions less than 2.18.3-1

TinyXML2 through 10.0.0 has a reachable assertion for UINTMAX/digit, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef...

CVE-2023-46218 affecting package mysql for versions less than 8.0.40-1

CVE-2023-46218 affecting package mysql for versions less than 8.0.40-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-46219 affecting package mysql for versions less than 8.0.40-1

CVE-2023-46219 affecting package mysql for versions less than 8.0.40-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-21166 affecting package mysql for versions less than 8.0.40-1

CVE-2024-21166 affecting package mysql for versions less than 8.0.40-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-21201 affecting package mysql for versions less than 8.0.40-1

CVE-2024-21201 affecting package mysql for versions less than 8.0.40-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-21247 affecting package mysql for versions less than 8.0.40-1

CVE-2024-21247 affecting package mysql for versions less than 8.0.40-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-21193 affecting package mysql for versions less than 8.0.40-1

CVE-2024-21193 affecting package mysql for versions less than 8.0.40-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-21163 affecting package mysql for versions less than 8.0.40-1

CVE-2024-21163 affecting package mysql for versions less than 8.0.40-1. An upgraded version of the package is available that resolves this issue...