OPENSUSE-SU-2023:0083-1 Security update for nextcloud

This update for nextcloud fixes the following issues: - Update to 23.0.12 See: https://nextcloud.com/changelog/latest23 - This also fix security issues: - CVE-2022-35931: Password Policy app could generate passwords that would be block boo1203190 - CVE-2022-39346: Missing length validation of use...

SUSE-SU-2023:1665-1 Security update for sudo

This update for sudo fixes the following issue: Security issues: - CVE-2023-28486: Fixed sudo does not escape control characters in log messages. bsc1209362 - CVE-2023-28487: Fixed sudo does not escape control characters in sudoreplay output. bsc1209361 - CVE-2023-27320: Fixed a potential securit...

RHEL 8 : nss (RHSA-2023:1370)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:1370 advisory. Network Security Services NSS is a set of libraries designed to support the cross-platform development of security-enabled client and server...

MGASA-2023-0088 Updated kernel-linus packages fix security vulnerabilities

This kernel-linus update is based on upstream 5.15.98 and fixes atleast the following security issues: A regression exists in the Linux Kernel within KVM: nVMX that allowed for speculative execution attacks. L2 can carry out Spectre v2 attacks on L1 due to L1 thinking it doesn't need retpolines o...

DSA-5371-1 chromium - security update

Bulletin has no description...

PT-2023-35479 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.232 Description: The issue is related to a wrong-direction WARNING in the plusb.c file, which may potentially lead to security vulnerabilities. The actual impact and attack plausibility have not yet been...

MGASA-2023-0074 Updated binwalk packages fix security vulnerability

Remote code execution using crafted PFS filesystem. CVE-2022-4510...

OPENSUSE-SU-2023:0061-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 110.0.5481.177 boo1208589 CVE-2023-0927: Use after free in Web Payments API CVE-2023-0928: Use after free in SwiftShader CVE-2023-0929: Use after free in Vulkan CVE-2023-0930: Heap buffer overflow in Video CVE-2023-0931: Use after free...

DSA-5348-1 haproxy - security update

Bulletin has no description...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2023:0045-1 Rating: important References: 1208029 Cross-References: CVE-2023-0696 CVE-2023-0697 CVE-2023-0698 CVE-2023-0699 CVE-2023-0700 CVE-2023-0701 CVE-2023-0702 CVE-2023-0703 CVE-2023-0704 CVE-2023-0705...

PT-2023-35181 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.90 Description: A potential security issue exists in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v5.15.90, upda...

SUSE-SU-2023:0322-1 Security update for apache2

This update for apache2 fixes the following issues: - CVE-2022-37436: Fixed an issue in modproxy where a malicious backend could cause the response headers to be truncated early, resulting in some headers being incorporated into the response body bsc1207251. - CVE-2022-36760: Fixed an issue in...

DLA-3313-1 wireshark - security update

Bulletin has no description...

DSA-5342-1 xorg-server - security update

Bulletin has no description...

DLA-3304-1 fig2dev - security update

Bulletin has no description...

DLA-3290-1 libzen - security update

Bulletin has no description...

DSA-5331-1 openjdk-11 - security update

Bulletin has no description...

MGASA-2023-0008 Updated kernel-linus packages fix security vulnerabilities

This kernel-linus update is based on upstream 5.15.88 and fixes atleast the following security issues: A use-after-free flaw was found in the Linux kernel’s SGI GRU driver in the way the first grufileunlockedioctl function is called by the user, where a fail pass occurs in the...

PT-2023-16267

Name of the Vulnerable Software and Affected Versions pyload/pyload versions prior to 0.5.0b3.dev41 Description The issue concerns an excessive attack surface in the GitHub repository pyload/pyload. Recommendations For versions prior to 0.5.0b3.dev41, update to version 0.5.0b3.dev41 or later to...

PT-2023-33247 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.82 Description: The issue concerns a potential security vulnerability in the Linux Kernel. It involves a null check before removing sysfs attributes, specifically related to the coretemp component of the...