SUSE-SU-2022:4395-1 Security update for samba

This update for samba fixes the following issues: Version update to 4.15.12. Security issues fixed: - CVE-2022-2031: Fixed AD users that could have bypassed certain restrictions associated with changing passwords bsc1201495. - CVE-2022-32742: Fixed SMB1 code that does not correctly verify...

SUSE-SU-2022:4371-1 Security update for busybox

This update for busybox fixes the following issues: - CVE-2022-30065: Fixed use-after-free in the AWK applet bsc1199744. - CVE-2014-9645: Fixed loading of unwanted module with / in module names bsc914660. - Update to 1.35.0 also introduced: - awk: fix printf %%, fix read beyond end of buffer -...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2022:10229-1 Rating: important References: 1205871 Cross-References: CVE-2022-4174 CVE-2022-4175 CVE-2022-4176 CVE-2022-4177 CVE-2022-4178 CVE-2022-4179 CVE-2022-4180 CVE-2022-4181 CVE-2022-4182 CVE-2022-4183...

SUSE-SU-2022:4276-1 Security update for exiv2

This update for exiv2 fixes the following issues: - CVE-2019-13110: Fixed an integer-overflow and out-of-bounds read in CiffDirectory:readDirectory leads to denail of service bsc1142678. - CVE-2019-13109: Fixed a denial of service in PngImage:readMetadata bsc1142677. - CVE-2018-17581: Fixed an...

SUSE-SU-2022:4273-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 Azure kernel was updated. The following security bugs were fixed: - CVE-2021-4037: Fixed function logic vulnerability that allowed local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission...

SUSE-SU-2022:4253-1 Security update for busybox

This update for busybox fixes the following issues: - CVE-2014-9645: Fixed loading of unwanted modules with / bsc914660. - CVE-2017-16544: Fixed insufficient sanitization of filenames when autocompleting bsc1069412. - CVE-2015-9261: Fixed huftbuild misuses a pointer, causing segfaults bsc1102912....

SUSE-SU-2022:4154-1 Security update for krb5

This update for krb5 fixes the following issues: - CVE-2021-37750: Fixed KDC null pointer dereference via a FAST inner body that lacks a server field bsc1189929. - CVE-2022-42898: Fixed integer overflow in PAC parsing bsc1205126...

SUSE-SU-2022:3911-1 Security update for gstreamer-plugins-base

This update for gstreamer-plugins-base fixes the following issues: - CVE-2021-3522: Fixed frame size check and potential invalid reads bsc1185448...

SUSE-SU-2022:3829-1 Security update for hdf5

This update for hdf5 fixes the following issues: - CVE-2021-46244: Fixed division by zero leading to DoS bsc1195215. - CVE-2018-13867: Fixed out of bounds read in the function H5Faccumread in H5Faccum.c bsc1101906. - CVE-2018-16438: Fixed out of bounds read in H5Lexternquery at H5Lexternal.c...

SUSE-SU-2022:3825-1 Security update for hdf5

This update for hdf5 fixes the following issues: - CVE-2021-46244: Fixed division by zero leading to DoS bsc1195215. - CVE-2018-13867: Fixed out of bounds read in the function H5Faccumread in H5Faccum.c bsc1101906. - CVE-2018-16438: Fixed out of bounds read in H5Lexternquery at H5Lexternal.c...

SUSE-SU-2022:3679-1 Security update for tiff

This update for tiff fixes the following issues: - CVE-2022-2519: Fixed a double free in rotateImage bsc1202968. - CVE-2022-2520: Fixed a assertion failure in rotateImage bsc1202973. - CVE-2022-2521: Fixed invalid free in TIFFClose bsc1202971. - CVE-2022-2867: Fixed out of bounds read and write i...

CVE-2022-39402 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2022-21635 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2022-21605 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2022-21599 vulnerabilities

Vulnerabilities for packages: mysql...

SUSE-SU-2022:3617-1 Security update for netty

This update for netty fixes the following issues: - CVE-2020-11612: The ZlibDecoders allow for unbounded memory allocation while decoding a byte stream bsc1168932 - CVE-2021-21290: Information disclosure via the local system temporary directory bsc1182103 - CVE-2021-37136: Bzip2Decoder doesn't...

SUSE-SU-2022:3609-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-39190: Fixed an issue that was discovered in net/netfilter/nftablesapi.c and could cause a denial of service upon binding to an already bound chai...

SUSE-SU-2022:3585-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated. The following security bugs were fixed: - CVE-2022-3303: Fixed a race condition in the sound subsystem due to improper locking bnc1203769. - CVE-2022-41218: Fixed an use-after-free caused by refcount races in drivers/media/dvb-core/dmxdev.c...

SUSE-SU-2022:3473-1 Security update for python310

This update for python310 fixes the following issues: Updated to version 3.10.7: - CVE-2020-10735: Fixed DoS due to missing limit of amount of digits when converting text to int bsc1203125. - CVE-2021-28861: Fixed an open redirect in the http server when an URI path starts with // bsc1202624...

SUSE-SU-2022:3408-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP1 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-36516: Fixed an issue in the mixed IPID assignment method where an attacker was able to inject data into or terminate a victim's TCP session...