CVE-2024-50188

In the Linux kernel, the following vulnerability has been resolved: net: phy: dp83869: fix memory corruption when enabling fiber When configuring the fiber port, the DP83869 PHY driver incorrectly calls linkmodesetbit with a bit mask 1 10 rather than a bit number 10. This corrupts some other memo...

CVE-2024-50176

In the Linux kernel, the following vulnerability has been resolved: remoteproc: k3-r5: Fix error handling when power-up failed By simply bailing out, the driver was violating its rule and internal assumptions that either both or no rproc should be initialized. E.g., this could cause the first cor...

AZL-53799 CVE-2024-50179 affecting package kernel for versions less than 5.15.173.1-1

In the Linux kernel, the following vulnerability has been resolved: ceph: remove the incorrect Fw reference check when dirtying pages When doing the direct-io reads it will also try to mark pages dirty, but for the read path it won't hold the Fw caps and there is case will it get the Fw reference...

CVE-2024-50209 RDMA/bnxt_re: Add a check for memory allocation

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: Add a check for memory allocation allocpbl can return error when memory allocation fails. Driver is not checking the status on one of the instances...

CVE-2024-50184 virtio_pmem: Check device status before requesting flush

In the Linux kernel, the following vulnerability has been resolved: virtiopmem: Check device status before requesting flush If a pmem device is in a bad status, the driver side could wait for host ack forever in virtiopmemflush, causing the system to hang. So add a status check in the beginning o...

Security update for qbittorrent (moderate)

openSUSE Security Update: Security update for qbittorrent Announcement ID: openSUSE-SU-2024:0358-1 Rating: moderate References: 1232731 Cross-References: CVE-2024-51774 Affected Products: openSUSE Backports SLE-15-SP6 An update that fixes one vulnerability is now available. Description: This upda...

ruby3.3-rubygem-actiontext-7.0-7.0.8.6-1.1 on GA media (moderate)

ruby3.3-rubygem-actiontext-7.0-7.0.8.6-1.1 on GA media Announcement ID: openSUSE-SU-2024:14473-1 Rating: moderate Cross-References: CVE-2024-47888 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed ...

SUSE SLES15: libpython3_9-1_0 / libpython3_9-1_0-32bit / python39 / etc (SUSE-SU-2024:3945-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3945-1 advisory. - CVE-2024-9287: Fixed quoted path names provided when creating a virtual environment bsc1232241. Bug fixes: - Drop .pyc files...

SUSE SLES12: libpython3_4m1_0 / libpython3_4m1_0-32bit / python3 / python3-base / etc (SUSE-SU-2024:3944-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2024:3944-1 advisory. - CVE-2024-9287: Fixed quoted path names provided when creating a virtual environment bsc1232241. Bug fixes: - Drop .pyc files from docdir for...

CVE-2024-50165

In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve param-string when parsing mount options In bpfparseparam, keep the value of param-string intact so it can be freed later. Otherwise, the kmalloc area pointed to by param-string will be leaked as shown below:...

CVE-2024-50151

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOBs when building SMB2IOCTL request When using encryption, either enforced by the server or when using 'seal' mount option, the client will squash all compound request buffers down for encryption into a single i...

AZL-53316 CVE-2024-50148 affecting package kernel for versions less than 6.6.64.2-1

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: fix wild-memory-access in protounregister There's issue as follows: KASAN: maybe wild-memory-access in range 0xdead...108-0xdead...10f CPU: 3 UID: 0 PID: 2805 Comm: rmmod Tainted: G W RIP:...

CVE-2024-50150 usb: typec: altmode should keep reference to parent

In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmode should keep reference to parent The altmode device release refers to its parent device, but without keeping a reference to it. When registering the altmode, get a reference to the parent and put it in the...

xwayland-24.1.4-1.1 on GA media (moderate)

xwayland-24.1.4-1.1 on GA media Announcement ID: openSUSE-SU-2024:14467-1 Rating: moderate Cross-References: CVE-2024-9632 CVSS scores: CVE-2024-9632 SUSE : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2024-9632 SUSE : 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N...

SUSE CVE-2024-50091

In the Linux kernel, the following vulnerability has been resolved: dm vdo: don't refer to dedupecontext after releasing it Clear the dedupecontext pointer in a datavio whenever ownership of the context is lost, so that vdo can't examine it accidentally...

Security update for python-mysql-connector-python (important)

openSUSE Security Update: Security update for python-mysql-connector-python Announcement ID: openSUSE-SU-2024:0351-1 Rating: important References: 1231740 Cross-References: CVE-2024-21272 Affected Products: openSUSE Backports SLE-15-SP5 An update that fixes one vulnerability is now available...

Oracle Linux 8 : python3.12-urllib3 (ELSA-2024-8842)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-8842 advisory. 1.26.19-1 - Rebase to 1.26.19 to fix CVE-2024-37891 Resolves: RHEL-59989 Tenable has extracted the preceding description block directly from the Oracle Linux...

Security update for kmail-account-wizard (moderate)

openSUSE Security Update: Security update for kmail-account-wizard Announcement ID: openSUSE-SU-2024:0353-1 Rating: moderate References: 1232454 Cross-References: CVE-2024-50624 Affected Products: openSUSE Backports SLE-15-SP5 openSUSE Backports SLE-15-SP6 An update that fixes one vulnerability i...

CVE-2024-50126

In the Linux kernel, the following vulnerability has been resolved: net: sched: use RCU read-side critical section in tapriodump Fix possible use-after-free in 'tapriodump' by adding RCU read-side critical section there. Never seen on x86 but found on a KASAN-enabled arm64 system when investigati...

CVE-2024-50107

In the Linux kernel, the following vulnerability has been resolved: platform/x86/intel/pmc: Fix pmccoreiounmap to call iounmap for valid addresses Commit 50c6dbdfd16e "x86/ioremap: Improve iounmap address range checks" introduces a WARN when adrress ranges of iounmap are invalid. On Thinkpad P1 G...