SUSE SLES15 Security Update : kernel RT (Live Patch 1 for SLE 15 SP4) (SUSE-SU-2023:1576-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:1576-1 advisory. This update for the Linux Kernel 5.14.21-150400155 fixes several issues. The following security issues were fixed: - CVE-2023-26545: Fixed doub...

CBL Mariner 2.0 Security Update: kernel (CVE-2022-1205)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-1205 advisory. - A NULL pointer dereference flaw was found in the Linux kernel's Amateur Radio AX.25 protocol functionality in...

CBL Mariner 2.0 Security Update: dnsmasq (CVE-2022-0934)

The version of dnsmasq installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-0934 advisory. - A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker wh...

CBL Mariner 2.0 Security Update: libtiff (CVE-2022-2953)

The version of libtiff installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-2953 advisory. - LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905, allowing attackers ...

CBL Mariner 2.0 Security Update: python-jwt (CVE-2022-39227)

The version of python-jwt installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-39227 advisory. - python-jwt is a module for generating and verifying JSON Web Tokens. Versions prior to 3.3.4 are subject...

CBL Mariner 2.0 Security Update: fribidi (CVE-2022-25308)

The version of fribidi installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-25308 advisory. - A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a...

CBL Mariner 2.0 Security Update: vim (CVE-2022-1619)

The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-1619 advisory. - Heap-based Buffer Overflow in function cmdlineerasechars in GitHub repository vim/vim prior to 8.2.4899. This...

CBL Mariner 2.0 Security Update: bind (CVE-2022-38177)

The version of bind installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-38177 advisory. - By spoofing the target resolver with responses that have a malformed ECDSA signature, an attacker can trigger ...

CBL Mariner 2.0 Security Update: fribidi (CVE-2022-25309)

The version of fribidi installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-25309 advisory. - A heap-based buffer overflow flaw was found in the Fribidi package and affects the fribidicaprtltounicode...

CBL Mariner 2.0 Security Update: libxslt / libxml2 (CVE-2022-29824)

The version of libxslt / libxml2 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-29824 advisory. - In libxml2 before 2.9.14, several buffer handling functions in buf.c xmlBuf and tree.c xmlBuffer...

CBL Mariner 2.0 Security Update: kernel (CVE-2022-41218)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-41218 advisory. - In drivers/media/dvb-core/dmxdev.c in the Linux kernel through 5.19.10, there is a use-after-free caused by...

CBL Mariner 2.0 Security Update: mysql (CVE-2022-21478)

The version of mysql installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-21478 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions th...

CBL Mariner 2.0 Security Update: vim (CVE-2022-1616)

The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-1616 advisory. - Use after free in appendcommand in GitHub repository vim/vim prior to 8.2.4895. This vulnerability is capable of...

CBL Mariner 2.0 Security Update: vim (CVE-2022-1629)

The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-1629 advisory. - Buffer Over-read in function findnextquote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities...

CBL Mariner 2.0 Security Update: kernel (CVE-2022-0168)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-0168 advisory. - A denial of service DOS issue was found in the Linux kernel's smb2ioctlqueryinfo function in the...

CBL Mariner 2.0 Security Update: bind (CVE-2022-38178)

The version of bind installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-38178 advisory. - By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger ...

CBL Mariner 2.0 Security Update: postgresql (CVE-2022-1552)

The version of postgresql installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-1552 advisory. - A flaw was found in PostgreSQL. There is an issue with incomplete efforts to operate safely when a...

CBL Mariner 2.0 Security Update: hyperv-daemons (CVE-2022-3707)

The version of hyperv-daemons installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-3707 advisory. - A double-free memory flaw was found in the Linux kernel. The Intel GVT-g graphics driver triggers VGA...

CBL Mariner 2.0 Security Update: openldap (CVE-2022-29155)

The version of openldap installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-29155 advisory. - In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the...

CBL Mariner 2.0 Security Update: kernel (CVE-2022-39189)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-39189 advisory. - An issue was discovered the x86 KVM subsystem in the Linux kernel before 5.18.17. Unprivileged guest users c...