chromium -- multiple security fixes

Chrome Releases reports: This update includes 4 security fixes: 391907159 High CVE-2025-0995: Use after free in V8. Reported by Popax21 on 2025-01-24 391788835 High CVE-2025-0996: Inappropriate implementation in Browser UI. Reported by yuki yamaoto on 2025-01-23 391666328 High CVE-2025-0997: Use...

Stable Channel Update for Desktop

The Stable channel has been updated to 132.0.6834.110/111 for Windows, Mac and 132.0.6834.110 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. The extended stable channel has been updated to 132.0.6834.110/111 Windows, Mac and...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2024:0417-1 Rating: important References: Affected Products: openSUSE Backports SLE-15-SP5 openSUSE Backports SLE-15-SP6 An update that contains security fixes can now be installed. Description: This security upda...

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Bluetooth: l2cap: fix null-ptr-deref in l2capchantimeout CVE-2024-27399 kernel: bpf: Add BPFPROGTYPECGROUPSKB attach type enforcement in BPFLINKCREATE CVE-2024-38564 kernel: bpf: Fix a...

AlmaLinux 9 : kernel (ALSA-2024:8617)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:8617 advisory. hw: cpu: intel: Native Branch History Injection BHI CVE-2024-2201 kernel: tcp: add sanity checks to rx zerocopy CVE-2024-26640 kernel: mptcp: fix data...

CVE-2024-41013

In the Linux kernel, the following vulnerability has been resolved: xfs: don't walk off the end of a directory data block This adds sanity checks for xfsdir2dataunused and xfsdir2dataentry to make sure don't stray beyond valid memory region. Before patching, the loop simply checks that the start...

SUSE-SU-2024:1646-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2019-25160: Fixed out-of-bounds memory accesses in netlabel bsc1220394. - CVE-2021-46904: Fixed NULL pointer dereference during tty device unregistration...

RHEL 6 : libjpeg-turbo (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libjpeg-turbo: several integer overflows and subsequent segfaults when attempting to compress/decompress...

CVE-2021-47014

In the Linux kernel, the following vulnerability has been resolved: net/sched: actct: fix wild memory access when clearing fragments while testing re-assembly/re-fragmentation using actct, it's possible to observe a crash like the following one: KASAN: maybe wild-memory-access in range...

OPENSUSE-SU-2024:0025-1 Security update for chromium

This update for chromium fixes the following issues: Update to 120.0.6099.224 boo1218892: - CVE-2024-0517: Out of bounds write in V8 - CVE-2024-0518: Type Confusion in V8 - CVE-2024-0519: Out of bounds memory access in V8 - Various fixes from internal audits, fuzzing and other initiatives...

SUSE-SU-2023:3963-1 Security update for libX11

This update for libX11 fixes the following issues: - CVE-2023-43786: Fixed stack exhaustion from infinite recursion in PutSubImage bsc1215684. - CVE-2023-43787: Fixed integer overflow in XCreateImage leading to a heap overflow bsc1215685. - CVE-2023-43785: Fixed out-of-bounds memory access in...

OPENSUSE-SU-2023:0237-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 116.0.5845.110 boo1214487: CVE-2023-4427: Out of bounds memory access in V8 CVE-2023-4428: Out of bounds memory access in CSS CVE-2023-4429: Use after free in Loader CVE-2023-4430: Use after free in Vulkan CVE-2023-4431: Out of bounds...

SUSE-SU-2023:2804-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-3090: Fixed a heap out-of-bounds write in the ipvlan network driver bsc1212842. - CVE-2023-3111: Fixed a use-after-free vulnerability in...

OPENSUSE-SU-2023:0093-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 112.0.5615.165 boo1210618: CVE-2023-2133: Out of bounds memory access in Service Worker API CVE-2023-2134: Out of bounds memory access in Service Worker API CVE-2023-2135: Use after free in DevTools CVE-2023-2136: Integer overflow in...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2023:0093-1 Rating: important References: 1210618 Cross-References: CVE-2023-2133 CVE-2023-2134 CVE-2023-2135 CVE-2023-2136 CVE-2023-2137 Affected Products: openSUSE Backports SLE-15-SP4 An update that fixes 5...

SUSE-SU-2023:0209-1 Security update for vim

This update for vim fixes the following issues: - Updated to version 9.0.1234: - CVE-2023-0433: Fixed an out of bounds memory access that could cause a crash bsc1207396. - CVE-2023-0288: Fixed an out of bounds memory access that could cause a crash bsc1207162. - CVE-2023-0054: Fixed an out of...

SUSE-SU-2022:2806-1 Security update for open-iscsi

This update for open-iscsi fixes the following issues: Fixed various vulnerabilities in the embedded TCP/IP stack bsc1179908: - CVE-2020-13987: Fixed an out of bounds memory access when calculating the checksums for IP packets. - CVE-2020-13988: Fixed an integer overflow when parsing TCP MSS...

OPENSUSE-SU-2022:10010-1 Security update for chromium

This update for chromium fixes the following issues: - Chromium 102.0.5005.115 boo1200423 CVE-2022-2007: Use after free in WebGPU CVE-2022-2008: Out of bounds memory access in WebGL CVE-2022-2010: Out of bounds read in compositing CVE-2022-2011: Use after free in ANGLE...

OPENSUSE-SU-2022:10009-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 102.0.5005.115 boo1200423 CVE-2022-2007: Use after free in WebGPU CVE-2022-2008: Out of bounds memory access in WebGL CVE-2022-2010: Out of bounds read in compositing CVE-2022-2011: Use after free in ANGLE Chromium 102.0.5001.61...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-1769)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...