EulerOS 2.0 SP13 : kernel (EulerOS-SA-2025-1993)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : RDMA/core: Silence oversized kvmalloc warningCVE-2025-37867 igb: revert rtnllock that causes deadlockCVE-2023-53060 bnxten: Avoid order-5 memory...

EulerOS 2.0 SP12 : kernel (EulerOS-SA-2025-1826)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : ovl: Use 'buf' flexible array for memcpy destinationCVE-2022-49743 cifs: fix potential memory leaks in session setupCVE-2023-53008 bnxt: Do not re...

EulerOS 2.0 SP13 : kernel (EulerOS-SA-2025-1635)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : ipv4: Fix a data-race around sysctlfibsyncmem.CVE-2022-49637 ima: Fix potential memory leak in imainitcrypto.CVE-2022-49627 MIPS: pgalloc: fix...

nginx:1.24 security update

1.24.0-4.0.1.1 - Reference oracle-indexhtml within Requires Orabug: 33802044 - Remove Red Hat references Orabug: 29498217 1:1.24.0-4.1 - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service CVE-2024-7347 1:1.24.0-4 - Resolves: RHEL-49350 - nginx worker...

Fedora 40 : php (2025-4e7e2c40e0)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-4e7e2c40e0 advisory. PHP version 8.3.19 13 Mar 2025 BCMath: Fixed bug GH-17398 bcmul memory leak. SakiTakamachi Core: Fixed bug GH-17623 Broken stack overflow detection...

SUSE-SU-2025:0131-1 Security update for the Linux Kernel (Live Patch 45 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-15030059164 fixes several issues. The following security issues were fixed: - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk-trans bsc1233712. - CVE-2022-48956: ipv6: avoid use-after-free in ip6fragment bsc1232637. -...

SUSE-SU-2025:0110-1 Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024122 fixes several issues. The following security issues were fixed: - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk-trans bsc1233712. - CVE-2022-48956: ipv6: avoid use-after-free in ip6fragment bsc1232637. -...

SUSE-SU-2025:0103-1 Security update for the Linux Kernel (Live Patch 54 for SLE 12 SP5)

This update for the Linux Kernel 4.12.14-122201 fixes several issues. The following security issues were fixed: - CVE-2022-48686: Fixed UAF when detecting digest errors bsc1226337. - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk-trans bsc1233712. -...

SUSE-SU-2025:0101-1 Security update for the Linux Kernel (Live Patch 42 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-15030059153 fixes several issues. The following security issues were fixed: - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk-trans bsc1233712. - CVE-2022-48956: ipv6: avoid use-after-free in ip6fragment bsc1232637. -...

SUSE SLES15 Security Update : kernel (Live Patch 49 for SLE 15 SP2) (SUSE-SU-2024:4231-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:4231-1 advisory. This update for the Linux Kernel 5.3.18-15020024194 fixes several issues. The following security issues were fixed: - CVE-2024-36904: tcp: Use...

SUSE-SU-2024:4234-1 Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024108 fixes several issues. The following security issues were fixed: - CVE-2024-36904: tcp: Use refcountincnotzero in tcptwskunique bsc1225733. - CVE-2024-43861: Fix memory leak for not ip packets bsc1229553. - CVE-2021-47598: schcake: do not call...

EulerOS Virtualization 2.12.1 : kernel (EulerOS-SA-2024-2763)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : bpf, skmsg: Fix NULL pointer dereference in skpsockskbingressenqueueCVE-2024-36938 bpf, sockmap: Prevent lock inversion deadlock in...

CLSA-2024-1721659604 Fix of 96 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-35902 - net/rds: fix possible cp null dereference CVE-url: https://ubuntu.com/security/CVE-2024-38587 - speakup: Fix sizeof vs ARRAYSIZE bug CVE-url: https://ubuntu.com/security/CVE-2024-39493 - crypto: qat - Fix ADFDEVRESETSYNC memory leak CVE-url:...

SUSE-SU-2024:0538-1 Security update for hdf5

This update for hdf5 fixes the following issues: Updated to version 1.10.11 Changed the error handling for a not found path in the find plugin process. Fixed CVE-2018-11202, a malformed file could result in chunk index memory leaks. Fixed a file space allocation bug in the parallel library for...

OPENSUSE-SU-2021:0016-1 Security update for privoxy

This update for privoxy fixes the following issues: privoxy was updated to 3.0.29: Fixed memory leaks when a response is buffered and the buffer limit is reached or Privoxy is running out of memory. OVE-20201118-0001 Fixed a memory leak in the show-status CGI handler when no action files are...

OPENSUSE-SU-2021:0006-1 Security update for privoxy

This update for privoxy fixes the following issues: privoxy was updated to 3.0.29: Fixed memory leaks when a response is buffered and the buffer limit is reached or Privoxy is running out of memory. OVE-20201118-0001 Fixed a memory leak in the show-status CGI handler when no action files are...

OPENSUSE-SU-2020:2129-1 Security update for libssh2_org

This update for libssh2org fixes the following issues: - Version update to 1.9.0: bsc1178083, jscSLE-16922 Enhancements and bugfixes: adds ECDSA keys and host key support when using OpenSSL adds ED25519 key and host key support when using OpenSSL 1.1.1 adds OpenSSH style key file reading adds AES...

SUSE-SU-2020:3551-1 Security update for libssh2_org

This update for libssh2org fixes the following issues: - Version update to 1.9.0: bsc1178083, jscSLE-16922 Enhancements and bugfixes: adds ECDSA keys and host key support when using OpenSSL adds ED25519 key and host key support when using OpenSSL 1.1.1 adds OpenSSH style key file reading adds AES...

SUSE-SU-2020:3532-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 LTSS kernel was updated to receive various security and bug fixes. The following security bugs were fixed: - CVE-2020-25705: A flaw in the way reply ICMP packets are limited in was found that allowed to quickly scan open UDP ports. This flaw allowed an off-path remote...

OPENSUSE-SU-2020:1523-1 Security update for jasper

This update for jasper fixes the following issues: - CVE-2016-9398: Improved patch for already fixed issue bsc1010979. - CVE-2016-9399: Fix assert in calcstepsizes bsc1010980. - CVE-2017-5499: Validate component depth bit bsc1020451. - CVE-2017-5503: Check bounds in jasseq2dbindsub bsc1020456. -...