SUSE-SU-2023:4950-1 Security update for libqt5-qtbase

This update for libqt5-qtbase fixes the following issues: - CVE-2023-37369: Fixed buffer overflow in QXmlStreamReader bsc1214327. - libq5-qtbase was rebuild against icu 73. jscPED-6193...

SUSE-SU-2023:4056-1 Security update for qemu

This update for qemu fixes the following issues: - CVE-2023-3180: Fixed a buffer overflow in the virtio-crypto device bsc1213925. - CVE-2021-3750: Fixed a DMA reentrancy in the USB EHCI device that could lead to use-after-free bsc1190011. - CVE-2021-3638: Fixed a buffer overflow in the ati-vga...

SUSE-SU-2023:3800-1 Security update for qemu

This update for qemu fixes the following issues: - CVE-2022-26354: Fixed a memory leak due to a missing virtqueue detach on error. bsc1198712 - CVE-2021-3929: Fixed an use-after-free in nvme DMA reentrancy issue. bsc1193880 - CVE-2023-0330: Fixed a stack overflow due to a DMA reentrancy issue...

SUSE-SU-2023:3792-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2020-21679: Fixed a buffer overflow in WritePCXImage function in pcx.c which may allow a remote attackers to cause a denial of service. bsc1214578...

SUSE-SU-2023:3739-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2020-21679: Fixed a buffer overflow in WritePCXImage function in pcx.c which may allow a remote attackers to cause a denial of service. bsc1214578...

SUSE-SU-2023:3691-1 Security update for mdadm

This update for mdadm fixes the following issues: - CVE-2023-28736: Fixed a buffer overflow bsc1214244. - CVE-2023-28938: Fixed uncontrolled resource consumption bsc1214245...

SUSE-SU-2023:3635-1 Security update for flac

This update for flac fixes the following issues: - CVE-2020-22219: Fixed a buffer overflow in function bitwritergrow which might allow a remote attacker to run arbitrary code via crafted input to the encoder. bsc1214615...

SUSE-SU-2023:3610-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 115.2.1 ESR bsc1215245. - CVE-2023-4863: Fixed heap buffer overflow in libwebp MFSA 2023-40 bsc1215231. The following non-security bug was fixed: - Fix i586 build by reducing debug info to -g1 bsc1210168...

SUSE-SU-2023:3498-1 Security update for php7

This update for php7 fixes the following issues: - CVE-2023-3823: Fixed an issue with external entity loading in XML without enabling it. bsc1214106 - CVE-2023-3824: Fixed a buffer overflow in phardirread. bsc1214103...

SUSE-SU-2023:3472-1 Security update for procps

This update for procps fixes the following issues: - CVE-2023-4016: Fixed ps buffer overflow bsc1214290...

OPENSUSE-SU-2023:0201-1 Security update for libredwg

This update for libredwg fixes the following issues: Update to version 0.12.5.5907 Security issues fixed: CVE-2022-33025: Fixed multiple security issues boo1200898 CVE-2023-36271: Fixed heap buffer overflow via the function bitwcs2nlen boo1212709 CVE-2023-36272: Fixed heap buffer overflow via the...

SUSE-SU-2023:3091-1 Security update for gnuplot

This update for gnuplot fixes the following issues: - CVE-2020-25969: Fixed buffer overflow via the function plotrequest bsc1213068. - CVE-2020-25559: Fixed double free when executing printsetoutput bsc1176689...

SUSE-SU-2023:3015-1 Security update for qemu

This update for qemu fixes the following issues: - CVE-2021-4207: Fixed double fetch in qxlcursor that could lead to heap buffer overflow bsc1198037. - CVE-2023-0330: Fixed DMA reentrancy issue that could lead to stack overflow bsc1207205. - CVE-2023-2861: Fixed improper access control on special...

[slackware-security] cups

New cups packages are available for Slackware 14.2, 15.0, and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/cups-2.4.3-i586-1slack15.0.txz: Upgraded. Fixed a heap buffer overflow in cupsstrlcpy, when the configuration file cupsd.conf se...

macOS 13.x < 13.4 Multiple Vulnerabilities (HT213758)

The remote host is running a version of macOS / Mac OS X that is 13.x prior to 13.4. It is, therefore, affected by multiple vulnerabilities: - In Sudo before 1.9.12p2, the sudoedit aka -e feature mishandles extra arguments passed in the user- provided environment variables SUDOEDITOR, VISUAL, and...

kernel: ASoC: Intel: avs: Fix potential buffer overflow by snprintf()

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Fix potential buffer overflow by snprintf snprintf returns the would-be-filled size when the string overflows the given buffer size, hence using this value may result in a buffer overflow although it's...

SUSE-SU-2023:1718-2 Security update for glibc

This update for glibc fixes the following issues: Security issue fixed: - CVE-2023-0687: Fix allocated buffer overflow in gmon bsc1207975 Other issues fixed: - Fix avx2 strncmp offset compare condition check bsc1208358 - elf: Allow dlopen of filter object to work bsc1207571 - powerpc: Fix...

SUSE-SU-2023:1970-2 Security update for giflib

This update for giflib fixes the following issues: - CVE-2019-15133: Fixed a divide-by-zero exception in the decoder function DGifSlurp in dgiflib.c if the height field of the ImageSize data structure is equal to zero bsc1146299. - CVE-2018-11490: Fixed a heap-based buffer overflow in...

SUSE-SU-2023:1854-1 Security update for liblouis

This update for liblouis fixes the following issues: - CVE-2023-26768: Fixed buffer overflow in loulogFile bsc1209431...

SUSE-SU-2023:1847-1 Security update for php7

This update for php7 fixes the following issues: - CVE-2022-4900: Fixed potential buffer overflow via PHPCLISERVERWORKERS environment variable. bsc1209537...