SUSE-SU-2022:14891-1 Security update for cobbler

This update for cobbler fixes the following issues: - CVE-2021-45083: Fixed unsafe permissions on sensitive files bsc1193671. The following non-security bugs were fixed: - Move configuration files ownership to apache bsc1195906...

SUSE-SU-2022:0359-1 Security update for xen

This update for xen fixes the following issues: - CVE-2022-23034: Fixed possible DoS by a PV guest Xen while unmapping a grant. XSA-394 bsc1194581 - CVE-2022-23035: Fixed insufficient cleanup of passed-through device IRQs. XSA-395 bsc1194588...

PUB-A-195752651

Bulletin has no description...

CVE-2022-21253 vulnerabilities

Vulnerabilities for packages: mysql...

OPENSUSE-SU-2021:4001-1 Security update for python-pip

This update for python-pip fixes the following issues: - CVE-2021-3572: Fixed incorrect handling of unicode separators in git references bsc1186819...

SUSE-SU-2021:3949-1 Security update for clamav

This update for clamav fixes the following issues: - Update to 0.103.4 bsc1192346. - Update to 0.103.3 bsc1188284...

ASB-A-190404445

Bulletin has no description...

OPENSUSE-SU-2021:3202-1 Security update for linuxptp

This update for linuxptp fixes the following issues: - CVE-2021-3570: Fixed messageLength validation field of incoming messages bsc1187646...

ASB-A-190403706

Bulletin has no description...

Gateway session time out not working as expected

Gateway time session out configured in the session profile doesn't work as expected...

GSD-2021-1000740 ext4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed

ext4: fix bug on in ext4escacheextent as ext4splitextentat failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.194 by commit...

SUSE-SU-2021:1651-1 Security update for graphviz

This update for graphviz fixes the following issues: - CVE-2020-18032: Fixed possible remote code execution via buffer overflow bsc1185833...

SUSE-SU-2021:1561-1 Security update for drbd-utils

This update for drbd-utils fixes the following issues: - make all binaries in position independent bsc1185132...

SUSE-SU-2021:1497-1 Security update for sca-patterns-sle11

This update for sca-patterns-sle11 fixes the following issues: - New regular patterns 1 for version 1.3.1 Special Register Buffer Data Sampling aka CrossTalk CVE-2020-0543 bsc1154824...

SUSE-SU-2021:0624-1 Security update for py26-compat-salt

This update for py26-compat-salt fixes the following issues: - Allow extrafilerefs as sanitized kwargs for SSH client - Fix for multiple for security issues CVE-2020-28243 CVE-2020-28972 CVE-2020-35662 CVE-2021-3148 CVE-2021-3144 CVE-2021-25281 CVE-2021-25282 CVE-2021-25283 CVE-2021-25284...

SUSE-SU-2021:0284-1 Security update for openvswitch

This update for openvswitch fixes the following issues: - openvswitch was updated to 2.7.12 - CVE-2020-27827: Fixed a memory leak when parsing lldp packets bsc1181345 A lot more minor bugs have been fixed with this openvswitch version. Please refer to the changelog of the openvswitch.rpm file in...

SUSE-SU-2020:3628-1 Security update for fontforge

This update for fontforge fixes the following issues: - fix for Use-after-free heap in the SFDGetFontMetaData function and the crash bsc1178308 CVE-2020-25690...

SUSE-SU-2020:3256-1 Security update for u-boot

This update for u-boot fixes the following issues: Fix CVE-2019-13106 bsc1144656, CVE-2019-13104 bsc1144675, CVE-2019-14192 bsc1143777, CVE-2019-14193 bsc1143817, CVE-2019-14199 bsc1143824, CVE-2019-14197 bsc1143821, CVE-2019-14200 bsc1143825, CVE-2019-14201 bsc1143827, CVE-2019-14202 bsc1143828,...

CVE-2020-25576

An issue was discovered in the randcore crate before 0.4.2 for Rust. Casting of byte slices to integer slices mishandles alignment constraints...

OPENSUSE-SU-2020:1359-1 Security update for curl

This update for curl fixes the following issues: - An application that performs multiple requests with libcurl's multi API and sets the 'CURLOPTCONNECTONLY' option, might in rare circumstances experience that when subsequently using the setup connect-only transfer, libcurl will pick and use the...