OPENSUSE-SU-2024:14293-1 python310-Flask-Cors-4.0.1-1.1 on GA media

These are all security issues fixed in the python310-Flask-Cors-4.0.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14295-1 python312-3.12.5-1.1 on GA media

These are all security issues fixed in the python312-3.12.5-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14297-1 python39-3.9.19-7.1 on GA media

These are all security issues fixed in the python39-3.9.19-7.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14294-1 python310-setuptools-72.1.0-1.1 on GA media

These are all security issues fixed in the python310-setuptools-72.1.0-1.1 package on the GA media of openSUSE Tumbleweed...

USN-6972-4: Linux kernel (Oracle) vulnerabilities

Yuxuan Hu discovered that the Bluetooth RFCOMM protocol driver in the Linux Kernel contained a race condition, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of service system crash. CVE-2024-22099 It was discovered that a race condition existed in th...

GHSA-PP84-V3MW-GG4W Taipy 3.1.1 affected by CVEs on flask-core and pymongo

Summary Indirect CVEs affect Taipy 3.1.1 Details Taipy 3.1.1 is affected by two existing CVEs: CVE-2024-1681 affects flask-core =3.1.2 and on major releases: =4.0.0 Impact pre-commit breaks when using dependency Taipy 3.1.1...

USN-6974-2: Linux kernel (Oracle) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - SuperH RISC architecture; - User-Mode Linux UML; - MMC subsystem; - Network drivers; - GFS2 file system; - IPv4...

USN-6972-3: Linux kernel (Azure) vulnerabilities

Yuxuan Hu discovered that the Bluetooth RFCOMM protocol driver in the Linux Kernel contained a race condition, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of service system crash. CVE-2024-22099 It was discovered that a race condition existed in th...

CVE-2024-8088 vulnerabilities

Vulnerabilities for packages: python...

USN-6972-2: Linux kernel (AWS) vulnerabilities

Yuxuan Hu discovered that the Bluetooth RFCOMM protocol driver in the Linux Kernel contained a race condition, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of service system crash. CVE-2024-22099 It was discovered that a race condition existed in th...

BELL-CVE-2024-42268

Bulletin has no description...

OPENSUSE-SU-2024:14284-1 libvte-2_91-0-0.76.3-3.1 on GA media

These are all security issues fixed in the libvte-291-0-0.76.3-3.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-7968 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2024-7977 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2024-7981 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-W7CP-G8V7-R54M vulnerabilities

Vulnerabilities for packages: airflow...

USN-6950-4: Linux kernel (HWE) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - Block layer subsystem; - Bluetooth drivers; - Clock framework and...

USN-6951-4: Linux kernel (BlueField) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - M68K architecture; - User-Mode Linux UML; - x86 architecture; - Accessibility subsystem; -...

CVE-2023-52913

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix potential context UAFs gemcontextregister makes the context visible to userspace, and which point a separate thread can trigger the I915GEMCONTEXTDESTROY ioctl. So we need to ensure that nothing uses the ctx ptr aft...

SUSE SLES15: libpython3_10-1_0 / libpython3_10-1_0-32bit / python310 / etc (SUSE-SU-2024:2974-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2974-1 advisory. Security issue fixed: - CVE-2024-6923: Fixed email header injection due to unquoted newlines bsc1228780 Non-security issues...