SUSE-SU-2022:1723-1 Security update for poppler

This update for poppler fixes the following issues: - CVE-2020-27778: Fixed a buffer overflow in pdftohtml bsc1179163. - CVE-2019-14494: Fixed a divide-by-zero error in pdftoppm bsc1143950. - CVE-2019-9959: Fixed an integer overflow in pdftocairo bsc1142465. - CVE-2019-10871: Fixed an invalid...

SUSE-SU-2022:1511-1 Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: Update to version 2.36.0 bsc1198290: - CVE-2022-22624: Fixed use after free that may lead to arbitrary code execution. - CVE-2022-22628: Fixed use after free that may lead to arbitrary code execution. - CVE-2022-22629: Fixed a buffer overflo...

SUSE-SU-2022:1296-1 Security update for openjpeg

This update for openjpeg fixes the following issues: - CVE-2018-14423: Fixed division-by-zero vulnerabilities in the functions pinextpcrl, pinextcprl,and pinextrpcl in lib/openjp3d/pi.c bsc1102016. - CVE-2018-16376: Fixed heap-based buffer overflow function t2encodepacket in lib/openmj2/t2.c...

SUSE-SU-2022:1276-1 Security update for nbd

This update for nbd fixes the following issues: - CVE-2022-26495: Fixed an integer overflow with a resultant heap-based buffer overflow bsc1196827. - CVE-2022-26496: Fixed a stack-based buffer overflow when parsing the name field by sending a crafted NBDOPTINFO bsc1196828. Update to version 3.24...

SUSE-SU-2022:1252-1 Security update for openjpeg2

This update for openjpeg2 fixes the following issues: - CVE-2018-5727: Fixed integer overflow vulnerability in theopjt1encodecblks function bsc1076314. - CVE-2018-5785: Fixed integer overflow caused by an out-of-bounds leftshift in the opjj2ksetupencoder function bsc1076967. - CVE-2018-6616: Fixe...

SUSE-SU-2022:1212-1 Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP1)

This update for the Linux Kernel 4.12.14-19799 fixes several issues. The following security issues were fixed: - CVE-2022-27666: Fixed a buffer overflow vulnerability in IPsec ESP transformation code. This flaw allowed a local attacker with a normal user privilege to overwrite kernel heap objects...

SUSE-SU-2022:1156-1 Security update for opensc

This update for opensc fixes the following issues: Security issues fixed: - CVE-2021-42782: Stack buffer overflow issues in various places bsc1191957. - CVE-2021-42781: Fixed multiple heap buffer overflows in pkcs15-oberthur.c bsc1192000. - CVE-2021-42780: Fixed use after return in insertpin...

SUSE-SU-2022:1129-1 Security update for openjpeg2

This update for openjpeg2 fixes the following issues: - CVE-2016-1924: Fixed heap buffer overflow bsc980504. - CVE-2016-3183: Fixed out-of-bounds read in sycc422torgb function bsc971617. - CVE-2016-4797: Fixed heap buffer overflow bsc980504. - CVE-2018-14423: Fixed division-by-zero vulnerabilitie...

SUSE-SU-2022:1108-1 Security update for util-linux

This update for util-linux fixes the following issues: - Improve throughput and reduce clock sequence increments for high load situation with time based version 1 uuids. bsc1194642 - Prevent root owning of /var/lib/libuuid/clock.txt. bsc1194642 - Warn if uuidd lock state is not usable. bsc1194642...

Huawei EulerOS: Security Advisory for numpy (EulerOS-SA-2022-1357)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2022:0909-1 Security update for glibc

This update for glibc fixes the following issues: - CVE-2022-23219: Fixed buffer overflow in sunrpc clntcreate for 'unix' bsc1194768 - CVE-2022-23218: Fixed buffer overflow in sunrpc svcunixcreate bsc1194770 - CVE-2021-3999: Fixed getcwd to set errno to ERANGE for size == 1 bsc1194640...

SUSE-SU-2022:14923-1 Security update for glibc

This update for glibc fixes the following issues: - CVE-2022-23219: Fixed buffer overflow in sunrpc clntcreate for 'unix' bsc1194768, BZ 22542 - CVE-2022-23218: Fixed buffer overflow in sunrpc svcunixcreate bsc1194770, BZ 28768 - CVE-2021-3999: Fixed in getcwd to set errno to ERANGE for size == 1...

SUSE-SU-2022:0733-1 Security update for zsh

This update for zsh fixes the following issues: - CVE-2021-45444: Fixed a vulnerability where arbitrary shell commands could be executed related to prompt expansion bsc1196435. - CVE-2019-20044: Fixed a vulnerability where shell privileges would not be properly dropped when unsetting the PRIVILEG...

OPENSUSE-SU-2022:0067-1 Security update for libdxfrw, librecad

This update for libdxfrw, librecad fixes the following issues: - Update to version 1.0.1+git.20220109: fixed ambiguous error for DRWDimension::parseDwg fixed enless while-loop for pre 2004 versions dwgReader::readDwgObjects stop reading after 1st error dwgReader::readDwgEntities stop reading afte...

SUSE-SU-2022:14898-1 Security update for htmldoc

This update for htmldoc fixes the following issues: - CVE-2019-19630: Fixed stack-based buffer overflow in the hdstrlcpy function in string.c via a crafted HTML document bsc1158802. - CVE-2021-20308: Fixed integer overflow in imageloadgif bsc1184424. - CVE-2022-0534: Fixed stack out-of-bounds rea...

SUSE-SU-2022:0496-1 Security update for tiff

This update for tiff fixes the following issues: - CVE-2017-17095: Fixed DoS in tools/pal2rgb.c in pal2rgb bsc1071031. - CVE-2019-17546: Fixed integer overflow that potentially causes a heap-based buffer overflow via a crafted RGBA image bsc1154365. - CVE-2020-19131: Fixed buffer overflow in...

SUSE-SU-2022:0440-1 Security update for apache2

This update for apache2 fixes the following issues: - CVE-2021-44224: Fixed NULL dereference or SSRF in forward proxy configurations bsc1193943 - CVE-2021-44790: Fixed a buffer overflow when parsing multipart content in modlua bsc1193942 This update also enables TLS 1.3 support, by building again...

SUSE-SU-2022:0330-1 Security update for glibc

This update for glibc fixes the following issues: - CVE-2021-3999: Fixed incorrect errno in getcwd bsc1194640 - CVE-2022-23219: Fixed buffer overflow in sunrpc clntcreate for 'unix' bsc1194768 - CVE-2022-23218: Fixed buffer overflow in sunrpc svcunixcreate bsc1194770 Features added: - IBM Power 1...

SUSE-SU-2022:0135-1 Security update for busybox

This update for busybox fixes the following issues: - CVE-2011-5325: Fixed tar directory traversal bsc951562. - CVE-2015-9261: Fixed segfalts and application crashes in huftbuild bsc1102912. - CVE-2016-2147: Fixed out of bounds write heap due to integer underflow in udhcpc bsc970663. -...

SUSE-SU-2022:0119-1 Security update for apache2

This update for apache2 fixes the following issues: - CVE-2021-44224: Fixed NULL dereference or SSRF in forward proxy configurations. bsc1193943 - CVE-2021-44790: Fixed buffer overflow when parsing multipart content in modlua. bsc1193942...