SUSE-SU-2023:1854-1 Security update for liblouis

This update for liblouis fixes the following issues: - CVE-2023-26768: Fixed buffer overflow in loulogFile bsc1209431...

SUSE-SU-2023:1847-1 Security update for php7

This update for php7 fixes the following issues: - CVE-2022-4900: Fixed potential buffer overflow via PHPCLISERVERWORKERS environment variable. bsc1209537...

SUSE-SU-2023:1846-1 Security update for php7

This update for php7 fixes the following issues: - CVE-2022-4900: Fixed potential buffer overflow via PHPCLISERVERWORKERS environment variable. bsc1209537...

OPENSUSE-SU-2023:0088-1 Security update for upx

upx was updated to fix the following issues: Update to release 4.0.2 Fix unpack of ELF x86-64 that failed with 'CantUnpackException: corrupt binfo' Resolve SEGV on PackLinuxElf64::invertptdynamic - CVE-2021-30500: Fixed Null pointer dereference in PackLinuxElf:canUnpack in plxelf.cpp -...

SUSE-SU-2023:1766-1 Security update for libheif

This update for libheif fixes the following issues: - CVE-2023-0996: Fixed a buffer overflow in heifjsdecodeimage bsc1208640...

SUSE-SU-2023:1718-1 Security update for glibc

This update for glibc fixes the following issues: Security issue fixed: - CVE-2023-0687: Fix allocated buffer overflow in gmon bsc1207975 Other issues fixed: - Fix avx2 strncmp offset compare condition check bsc1208358 - elf: Allow dlopen of filter object to work bsc1207571 - powerpc: Fix...

SUSE-SU-2023:0707-1 Security update for python39

This update for python39 fixes the following issues: - CVE-2023-24329: Fixed blocklists bypass via the urllib.parse component when supplying a URL that starts with blank characters bsc1208471. Update to 3.9.16: - python -m http.server no longer allows terminal control characters sent within a...

SUSE-SU-2023:0694-1 Security update for redis

This update for redis fixes the following issues: - CVE-2022-36021: Fixed integer overflow in RANDMEMBER, ZRANDMEMBER, and HRANDFIELD commands bsc1208790. - CVE-2023-25155: Fixed integer Overflow in RAND commands can lead to assertion bsc1208793. The following non-security bug was fixed: - Fixed...

SUSE-SU-2023:0693-1 Security update for redis

This update for redis fixes the following issues: - CVE-2022-36021: Fixed integer overflow in RANDMEMBER, ZRANDMEMBER, and HRANDFIELD commands bsc1208790. - CVE-2023-25155: Fixed integer Overflow in RAND commands can lead to assertion bsc1208793...

SUSE-SU-2023:0494-1 Security update for poppler

This update for poppler fixes the following issues: - CVE-2022-38784: Fixed integer overflow in the JBIG2 decoder bsc1202692. - CVE-2019-13283: Fixed heap-based buffer over-read that could be triggered by sending a crafted PDF document to the pdftotext tool bsc1140877...

SUSE-SU-2023:0480-1 Security update for poppler

This update for poppler fixes the following issues: - CVE-2022-38784: Fixed integer overflow in the JBIG2 decoder bsc1202692. - CVE-2019-13283: Fixed heap-based buffer over-read that could be triggered by sending a crafted PDF document to the pdftotext tool bsc1140877...

GSD-2023-1002297 netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function.

netfilter: ipset: Fix overflow before widen in the bitmapipcreate function. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.303 by commit...

GSD-2023-1002240 netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function.

netfilter: ipset: Fix overflow before widen in the bitmapipcreate function. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.229 by commit...

GSD-2023-1002123 netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function.

netfilter: ipset: Fix overflow before widen in the bitmapipcreate function. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.89 by commit...

SUSE-SU-2023:0400-1 Security update for freerdp

This update for freerdp fixes the following issues: - CVE-2022-39316: Fixed out of bound read in zgfx decoder bsc1205512. - CVE-2022-39317: Fixed undefined behaviour in zgfx decoder bsc1205512. - CVE-2022-39320: Fixed heap buffer overflow in urbdrc channel bsc1205512. - CVE-2022-39347: Fixed...

SUSE-SU-2023:0387-1 Security update for xrdp

This update for xrdp fixes the following issues: - CVE-2022-23468: Fixed a buffer overflow in xrdploginwndcreate bsc1206300. - CVE-2022-23479: Fixed a buffer overflow in xrdpmmchandatain bsc1206303. - CVE-2022-23480: Fixed a buffer overflow in devredirprocclientdevlistannouncereq bsc1206306. -...

GSD-2023-1001842 netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function.

netfilter: ipset: Fix overflow before widen in the bitmapipcreate function. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.303 by commit...

GSD-2023-1001709 ASoC: Intel: sof-nau8825: fix module alias overflow

ASoC: Intel: sof-nau8825: fix module alias overflow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.7 by commit...

SUSE-SU-2022:0088-3 Security update for ghostscript

This update for ghostscript fixes the following issues: - CVE-2021-45944: Fixed use-after-free in sampleddatasample bsc1194303 - CVE-2021-45949: Fixed heap-based buffer overflow in sampleddatafinish bsc1194304...

SUSE-SU-2023:0110-1 Security update for git

This update for git fixes the following issues: - CVE-2022-41903: Fixed a heap overflow in the 'git archive' and 'git log --format' commands bsc1207033. - CVE-2022-23521: Fixed an integer overflow that could be triggered when parsing a gitattributes file bsc1207032...