1090 matches found
PT-2023-33247 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.82 Description: The issue concerns a potential security vulnerability in the Linux Kernel. It involves a null check before removing sysfs attributes, specifically related to the coretemp component of the...
PT-2023-33324 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.158 Description: The issue is related to a potential security vulnerability in the Linux Kernel. It involves re-fetching the skb cb after tipc msg validate. The actual impact and attack plausibility have n...
DLA-3271-1 node-minimatch - security update
Bulletin has no description...
SUSE-SU-2023:0074-1 Security update for php8
This update for php8 fixes the following issues: - Updated to version 8.0.27: - CVE-2022-31631: Fixed an issue where PDO::quote would return an unquoted string bsc1206958. Non-security fixes: - Fixed a NULL pointer dereference with -w/-s options. - Fixed a crash in Generator when interrupted duri...
DLA-3256-1 xorg-server - security update
Bulletin has no description...
PT-2022-25984 · WordPress · Contest Gallery Pro +1
Name of the Vulnerable Software and Affected Versions: Contest Gallery WordPress plugin versions prior to 19.1.5.1 Contest Gallery Pro WordPress plugin versions prior to 19.1.5.1 Description: The issue allows malicious users with at least author privilege to leak sensitive information from the...
DLA-3248-1 libksba - security update
Bulletin has no description...
MGASA-2022-0466 Updated couchdb packages fix security vulnerability
In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. The CouchDB documentation has always made recommendations for properly securing an installation, including recommending using a firewall in front o...
PT-2022-36425 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.225 Description: A potential security issue exists due to an incorrect check of the msg-req TLV length in the tipc nl compat name table dump header function. The actual impact and attack plausibility have n...
DLA-3209-1 ini4j - security update
Bulletin has no description...
SUSE-SU-2022:4205-1 Security update for net-snmp
This update for net-snmp fixes the following issues: Updated to version 5.9.3 bsc1201103, jscSLE-11203: - CVE-2022-24805: Fixed a buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB that can cause an out-of-bounds memory access. - CVE-2022-24809: Fixed a malformed OID in a GET-NEXT ...
DLA-3200-1 graphicsmagick - security update
Bulletin has no description...
SUSE-SU-2022:4072-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-28748: Fixed a leak of kernel memory over the network by ax88179178a devices bsc1196018. - CVE-2022-1882: Fixed a use-after-free flaw in freepipeinfo th...
DLA-3199-1 firefox-esr - security update
Bulletin has no description...
ALSA-2022:7979 Low: speex security update
Speex is a patent-free compression format designed especially for speech. It is specialized for voice communications at low bit-rates. Security Fixes: speex: divide by zero in readsamples via crafted WAV file CVE-2020-23903 For more details about the security issues, including the impact, a CVSS...
SUSE-SU-2022:3967-1 Security update for nodejs16
This update for nodejs16 fixes the following issues: - Update to LTS versino 16.18.1. - CVE-2022-43548: Fixed DNS rebinding in --inspect via invalid octal IP address bsc1205119. - Update to LTS version 16.18.0: http: throw error on content-length mismatch stream: add ReadableByteStream.tee deps:...
DLA-3185-1 xorg-server - security update
Bulletin has no description...
DLA-3179-1 pixman - security update
Bulletin has no description...
OPENSUSE-SU-2022:10177-1 Security update for chromium
This update for chromium fixes the following issues: Chromium 107.0.5304.87 boo1204819 CVE-2022-3723: Type Confusion in V8 Chromium 107.0.5304.68 boo1204732 CVE-2022-3652: Type Confusion in V8 CVE-2022-3653: Heap buffer overflow in Vulkan CVE-2022-3654: Use after free in Layout CVE-2022-3655: Hea...