SUSE CVE-2022-21950

A Improper Access Control vulnerability in the systemd service of cana in openSUSE Backports SLE-15-SP3, openSUSE Backports SLE-15-SP4 allows local users to hijack the UNIX domain socket This issue affects: openSUSE Backports SLE-15-SP3 canna versions prior to canna-3.7p3-bp153.2.3.1. openSUSE...

SUSE CVE-2022-35972

TensorFlow is an open source platform for machine learning. If QuantizedBiasAdd is given mininput, maxinput, minbias, maxbias tensors of a nonzero rank, it results in a segfault that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit...

SUSE CVE-2022-35997

TensorFlow is an open source platform for machine learning. If tf.sparse.cross receives an input separator that is not a scalar, it gives a CHECK fail that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit 83dcb4dbfa094e33db084e97c4d0531a559e0ebf. The f...

SUSE CVE-2022-36005

TensorFlow is an open source platform for machine learning. When tf.quantization.fakequantwithminmaxvarsgradient receives input min or max that is nonscalar, it gives a CHECK fail that can trigger a denial of service attack. We have patched the issue in GitHub commit...

Security update for phpMyAdmin (important)

openSUSE Security Update: Security update for phpMyAdmin Announcement ID: openSUSE-SU-2023:0047-1 Rating: important References: 1195017 1195018 1197036 1208186 Cross-References: CVE-2022-0813 CVE-2022-23807 CVE-2022-23808 CVE-2023-25727 CVSS scores: CVE-2022-0813 NVD : 7.5...

Security update for EternalTerminal (important)

openSUSE Security Update: Security update for EternalTerminal Announcement ID: openSUSE-SU-2023:0041-1 Rating: important References: 1207123 1207124 Cross-References: CVE-2022-48257 CVE-2022-48258 CVSS scores: CVE-2022-48257 NVD : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2022-48258 NV...

Security update for syslog-ng (moderate)

openSUSE Security Update: Security update for syslog-ng Announcement ID: openSUSE-SU-2023:0040-1 Rating: moderate References: 1207460 Cross-References: CVE-2022-38725 CVSS scores: CVE-2022-38725 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-38725 SUSE: 7.5...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2023:0032-1 Rating: important References: 1207512 Cross-References: CVE-2023-0471 CVE-2023-0472 CVE-2023-0473 CVE-2023-0474 Affected Products: openSUSE Backports SLE-15-SP4 An update that fixes four vulnerabilitie...

Security update for upx (moderate)

openSUSE Security Update: Security update for upx Announcement ID: openSUSE-SU-2023:0031-1 Rating: moderate References: 1207122 Cross-References: CVE-2023-23457 Affected Products: openSUSE Backports SLE-15-SP4 An update that fixes one vulnerability is now available. Description: upx was updated t...

Security update for tor (moderate)

openSUSE Security Update: Security update for tor Announcement ID: openSUSE-SU-2023:0027-1 Rating: moderate References: 1207110 Affected Products: openSUSE Backports SLE-15-SP4 An update that contains security fixes can now be installed. Description: This update for tor fixes the following issues...

Security update for libheimdal (important)

openSUSE Security Update: Security update for libheimdal Announcement ID: openSUSE-SU-2023:0020-1 Rating: important References: Cross-References: CVE-2019-14870 CVE-2021-3671 CVE-2021-44758 CVE-2022-3437 CVE-2022-41916 CVE-2022-42898 CVE-2022-44640 CVSS scores: CVE-2019-14870 NVD : 5.4...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2023:0016-1 Rating: important References: 1207018 Cross-References: CVE-2023-0128 CVE-2023-0129 CVE-2023-0130 CVE-2023-0131 CVE-2023-0132 CVE-2023-0133 CVE-2023-0134 CVE-2023-0136 CVE-2023-0137 CVE-2023-0138...

CVE-2022-2196

A regression exists in the Linux Kernel within KVM: nVMX that allowed for speculative execution attacks. L2 can carry out Spectre v2 attacks on L1 due to L1 thinking it doesn't need retpolines or IBPB after running L2 due to KVM L0 advertising eIBRS support to L1. An attacker at L2 with code...

Security update for minetest (important)

openSUSE Security Update: Security update for minetest Announcement ID: openSUSE-SU-2023:0001-1 Rating: important References: 1181400 1193141 1202423 Cross-References: CVE-2022-35978 CVSS scores: CVE-2022-35978 NVD : 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: openSUSE...

Security update for mbedtls (important)

openSUSE Security Update: Security update for mbedtls Announcement ID: openSUSE-SU-2022:10257-1 Rating: important References: 1206576 Cross-References: CVE-2022-46393 CVSS scores: CVE-2022-46393 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-46393 SUSE: 9.8...

Security update for multimon-ng (moderate)

openSUSE Security Update: Security update for multimon-ng Announcement ID: openSUSE-SU-2022:10253-1 Rating: moderate References: 1206542 Cross-References: CVE-2020-36619 Affected Products: openSUSE Backports SLE-15-SP4 An update that fixes one vulnerability is now available. Description: This...

Security update for mbedtls (important)

openSUSE Security Update: Security update for mbedtls Announcement ID: openSUSE-SU-2022:10247-1 Rating: important References: 1201581 Cross-References: CVE-2021-35409 CVE-2022-35409 CVSS scores: CVE-2022-35409 NVD : 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H Affected Products: openSUSE...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2022:10245-1 Rating: important References: 1205433 Cross-References: CVE-2022-4436 CVE-2022-4437 CVE-2022-4438 CVE-2022-4439 CVE-2022-4440 Affected Products: openSUSE Backports SLE-15-SP3 An update that fixes 5...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2022:10244-1 Rating: important References: 1205433 Cross-References: CVE-2022-4436 CVE-2022-4437 CVE-2022-4438 CVE-2022-4439 CVE-2022-4440 Affected Products: openSUSE Backports SLE-15-SP4 An update that fixes 5...

Security update for python-slixmpp (moderate)

openSUSE Security Update: Security update for python-slixmpp Announcement ID: openSUSE-SU-2022:10241-1 Rating: moderate References: 1205433 Cross-References: CVE-2022-45197 Affected Products: openSUSE Backports SLE-15-SP3 An update that fixes one vulnerability is now available. Description: This...