Marcus Updateinfo to OVAL Converter5.52023-10-19T04:58:10CVE-2007-4559openSUSE Leap Micro 5.4
Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.
ModerateCVE-2007-4559SUSE bug 1203750SUSE bug 1204077cpe:/o:opensuse:leap-micro:5.4CVE-2017-5753openSUSE Leap Micro 5.4
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
ImportantCVE-2017-5753SUSE bug 1068032SUSE bug 1074562SUSE bug 1074578SUSE bug 1074701SUSE bug 1075006SUSE bug 1075419SUSE bug 1075748SUSE bug 1080039SUSE bug 1087084SUSE bug 1087939SUSE bug 1089055SUSE bug 1136865SUSE bug 1178658SUSE bug 1201877SUSE bug 1209547cpe:/o:opensuse:leap-micro:5.4CVE-2019-14560openSUSE Leap Micro 5.4
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none.
ModerateCVE-2019-14560SUSE bug 1174246cpe:/o:opensuse:leap-micro:5.4CVE-2020-10531openSUSE Leap Micro 5.4
An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp.
ImportantCVE-2020-10531SUSE bug 1166844SUSE bug 1175778cpe:/o:opensuse:leap-micro:5.4CVE-2020-14394openSUSE Leap Micro 5.4
An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block (TRB) Ring. This flaw allows a privileged guest user to hang the QEMU process on the host, resulting in a denial of service.
LowCVE-2020-14394SUSE bug 1180207cpe:/o:opensuse:leap-micro:5.4CVE-2020-21913openSUSE Leap Micro 5.4
International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the file tools/pkgdata/pkgdata.cpp.
ModerateCVE-2020-21913SUSE bug 1193951cpe:/o:opensuse:leap-micro:5.4CVE-2020-22218openSUSE Leap Micro 5.4
An issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to access out of bounds memory.
ImportantCVE-2020-22218SUSE bug 1214527cpe:/o:opensuse:leap-micro:5.4CVE-2021-3507openSUSE Leap Micro 5.4
A heap buffer overflow was found in the floppy disk emulator of QEMU up to 6.0.0 (including). It could occur in fdctrl_transfer_handler() in hw/block/fdc.c while processing DMA read data transfers from the floppy drive to the guest system. A privileged guest user could use this flaw to crash the QEMU process on the host resulting in DoS scenario, or potential information leakage from the host memory.
ModerateCVE-2021-3507SUSE bug 1185000cpe:/o:opensuse:leap-micro:5.4CVE-2021-3638openSUSE Leap Micro 5.4
An out-of-bounds memory access flaw was found in the ATI VGA device emulation of QEMU. This flaw occurs in the ati_2d_blt() routine while handling MMIO write operations when the guest provides invalid values for the destination display parameters. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service.
LowCVE-2021-3638SUSE bug 1188609cpe:/o:opensuse:leap-micro:5.4CVE-2021-3750openSUSE Leap Micro 5.4
A DMA reentrancy issue was found in the USB EHCI controller emulation of QEMU. EHCI does not verify if the Buffer Pointer overlaps with its MMIO region when it transfers the USB packets. Crafted content may be written to the controller's registers and trigger undesirable actions (such as reset) while the device is still transferring packets. This can ultimately lead to a use-after-free issue. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition, or potentially execute arbitrary code within the context of the QEMU process on the host. This flaw affects QEMU versions before 7.0.0.
ImportantCVE-2021-3750SUSE bug 1190011SUSE bug 1190015SUSE bug 1193880cpe:/o:opensuse:leap-micro:5.4CVE-2021-38578openSUSE Leap Micro 5.4
Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.
ImportantCVE-2021-38578SUSE bug 1196741cpe:/o:opensuse:leap-micro:5.4CVE-2021-41229openSUSE Leap Micro 5.4
BlueZ is a Bluetooth protocol stack for Linux. In affected versions a vulnerability exists in sdp_cstate_alloc_buf which allocates memory which will always be hung in the singly linked list of cstates and will not be freed. This will cause a memory leak over time. The data can be a very large object, which can be caused by an attacker continuously sending sdp packets and this may cause the service of the target device to crash.
ModerateCVE-2021-41229SUSE bug 1192760cpe:/o:opensuse:leap-micro:5.4CVE-2022-0670openSUSE Leap Micro 5.4
A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner to read/write any manilla share or entire file system. The vulnerability is due to a bug in the "volumes" plugin in Ceph Manager. This allows an attacker to compromise Confidentiality and Integrity of a file system. Fixed in RHCS 5.2 and Ceph 17.2.2.
