232 matches found
SUSE: Security Advisory (SUSE-SU-2022:3687-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE-SU-2022:3616-1 Security update for nodejs12
This update for nodejs12 fixes the following issues: - CVE-2022-35256: Fixed incorrect parsing of header fields bsc1203832. - CVE-2022-32213: Fixed bypass via obs-fold mechanic bsc1201325...
OPENSUSE-SU-2022:10128-1 Security update for permissions
This update for permissions fixes the following issues: Update to version 20200127: chkstat: also consider group controlled paths boo1203018, CVE-2022-31252...
SUSE-SU-2022:2707-1 Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: Update to upstream tag jdk-11.0.16+8 July 2022 CPU - CVE-2022-21540: Improve class compilation bsc1201694 - CVE-2022-21541: Enhance MethodHandle invocations bsc1201692 - CVE-2022-34169: Improve Xalan supports bsc1201684...
Security update for python-numpy (important)
openSUSE Security Update: Security update for python-numpy Announcement ID: openSUSE-SU-2022:0134-1 Rating: important References: 1190345 1193907 1193913 Cross-References: CVE-2021-21897 CVE-2021-33430 CVE-2021-41496 CVSS scores: CVE-2021-21897 NVD : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A...
Security Bulletin: Rational Asset Analyzer is affected by two WebSphere Application Server vulnerabilities (CVE-2018-25031, CVE-2021-46708)
Summary There are multiple vulnerabilities in the swagger-ui library used by IBM WebSphere Application Server Liberty. These vulnerabilities could allow spoofing attacks or clickjacking vulnerabilities. This has been addressed. Vulnerability Details CVEID:CVE-2018-25031 DESCRIPTION: swagger-ui...
Updated php-smarty packages fix security vulnerability
Updated php-smarty packages to version 4 for php 8 compatibility and to fix security vulnerabilities...
Security update for java-1_8_0-ibm (important)
openSUSE Security Update: Security update for java-180-ibm Announcement ID: openSUSE-SU-2022:1027-1 Rating: important References: 1194925 1194926 1194927 1194928 1194929 1194930 1194931 1194932 1194933 1194934 1194935 1194937 1194939 1194940 1194941 1195146 1196500 1197126 Cross-References:...
Security update for libqt5-qtbase (important)
openSUSE Security Update: Security update for libqt5-qtbase Announcement ID: openSUSE-SU-2022:0841-1 Rating: important References: 1195386 1196501 Cross-References: CVE-2022-23853 CVE-2022-25255 CVSS scores: CVE-2022-23853 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-23853 SUSE...
MGASA-2022-0099 Updated chromium-browser-stable packages fix security vulnerability
The chromium-browser-stable package has been updated to the 99.0.4844.51 version that fixes multiples security vulnerabilities...
SUSE-SU-2022:14906-1 Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.7.0 ESR bsc1196900: - CVE-2022-26383: Browser window spoof using fullscreen mode - CVE-2022-26384: iframe allow-scripts sandbox bypass - CVE-2022-26387: Time-of-check time-of-use bug when verifying add-...
Security update for buildah (moderate)
openSUSE Security Update: Security update for buildah Announcement ID: openSUSE-SU-2022:0770-1 Rating: moderate References: 1187812 1192999 SLE-23503 Cross-References: CVE-2019-10214 CVE-2020-10696 CVE-2021-20206 CVSS scores: CVE-2019-10214 NVD : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N...
Security update for opera (important)
openSUSE Security Update: Security update for opera Announcement ID: openSUSE-SU-2022:0047-1 Rating: important References: Cross-References: CVE-2021-37980 CVE-2021-37997 CVE-2021-37998 CVE-2021-37999 CVE-2021-38001 CVE-2021-38002 CVE-2021-38003 CVE-2021-38004 CVE-2021-38005 CVE-2021-38006...
SUSE-SU-2022:0283-1 Security update for samba
CVE-2021-44141: Information leak via symlinks of existance of files or directories outside of the exported share; bso14911; bsc1193690; - CVE-2021-44142: Out-of-bounds heap read/write vulnerability in VFS module vfsfruit allows code execution; bso14914; bsc1194859; - CVE-2022-0336: Samba AD users...
SUSE-SU-2022:0310-1 Security Beta update for SUSE Manager Client Tools
This update fixes the following issues: grafana: - Update to version 7.5.12: Fix markdown path traversal 42969, bsc1193688, CVE-2021-43813 - Recreate tarballs using the makefile to update the npm and go modules required - Update to version 7.5.11: Fix Snapshot authentication bypass bsc1191454,...
OPENSUSE-SU-2022:0199-1 Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: - CVE-2021-4140: Fixed Iframe sandbox bypass with XSLT bsc1194547. - CVE-2022-22737: Fixed race condition when playing audio files bsc1194547. - CVE-2022-22738: Fixed heap-buffer-overflow in blendGaussianBlur bsc1194547. -...
Recommended update for php7 (moderate)
openSUSE Security Update: Recommended update for php7 Announcement ID: openSUSE-SU-2021:1570-1 Rating: moderate References: 1175508 1192050 1193041 Cross-References: CVE-2021-21703 CVE-2021-21707 CVSS scores: CVE-2021-21703 NVD : 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2021-21703 SUSE:...
OPENSUSE-SU-2021:3833-1 Security update for go1.17
This update for go1.17 fixes the following issues: Security update go1.17.3 released 2021-11-04 bsc1190649. - CVE-2021-41771: Fixed invalid dynamic symbol table command that could have caused panic bsc1192377. - CVE-2021-41772: Fixed panic on Reader.Open bsc1192378...
SUSE-SU-2021:2824-1 Security update for nodejs12
This update for nodejs12 fixes the following issues: Update to 12.22.5: - CVE-2021-3672/CVE-2021-22931: Improper handling of untypical characters in domain names bsc1189370, bsc1188881 - CVE-2021-22940: Use after free on close http2 on stream canceling bsc1189368 - CVE-2021-22939: Incomplete...