Important: Red Hat Security Advisory: Red Hat Quay 3.18.0

Red Hat Quay 3.18.0 is now available with bug fixes and feature enhancements. Quay 3.18.0...

perftest bug fix and enhancement update

An update is available for perftest. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8.1...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : rekor (SUSE-SU-2025:1332-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1332-1 advisory. - CVE-2023-45288: rekor: golang.org/x/net/http2: Fixed close connections when receiving too many...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : gdb (SUSE-SU-2024:4414-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:4414-1 advisory. Mention changes in GDB 14: GDB now supports the AArch64 Scalable Matrix Extension 2 SME2, which includes ...

OPENSUSE-SU-2024:0053-1 Security update for opera

This update for opera fixes the following issues: - Update to 107.0.5045.21 CHR-9604 Update Chromium on desktop-stable-121-5045 to 121.0.6167.160 DNA-114167 Crash at TopLevelStorageAccessPermissionContext:: DecidePermissionpermissions::PermissionRequestData, base:: OnceCallback DNA-114303 Crash a...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

SUSE-SU-2023:3867-1 Security update for SUSE Manager Client Tools

This update fixes the following issues: golang-github-lusitaniae-apacheexporter: - Security issues fixed: CVE-2022-32149: Fix denial of service vulnerability bsc1204501 CVE-2022-41723: Fix uncontrolled resource consumption bsc1208270 CVE-2022-46146: Fix authentication bypass vulnarability...

OPENSUSE-SU-2023:0033-1 Security update for virtualbox

This update for virtualbox fixes the following issues: VirtualBox 7.0.6 released January 17 2023 This is a maintenance release. The following items were fixed and/or added: 1 - VMM: Fixed guru running the FreeBSD loader on older Intel CPUs without unrestricted guest support bug 21332 - GUI: Fixed...

Facebook Introduces New Features for End-to-End Encrypted Messenger App

Meta Platforms on Monday announced that it has started to expand global testing of end-to-end encryption E2EE in Messenger chats by default. "Over the next few months, more people will continue to see some of their chats gradually being upgraded with an extra layer of protection provided by...

SUSE-SU-2022:4439-1 Security update for SUSE Manager Client Tools

This update fixes the following issues: golang-github-boynux-squidexporter: - Exclude s390 architecture - Enhanced to build on Enterprise Linux 8 grafana: - Version update from 8.3.10 to 8.5.13 jscPED-2145 - Security fixes: CVE-2022-36062: bsc1203596 CVE-2022-35957: bsc1203597 CVE-2022-31107:...

SUSE-SU-2022:2140-1 Security update for node_exporter

This security update for golang-github-prometheus-nodeexporter provides: Update golang-github-prometheus-nodeexporter from version 1.1.2 to version 1.3.0 bsc1196338, jscSLE-24238, jscSLE-24239 - CVE-2022-21698: Denial of service using InstrumentHandlerCounter - Update vendor tarball with...

SUSE-SU-2022:1396-1 Security update for SUSE Manager Client Tools

This update fixes the following issues: grafana: - Update from version 7.5.12 to version 8.3.5 jscSLE-23439, jscSLE-23422 + Security: Fixes XSS vulnerability in handling data sources bsc1195726, CVE-2022-21702 Fixes cross-origin request forgery vulnerability bsc1195727, CVE-2022-21703 Fixes...

SUSE-SU-2021:3886-1 Security update for nodejs14

This update for nodejs14 fixes the following issues: nodejs14 was updated to 14.18.1: deps: update llhttp to 2.1.4 Security fixes: - HTTP Request Smuggling due to spaced in headers bsc1191601, CVE-2021-22959 - HTTP Request Smuggling when parsing the body bsc1191602, CVE-2021-22960 Changes in...

OPENSUSE-SU-2021:2662-1 Security update for grafana

This update for grafana fixes the following issues: - CVE-2021-27358: unauthenticated remote attackers to trigger a Denial of Service via a remote API call bsc1183803 - Update to version 7.5.7: Updated relref to 'Configuring exemplars' section 34240 34243 Added exemplar topic 34147 34226 Quota: D...

SUSE-SU-2021:2098-1 Security update for SUSE Manager Server 4.1

This update fixes the following issues: cobbler: - Make fenceipmitool a wrapper for fenceipmilan using always lanplus. bsc1184361 - Remove unused template for fenceipmitool. - Prevent some race conditions when writting tftpboot files and the destination directory is not existing. bsc1186124 - Fix...

OPENSUSE-SU-2020:2158-1 Security update for neomutt

This update for neomutt fixes the following issues: Update neomutt to 20201120. Address boo1179035, CVE-2020-28896. Security - imap: close connection on all failures Features - alias: add function to Alias/Query dialogs - config: add validators for imap,smtp,popauthenticators - config: warn when...

Security update for neomutt (moderate)

openSUSE Security Update: Security update for neomutt Announcement ID: openSUSE-SU-2020:2158-1 Rating: moderate References: 1172906 1172935 1173197 1179035 1179113 Cross-References: CVE-2020-14093 CVE-2020-14154 CVE-2020-14954 CVE-2020-28896 Affected Products: openSUSE Backports SLE-15-SP2 An...

OPENSUSE-SU-2020:1984-1 Security update for java-11-openjdk

This update for java-11-openjdk fixes the following issues: - Update to upstream tag jdk-11.0.9-11 October 2020 CPU, bsc1177943 New features + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector Security fixes + JDK-8233624: Enhance JNI linkage + JDK-8236196: Improve string pooling +...

SUSE-SU-2020:3473-1 Security update for ceph

This update for ceph fixes the following issues: - CVE-2020-25660: Bring back CEPHXV2 authorizer challenges bsc1177843. - Added --container-init feature bsc1177319, bsc1163764 - Made journald as the logdriver again bsc1177933 - Fixes a condition check for copytree, copyfiles, and movefiles in...

WordPress Patches 3-Year-Old High-Severity RCE Bug

WordPress released a 5.5.2 update to its ubiquitous web publishing software platform. The update patches a high-severity bug, which could allow a remote unauthenticated attacker to take over a targeted website via a narrowly tailored denial-of-service attack. In all, the WordPress Security and...