ImportantCVE-2022-0670SUSE bug 1201837cpe:/o:opensuse:leap-micro:5.4CVE-2022-2127openSUSE Leap Micro 5.4
An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in winbindd_pam_auth_crap.c. When performing NTLM authentication, the client replies to cryptographic challenges back to the server. These replies have variable lengths, and Winbind fails to check the lan manager response length. When Winbind is used for NTLM authentication, a maliciously crafted request can trigger an out-of-bounds read in Winbind, possibly resulting in a crash.
ModerateCVE-2022-2127SUSE bug 1213174cpe:/o:opensuse:leap-micro:5.4CVE-2022-2196openSUSE Leap Micro 5.4
A regression exists in the Linux Kernel within KVM: nVMX that allowed for speculative execution attacks.?L2 can carry out Spectre v2 attacks on L1 due to L1 thinking it doesn't need retpolines or IBPB?after running L2 due to KVM (L0) advertising eIBRS support to L1. An attacker at L2 with code execution can execute code on an indirect branch on the host machine. We recommend upgrading to Kernel 6.2 or past commit?2e7eab81425a
ModerateCVE-2022-2196SUSE bug 1206992cpe:/o:opensuse:leap-micro:5.4CVE-2022-28737openSUSE Leap Micro 5.4
There's a possible overflow in handle_image() when shim tries to load and execute crafted EFI executables; The handle_image() function takes into account the SizeOfRawData field from each section to be loaded. An attacker can leverage this to perform out-of-bound writes into memory. Arbitrary code execution is not discarded in such scenario.
ImportantCVE-2022-28737SUSE bug 1198458SUSE bug 1205065SUSE bug 1205066SUSE bug 1205831cpe:/o:opensuse:leap-micro:5.4CVE-2022-33972openSUSE Leap Micro 5.4
Incorrect calculation in microcode keying mechanism for some 3rd Generation Intel(R) Xeon(R) Scalable Processors may allow a privileged user to potentially enable information disclosure via local access.
ModerateCVE-2022-33972SUSE bug 1208479cpe:/o:opensuse:leap-micro:5.4CVE-2022-3555openSUSE Leap Micro 5.4
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
ModerateCVE-2022-3555SUSE bug 1204425cpe:/o:opensuse:leap-micro:5.4CVE-2022-36109openSUSE Leap Micro 5.4
Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where supplementary groups are not set up properly. If an attacker has direct access to a container and manipulates their supplementary group access, they may be able to use supplementary group access to bypass primary group restrictions in some cases, potentially gaining access to sensitive information or gaining the ability to execute code in that container. This bug is fixed in Moby (Docker Engine) 20.10.18. Running containers should be stopped and restarted for the permissions to be fixed. For users unable to upgrade, this problem can be worked around by not using the `"USER $USERNAME"` Dockerfile instruction. Instead by calling `ENTRYPOINT ["su", "-", "user"]` the supplementary groups will be set up properly.
ModerateCVE-2022-36109SUSE bug 1205375cpe:/o:opensuse:leap-micro:5.4CVE-2022-3650openSUSE Leap Micro 5.4
A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local attacker to escalate privileges to root in the form of a crash dump, and dump privileged information.
ImportantCVE-2022-3650SUSE bug 1204430cpe:/o:opensuse:leap-micro:5.4CVE-2022-3854openSUSE Leap Micro 5.4
A flaw was found in Ceph, relating to the URL processing on RGW backends. An attacker can exploit the URL processing by providing a null URL to crash the RGW, causing a denial of service.
ModerateCVE-2022-3854SUSE bug 1205025cpe:/o:opensuse:leap-micro:5.4CVE-2022-40982openSUSE Leap Micro 5.4
Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
ModerateCVE-2022-40982SUSE bug 1206418SUSE bug 1215674cpe:/o:opensuse:leap-micro:5.4CVE-2022-41409openSUSE Leap Micro 5.4
Integer overflow vulnerability in pcre2test before 10.41 allows attackers to cause a denial of service or other unspecified impacts via negative input.
