SUSE-SU-2023:4085-1 Security update for grub2

This update for grub2 fixes the following issues: Security fixes: - CVE-2023-4692: Fixed an out-of-bounds write at fs/ntfs.c which may lead to unsigned code execution. bsc1215935 - CVE-2023-4693: Fixed an out-of-bounds read at fs/ntfs.c which may lead to leak sensitive information. bsc1215936 Oth...

RUSTSEC-2022-0094 Mimalloc Can Allocate Memory with Bad Alignment

This crate depended on a promise regarding alignments made by the author of the mimalloc allocator to avoid using aligned allocation functions where possible for performance reasons. Since then, the mimalloc allocator's logic changed, making it break this promise. This caused this crate to return...

ALSA-2022:7594 Moderate: poppler security and bug fix update

Poppler is a Portable Document Format PDF rendering library, used by applications such as Evince. Security Fixes: poppler: A logic error in the Hints::Hints function can cause denial of service CVE-2022-27337 For more details about the security issues, including the impact, a CVSS score,...

GSD-2022-1006506 drm/gma500: Fix WARN_ON(lock->magic != lock) error

drm/gma500: Fix WARNONlock-magic != lock error This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.12 by commit...

GSD-2022-1006011 RDMA/rxe: Fix error unwind in rxe_create_qp()

RDMA/rxe: Fix error unwind in rxecreateqp This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.211 by commit...

GSD-2022-1005582 RDMA/rxe: Fix error unwind in rxe_create_qp()

RDMA/rxe: Fix error unwind in rxecreateqp This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by commit...

GSD-2022-1005230 RDMA/rxe: Fix error unwind in rxe_create_qp()

RDMA/rxe: Fix error unwind in rxecreateqp This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1004101 spi: bcm2835: bcm2835_spi_handle_err(): fix NULL pointer deref for non DMA transfers

spi: bcm2835: bcm2835spihandleerr: fix NULL pointer deref for non DMA transfers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by comm...

cloud-init bug fix and enhancement update

An update is available for cloud-init. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The cloud-init packages provide a set of init scripts for cloud instances...

GSD-2022-1002244 powerpc: 8xx: fix a return value error in mpc8xx_pic_init

powerpc: 8xx: fix a return value error in mpc8xxpicinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.189 by commit...

SUSE-SU-2022:0861-1 Security update for openssl-1_1

This update for openssl-11 fixes the following issues: openssl-11: - CVE-2022-0778: Infinite loop in BNmodsqrt reachable when parsing certificates bsc1196877. - Fix PAC pointer authentication in ARM bsc1195856 - Pull libopenssl-11 when updating openssl-11 with the same version bsc1195792 - FIPS:...

SUSE-SU-2022:0615-1 Security update for the Linux Kernel (Live Patch 14 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-1503005949 fixes several issues. The following security issues were fixed: - CVE-2022-0516: Fixed KVM s390 return error on SIDA memop on normal guest bsc1195947. - CVE-2021-0920: Fixed a local privilege escalation due to an use after free bug in unixgc...

January 25, 2022—KB5009616 (OS Build 17763.2510) Preview

January 25, 2022—KB5009616 OS Build 17763.2510 Preview 11/17/20 For information about Windows update terminology, see the article about the types of Windows updates and the monthly quality update types. For an overview of Windows 10, version 1809, see its update history page. Highlights Updates...

GSD-2021-1001857 net: encx24j600: check error in devm_regmap_init_encx24j600

net: encx24j600: check error in devmregmapinitencx24j600 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.75 by commit...

GSD-2021-1001751 irqchip/gic-v3-its: Fix potential VPE leak on error

irqchip/gic-v3-its: Fix potential VPE leak on error This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.9 by commit...

UVI-2021-1001316 igc: Fix use-after-free error during reset

igc: Fix use-after-free error during reset This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.136 by commit...

SUSE-SU-2021:2180-1 Security update for libsolv

This update for libsolv fixes the following issues: Security issues fixed: - CVE-2019-20387: Fixed heap-buffer-overflow in repodataschema2id bsc1161510 - CVE-2021-3200: testcaseread: error out if repos are added or the system is changed too late bsc1186229 Other issues fixed: - backport support f...

SUSE-SU-2021:1652-1 Security update for redis

This update for redis fixes the following issues: redis was updated to 6.0.13: CVE-2021-29477: Integer overflow in STRALGO LCS command bsc1185729 CVE-2021-29478: Integer overflow in COPY command for large intsets bsc1185730 Cluster: Skip unnecessary check which may prevent failure detection Fix...

June 15, 2021—KB5003698 (OS Build 18363.1645) Preview

June 15, 2021—KB5003698 OS Build 18363.1645 Preview NEW 6/15/21 IMPORTANT This release includes the Flash Removal Package. Taking this update will remove Adobe Flash from the machine. For more information, see the Update on Adobe Flash Player End of Support. 5/11/21 REMINDER Windows 10, version...

SUSE-SU-2021:0386-1 Security update for the Linux Kernel (Live Patch 21 for SLE 15 SP1)

This update for the Linux Kernel 4.12.14-19778 fixes several issues. The following security issues were fixed: - CVE-2020-29569: Fixed a use after free due to a logic error bsc1180008. - CVE-2020-29368: Fixed an issue in copy-on-write implementation which could grant unintended write access becau...