SUSE-SU-2022:0334-1 Security update for containerd, docker

This update for containerd, docker fixes the following issues: - CVE-2021-41089: Fixed 'cp' can chmod host files bsc1191015. - CVE-2021-41091: Fixed flaw that could lead to data directory traversal in moby bsc1191434. - CVE-2021-41092: Fixed exposed user credentials with a misconfigured...

SUSE-SU-2022:0255-1 Security update for the Linux Kernel (Live Patch 22 for SLE 15)

This update for the Linux Kernel 4.12.14-15066 fixes several issues. The following security issues were fixed: - CVE-2018-25020: Fixed an issue in the BPF subsystem in the Linux kernel mishandled situations with a long jump over an instruction sequence where inner instructions require substantial...

SUSE-SU-2022:0213-1 Security update for containerd, docker

This update for containerd, docker fixes the following issues: - CVE-2021-41089: Fixed 'cp' can chmod host files bsc1191015. - CVE-2021-41091: Fixed flaw that could lead to data directory traversal in moby bsc1191434. - CVE-2021-41092: Fixed exposed user credentials with a misconfigured...

SUSE-SU-2022:0197-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP2 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-0185: Incorrect param length parsing in legacyparseparam which could have led to a local privilege escalation bsc1194517. - CVE-2022-0322: Fixed a...

SUSE-SU-2022:0176-1 Security update for unbound

This update for unbound fixes the following issues: - CVE-2019-25031: Fixed configuration injection in createunboundadservers.sh upon a successful man-in-the-middle attack bsc1185382. - CVE-2019-25032: Fixed integer overflow in the regional allocator via regionalalloc bsc1185383. - CVE-2019-25033...

SUSE-SU-2022:14878-1 Security update for expat

This update for expat fixes the following issues: - CVE-2021-45960: Fixed left shift in the storeAtts function in xmlparse.c that can lead to realloc misbehavior bsc1194251. - CVE-2021-46143: Fixed integer overflow in mgroupSize in doProlog bsc1194362. - CVE-2022-22822: Fixed integer overflow in...

SUSE-SU-2022:0135-1 Security update for busybox

This update for busybox fixes the following issues: - CVE-2011-5325: Fixed tar directory traversal bsc951562. - CVE-2015-9261: Fixed segfalts and application crashes in huftbuild bsc1102912. - CVE-2016-2147: Fixed out of bounds write heap due to integer underflow in udhcpc bsc970663. -...

CVE-2022-21699 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

CVE-2022-21356 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2022-21307 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2022-21315 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2022-21301 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2022-21290 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2022-21288 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2022-21279 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2022-21256 vulnerabilities

Vulnerabilities for packages: mysql...

OPENSUSE-SU-2021:1624-1 Security update for libaom

This update for libaom fixes the following issues: - CVE-2020-36129: Fixed stack buffer overflow via the component src/aomimage.c bsc1193356. - CVE-2020-36131: Fixed stack buffer overflow via the component stats/ratehist.c bsc1193365. - CVE-2020-36135: Fixed NULL pointer dereference via the...

SUSE-SU-2021:4015-2 Security update for python3

This update for python3 fixes the following issues: - CVE-2021-3737: Fixed http client infinite line reading DoS after a http 100. bsc1189241 - CVE-2021-3733: Fixed ReDoS in urllib.request. bsc1189287 - CVE-2021-3426: Fixed an information disclosure via pydoc. bsc1183374 - Rebuild to get new...

OPENSUSE-SU-2021:4170-1 Security update for libaom

This update for libaom fixes the following issues: - CVE-2020-36129: Fixed stack buffer overflow via the component src/aomimage.c bsc1193356. - CVE-2020-36131: Fixed stack buffer overflow via the component stats/ratehist.c bsc1193365. - CVE-2020-36135: Fixed NULL pointer dereference via the...

SUSE-SU-2021:4169-1 Security update for go1.16

This update for go1.16 fixes the following issues: Updated to upstream version 1.16.12 to include security fixes to the compiler, syscall, runtime, the net/http, net/http/httptest, and time packages bsc1182345 - CVE-2021-44717: syscall: don't close fd 0 on ForkExec error bsc1193598. -...