ModerateCVE-2022-41409SUSE bug 1213514cpe:/o:opensuse:leap-micro:5.4CVE-2022-41804openSUSE Leap Micro 5.4
Unauthorized error injection in Intel(R) SGX or Intel(R) TDX for some Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
ImportantCVE-2022-41804SUSE bug 1215580cpe:/o:opensuse:leap-micro:5.4CVE-2022-42331openSUSE Leap Micro 5.4
x86: speculative vulnerability in 32bit SYSCALL path Due to an oversight in the very original Spectre/Meltdown security work (XSA-254), one entrypath performs its speculation-safety actions too late. In some configurations, there is an unprotected RET instruction which can be attacked with a variety of speculative attacks.
ModerateCVE-2022-42331SUSE bug 1209019cpe:/o:opensuse:leap-micro:5.4CVE-2022-42332openSUSE Leap Micro 5.4
x86 shadow plus log-dirty mode use-after-free In environments where host assisted address translation is necessary but Hardware Assisted Paging (HAP) is unavailable, Xen will run guests in so called shadow mode. Shadow mode maintains a pool of memory used for both shadow page tables as well as auxiliary data structures. To migrate or snapshot guests, Xen additionally runs them in so called log-dirty mode. The data structures needed by the log-dirty tracking are part of aformentioned auxiliary data. In order to keep error handling efforts within reasonable bounds, for operations which may require memory allocations shadow mode logic ensures up front that enough memory is available for the worst case requirements. Unfortunately, while page table memory is properly accounted for on the code path requiring the potential establishing of new shadows, demands by the log-dirty infrastructure were not taken into consideration. As a result, just established shadow page tables could be freed again immediately, while other code is still accessing them on the assumption that they would remain allocated.
ImportantCVE-2022-42332SUSE bug 1209017cpe:/o:opensuse:leap-micro:5.4CVE-2022-42333openSUSE Leap Micro 5.4
x86/HVM pinned cache attributes mis-handling T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] To allow cachability control for HVM guests with passed through devices, an interface exists to explicitly override defaults which would otherwise be put in place. While not exposed to the affected guests themselves, the interface specifically exists for domains controlling such guests. This interface may therefore be used by not fully privileged entities, e.g. qemu running deprivileged in Dom0 or qemu running in a so called stub-domain. With this exposure it is an issue that - the number of the such controlled regions was unbounded (CVE-2022-42333), - installation and removal of such regions was not properly serialized (CVE-2022-42334).
ModerateCVE-2022-42333SUSE bug 1209018cpe:/o:opensuse:leap-micro:5.4CVE-2022-42334openSUSE Leap Micro 5.4
x86/HVM pinned cache attributes mis-handling T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] To allow cachability control for HVM guests with passed through devices, an interface exists to explicitly override defaults which would otherwise be put in place. While not exposed to the affected guests themselves, the interface specifically exists for domains controlling such guests. This interface may therefore be used by not fully privileged entities, e.g. qemu running deprivileged in Dom0 or qemu running in a so called stub-domain. With this exposure it is an issue that - the number of the such controlled regions was unbounded (CVE-2022-42333), - installation and removal of such regions was not properly serialized (CVE-2022-42334).
ModerateCVE-2022-42334SUSE bug 1209018cpe:/o:opensuse:leap-micro:5.4CVE-2022-4269openSUSE Leap Micro 5.4
A flaw was found in the Linux kernel Traffic Control (TC) subsystem. Using a specific networking configuration (redirecting egress packets to ingress using TC action "mirred") a local unprivileged user could trigger a CPU soft lockup (ABBA deadlock) when the transport protocol in use (TCP or SCTP) does a retransmission, resulting in a denial of service condition.
ModerateCVE-2022-4269SUSE bug 1206024cpe:/o:opensuse:leap-micro:5.4CVE-2022-4304openSUSE Leap Micro 5.4
A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. To achieve a successful decryption an attacker would have to be able to send a very large number of trial messages for decryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5, RSA-OEAP and RSASVE. For example, in a TLS connection, RSA is commonly used by a client to send an encrypted pre-master secret to the server. An attacker that had observed a genuine connection between a client and a server could use this flaw to send trial messages to the server and record the time taken to process them. After a sufficiently large number of messages the attacker could recover the pre-master secret used for the original connection and thus be able to decrypt the application data sent over that connection.
ModerateCVE-2022-4304SUSE bug 1207534SUSE bug 1210067SUSE bug 1213146SUSE bug 1213289SUSE bug 1215014cpe:/o:opensuse:leap-micro:5.4CVE-2022-45154openSUSE Leap Micro 5.4
A Cleartext Storage of Sensitive Information vulnerability in suppportutils of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15, SUSE Linux Enterprise Server 15 SP3 allows attackers that get access to the support logs to gain knowledge of the stored credentials This issue affects: SUSE Linux Enterprise Server 12 supportutils version 3.0.10-95.51.1CWE-312: Cleartext Storage of Sensitive Information and prior versions. SUSE Linux Enterprise Server 15 supportutils version 3.1.21-150000.5.44.1 and prior versions. SUSE Linux Enterprise Server 15 SP3 supportutils version 3.1.21-150300.7.35.15.1 and prior versions.
