SUSE-SU-2024:4006-1 Security update for SUSE Manager Server 4.3

This update fixes the following issues: cobbler: - Security issues fixed: CVE-2024-47533: Prevent privilege escalation from none to admin bsc1231332 - Other bugs fixed: Increase start timeout for cobblerd unit bsc1219450 Provide syncsinglesystem for DHCP modules to improve performance bsc1219450...

GHSA-3JRV-JGP8-45V3 Undertow incorrectly parses cookies

A flaw was found in Undertow, which incorrectly parses cookies with certain value-delimiting characters in incoming requests. This issue could allow an attacker to construct a cookie value to exfiltrate HttpOnly cookie values or spoof arbitrary additional cookie values, leading to unauthorized da...

OESA-2024-2407 hdf5 security update

HDF5 is a data model, library, and file format for storing and managing data. It supports an unlimited variety of datatypes, and is designed for flexible and efficient I/O and for high volume and complex data. HDF5 is portable and is extensible, allowing applications to evolve in their use of HDF...

OESA-2024-2409 hdf5 security update

HDF5 is a data model, library, and file format for storing and managing data. It supports an unlimited variety of datatypes, and is designed for flexible and efficient I/O and for high volume and complex data. HDF5 is portable and is extensible, allowing applications to evolve in their use of HDF...

PT-2024-40630 · Git +1 · Libjpeg-Turbo

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of "Use-of-uninitialized-value" as reported by OSS-Fuzz. The crash occurs in the decompress yuv.cc file. No...

Apache Traffic Server elevation of privilege vulnerability (CNVD-2024-49157)

Apache Traffic Server is a high-performance caching proxy server for accelerating Web applications and content delivery networks. An elevation of privilege vulnerability exists in Apache Traffic Server because an unchecked return value could cause Apache Traffic Server to retain privileges at...

CVE-2024-50306

Unchecked return value can allow Apache Traffic Server to retain privileges on startup. This issue affects Apache Traffic Server: from 9.2.0 through 9.2.5, from 10.0.0 through 10.0.1. Users are recommended to upgrade to version 9.2.6 or 10.0.2, which fixes the issue...

UBUNTU-CVE-2024-50306

Unchecked return value can allow Apache Traffic Server to retain privileges on startup. This issue affects Apache Traffic Server: from 9.2.0 through 9.2.5, from 10.0.0 through 10.0.1. Users are recommended to upgrade to version 9.2.6 or 10.0.2, which fixes the issue...

CVE-2024-50306

Unchecked return value can allow Apache Traffic Server to retain privileges on startup. This issue affects Apache Traffic Server: from 9.2.0 through 9.2.5, from 10.0.0 through 10.0.1. Users are recommended to upgrade to version 9.2.6 or 10.0.2, which fixes the issue...

Apache Traffic Server（ATS） 安全漏洞

Apache Traffic Server is a high-performance caching proxy server for accelerating Web applications and content delivery networks. An elevation of privilege vulnerability exists in Apache Traffic Server because an unchecked return value could cause Apache Traffic Server to retain privileges at...

CLSA-2024-1731523487 Fix of 5 CVEs

SECURITY UPDATE: Improper type casting in calculation in palm.c could lead to undefined behavior in processing input file - debian/patches/CVE-2020-27761.patch: fix color calculation issue that caused incorrect output when writing PALM images - CVE-2020-27761 SECURITY UPDATE: Negative Quantum val...

CVE-2024-51565

The hda driver is vulnerable to a buffer over-read from a guest-controlled value...

CVE-2024-51562

The NVMe driver function nvmeopcgetlogpage is vulnerable to a buffer over-read from a guest-controlled value...

CVE-2024-51562

Summary (CVE-2024-51562): The bhyve hypervisor/FreeBSD NVMe path is affected by a buffer over-read in the NVMe driver function nvme_opc_get_log_page, triggered by a guest-controlled value. This can enable a DoS against the bhyve host and potential memory access of bhyve-process memory by a malici...

kernel: hsr: Fix uninit-value access in hsr_get_node()

In the Linux kernel, the following vulnerability has been resolved: hsr: Fix uninit-value access in hsrgetnode KMSAN reported the following uninit-value access issue 1: ===================================================== BUG: KMSAN: uninit-value in hsrgetnode+0xa2e/0xa40 net/hsr/hsrframereg.c:2...

kernel: ipv4: Fix uninit-value access in __ip_make_skb()

In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix uninit-value access in ipmakeskb KMSAN reported uninit-value access in ipmakeskb 1. ipmakeskb tests HDRINCL to know if the skb has icmphdr. However, HDRINCL can cause a race condition. If calling setsockopt2 with...

kernel: block: refine the EOF check in blkdev_iomap_begin

In the Linux kernel, the following vulnerability has been resolved: block: refine the EOF check in blkdeviomapbegin blkdeviomapbegin rounds down the offset to the logical block size before stashing it in iomap-offset and checking that it still is inside the inode size. Check the isize check to th...

kernel: mmc: atmel-mci: fix return value check of mmc_add_host()

In the Linux kernel, the following vulnerability has been resolved: mmc: atmel-mci: fix return value check of mmcaddhost mmcaddhost may return error, if we ignore its return value, it will lead two issues: 1. The memory that allocated in mmcallochost is leaked. 2. In the remove path, mmcremovehos...

kernel: mmc: alcor: fix return value check of mmc_add_host()

A flaw was found in the Linux kernel's Alcor Micro MMC card reader driver. When mmcaddhost fails, its return value is not checked, causing memory allocated by mmcallochost to leak. Additionally, the remove path may attempt to delete a device that was never added, leading to a kernel crash...

kernel: mmc: omap_hsmmc: fix return value check of mmc_add_host()

A flaw was found in the OMAP HSMMC driver in the Linux kernel. The driver does not check the return value of mmcaddhost, which can lead to a memory leak from mmcallochost and a null pointer dereference crash in mmcremovehost when attempting to remove a device that was never successfully added...