PT-2022-24839 · Unknown · Matrix-Android-Sdk2

Name of the Vulnerable Software and Affected Versions: matrix-android-sdk2 versions prior to 1.5.1 Description: An attacker cooperating with a malicious homeserver can construct messages appearing to have come from another person. Such messages will be marked with a grey shield on some platforms,...

DSA-5243-1 lighttpd - security update

Bulletin has no description...

PT-2022-33771 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.63 Description: The issue is related to a potential security vulnerability in the Linux Kernel, where a semaphore is not properly released. This problem was introduced in version v5.8 and is fixed in versi...

SUSE: Security Advisory (SUSE-SU-2022:3244-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2022:3225-1 Security update for mariadb

This update for mariadb fixes the following issues: Update to 10.4.26: - CVE-2022-32089 bsc1201169 - CVE-2022-32081 bsc1201161 - CVE-2022-32091 bsc1201170 - CVE-2022-32084 bsc1201164 - CVE-2018-25032 bsc1197459 - CVE-2022-32088 bsc1201168 - CVE-2022-32087 bsc1201167 - CVE-2022-32086 bsc1201166 -...

MGASA-2022-0308 Updated kernel-linus packages fix security vulnerabilities

This kernel update is based on upstream 5.15.62 and fixes at least the following security issues: A use-after-free flaw was found in the Linux kernel Atheros wireless adapter driver in the way a user forces the ath9khtcwaitfortarget function to fail with some input messages. This flaw allows a...

rsync security update

3.1.3-14.3 - Resolves: 2111174 - remote arbitrary files write inside the directories of connecting peers...

DSA-5216-1 libxslt - security update

Bulletin has no description...

SUSE-SU-2022:2745-1 Security update for the Linux Kernel (Live Patch 27 for SLE 12 SP5)

This update for the Linux Kernel 4.12.14-122106 fixes several issues. The following security issues were fixed: - CVE-2022-28389: Fixed a double free in drivers/net/can/usb/mcbausb.c vulnerability in the Linux kernel. bnc1198033 - CVE-2022-26490: Fixed a buffer overflow in the st21nfca driver. An...

SUSE-SU-2022:2717-2 Security update for ncurses

This update for ncurses fixes the following issues: - CVE-2022-29458: Fixed segfaulting out-of-bounds read in convertstrings in tinfo/readentry.c bsc1198627...

SUSE-SU-2022:2699-1 Security update for the Linux Kernel (Live Patch 25 for SLE 12 SP4)

This update for the Linux Kernel 4.12.14-9593 fixes several issues. The following security issues were fixed: - CVE-2022-28389: Fixed a double free in drivers/net/can/usb/mcbausb.c vulnerability in the Linux kernel. bnc1198033 - CVE-2022-26490: Fixed a buffer overflow in the st21nfca driver. An...

DSA-5199-1 xorg-server - security update

Bulletin has no description...

MGASA-2022-0272 Updated webmin packages fix security vulnerability

The webmin package has been updated to version 1.998, fixing XSS issues in the HTTP Tunnel and Read Mail modules, along with several other bugs...

SUSE-SU-2022:2549-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-29900, CVE-2022-29901: Fixed the RETBLEED attack, a new Spectre like Branch Target Buffer attack, that can leak arbitrary kernel information bsc1199657....

DSA-5192-1 openjdk-17 - security update

Bulletin has no description...

SUSE-SU-2022:2515-1 Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-1503005971 fixes several issues. The following security issues were fixed: - CVE-2022-20154: Fixed a use after free due to a race condition in locksocknested of sock.c. This could lead to local escalation of privilege with System execution privileges needed...

MGASA-2022-0252 Updated ruby-rack packages fix security vulnerability

Crafted multipart POST request may cause a DoS CVE-2022-30122 Crafted requests can cause shell escape sequences CVE-2022-30123...

SUSE-SU-2022:2251-2 Security update for openssl-1_1

This update for openssl-11 fixes the following issues: - CVE-2022-1292: Fixed command injection in crehash bsc1199166. - CVE-2022-2068: Fixed more shell code injection issues in crehash. bsc1200550...

DSA-5169-1 openssl - security update

Bulletin has no description...

MGASA-2022-0230 Updated kernel-linus packages fix security vulnerabilities

This kernel-linus update is based on upstream 5.15.46 and fixes at least the following security issues: KVM: x86/mmu: fix NULL pointer dereference on guest INVPCID CVE-2022-1789. KVM: x86: avoid calling x86 emulator without a decoded instruction CVE-2022-1852. A use-after-free vulnerability was...