SUSE-SU-2025:20373-1 Security update for elemental-toolkit

This update for elemental-toolkit fixes the following issues: - Updated to v2.2.3: Adapted .golangci.yml format to a new version Simplified podman calls in CI steup Switched GHA runners to Ubuntu 24.04 Updated year in headers Vendored go.mod libraries CVE-2025-22870: golang.org/x/net/proxy: Fixed...

CLSA-2025-1746188134 buildah: Fix of CVE-2024-9341

CVE-2024-9341: fix insecure handling of file paths inside vendored c/common...

container-tools:ol8 security update

aardvark-dns buildah cockpit-podman conmon containernetworking-plugins containers-common 1-82.0.1 - Updated removed references Orabug: 33473101 Alex Burmashev - Adjust registries.conf Nikita Gerasimov - remove references to RedHat registry Nikita Gerasimov 2:1-82 - update vendored components -...

CVE-2025-22868

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

SUSE-SU-2025:20071-1 Security update for sevctl

This update for sevctl fixes the following issues: Security issue fixed: - CVE-2023-50711: Fixed out of bounds memory accesses in a vendored dependency bsc1218502 Non-security issue fixed: - Update vendored dependencies and re-enable cargo update obs service bsc1229953...

Security update for sevctl

This update for sevctl fixes the following issues: Security issue fixed: CVE-2023-50711: Fixed out of bounds memory accesses in a vendored dependency bsc1218502 Non-security issue fixed: Update vendored dependencies and re-enable cargo update obs service bsc1229953 Patch Instructions: To install...

USN-7197-1 golang-golang-x-net vulnerability

Guido Vranken discovered that Go Networking handled input to the Parse functions inefficiently. An attacker could possibly use this issue to cause denial of service. This update addresses the issue in the golang-golang-x-net and golang-golang-x-net-dev packages, as well as the library vendored...

CVE-2024-45338

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...

SUSE-SU-2024:3997-1 Security update for python3-wxPython

This update for python3-wxPython fixes the following issues: - CVE-2024-50602: Fixed a denial of service in the vendored libexpat's XMLResumeParser function bsc1232590...

Malicious code in vendored-a (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-3817 Malicious code in vendored-a (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2023-43789

A vulnerability was found in libXpm where a vulnerability exists due to a boundary condition, a local user can trigger an out-of-bounds read error and read contents of memory on the system...

CVE-2021-45985

In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read...

CVE-2022-41721

A request smuggling attack is possible when using MaxBytesHandler. When using MaxBytesHandler, the body of an HTTP request is not fully consumed. When the server attempts to read HTTP2 frames from the connection, it will instead be reading the body of the HTTP request, which could be...

Updated clamav packages fix security vulnerability

ClamAV 0.103.7 is a critical patch release with the following fixes: Upgrade the vendored UnRAR library to version 6.1.7. Fix logical signature "Intermediates" feature. Relax constraints on slightly malformed zip archives that contain overlapping file entries...

[SECURITY] Fedora 35 Update: glide-0.13.2-10.fc35

Glide is a tool for managing the vendor directory within a Go package. This feature, first introduced in Go 1.5, allows each package to have a vendor directory containing dependent packages for the project. These vendor packages can be installed by a tool e.g. glide, similar to go get or they can...

CVE-2022-29583

servicewindows.go in the kardianos service package for Go omits quoting that is sometimes needed for execution of a Windows service executable from the intended directory. NOTE: this finding could not be reproduced by its original reporter or by others...

PT-2026-81338

🚨 CRITICAL: CVE-2022-51000 CVSS 9.8 Nokogiri 1.13.2 ships vulnerable libxml2/libxslt libs. Risk: DoS, memory disclosure, code execution via untrusted XML/XSL. Patch to 1.13.2+ immediately. CVE PatchNow https://t.co/2xZokMmgp2...

[SECURITY] Fedora 33 Update: containers-common-1-20.fc33

This package contains common configuration files and documentation for contai ner tools ecosystem, such as Podman, Buildah and Skopeo. It is required because the most of configuration files and docs come from pro jects which are vendored into Podman, Buildah, Skopeo, etc. but they are not packag ...

SUSE-FU-2021:2130-1 Feature implementation for python39-pip, python39-setuptools

This update for python39-pip, python39-setuptools fixes the following issues: Changes in python39-setuptools: - Provide python39-setuptools version 44.1.1 with vendored dependencies. jscSLE-17532, jscSLE-17957 Changes in python39-pip: - Provide python39-pip version 20.2.4 with vendored...