ModerateCVE-2022-45154SUSE bug 1207598cpe:/o:opensuse:leap-micro:5.4CVE-2022-45884openSUSE Leap Micro 5.4
An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvbdev.c has a use-after-free, related to dvb_register_device dynamically allocating fops.
ModerateCVE-2022-45884SUSE bug 1205756cpe:/o:opensuse:leap-micro:5.4CVE-2022-45885openSUSE Leap Micro 5.4
An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvb_frontend.c has a race condition that can cause a use-after-free when a device is disconnected.
ModerateCVE-2022-45885SUSE bug 1205758cpe:/o:opensuse:leap-micro:5.4CVE-2022-45886openSUSE Leap Micro 5.4
An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvb_net.c has a .disconnect versus dvb_device_open race condition that leads to a use-after-free.
ModerateCVE-2022-45886SUSE bug 1205760cpe:/o:opensuse:leap-micro:5.4CVE-2022-45887openSUSE Leap Micro 5.4
An issue was discovered in the Linux kernel through 6.0.9. drivers/media/usb/ttusb-dec/ttusb_dec.c has a memory leak because of the lack of a dvb_frontend_detach call.
ModerateCVE-2022-45887SUSE bug 1205762cpe:/o:opensuse:leap-micro:5.4CVE-2022-45919openSUSE Leap Micro 5.4
An issue was discovered in the Linux kernel through 6.0.10. In drivers/media/dvb-core/dvb_ca_en50221.c, a use-after-free can occur is there is a disconnect after an open, because of the lack of a wait_event.
ImportantCVE-2022-45919SUSE bug 1205803SUSE bug 1208912SUSE bug 1214128SUSE bug 1215674cpe:/o:opensuse:leap-micro:5.4CVE-2022-4744openSUSE Leap Micro 5.4
A double-free flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user registers the device when the register_netdevice function fails (NETDEV_REGISTER notifier). This flaw allows a local user to crash or potentially escalate their privileges on the system.
ImportantCVE-2022-4744SUSE bug 1209635SUSE bug 1209672SUSE bug 1211833cpe:/o:opensuse:leap-micro:5.4CVE-2023-0330openSUSE Leap Micro 5.4
A vulnerability in the lsi53c895a device affects the latest version of qemu. A DMA-MMIO reentrancy problem may lead to memory corruption bugs like stack overflow or use-after-free.
ModerateCVE-2023-0330SUSE bug 1207205cpe:/o:opensuse:leap-micro:5.4CVE-2023-0386openSUSE Leap Micro 5.4
A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.
ImportantCVE-2023-0386SUSE bug 1209615SUSE bug 1210499cpe:/o:opensuse:leap-micro:5.4CVE-2023-0394openSUSE Leap Micro 5.4
A NULL pointer dereference flaw was found in rawv6_push_pending_frames in net/ipv6/raw.c in the network subcomponent in the Linux kernel. This flaw causes the system to crash.
ModerateCVE-2023-0394SUSE bug 1207168cpe:/o:opensuse:leap-micro:5.4CVE-2023-0459openSUSE Leap Micro 5.4
Copy_from_user on 64-bit versions of the Linux kernel does not implement the __uaccess_begin_nospec allowing a user to bypass the "access_ok" check and pass a kernel pointer to copy_from_user(). This would allow an attacker to leak information. We recommend upgrading beyond commit?74e19ef0ff8061ef55957c3abd71614ef0f42f47
ModerateCVE-2023-0459SUSE bug 1211738SUSE bug 1215674cpe:/o:opensuse:leap-micro:5.4CVE-2023-0512openSUSE Leap Micro 5.4
Divide By Zero in GitHub repository vim/vim prior to 9.0.1247.
ImportantCVE-2023-0512SUSE bug 1207780SUSE bug 1210385cpe:/o:opensuse:leap-micro:5.4CVE-2023-0687openSUSE Leap Micro 5.4
** DISPUTED ** A vulnerability was found in GNU C Library 2.38. It has been declared as critical. This vulnerability affects the function __monstartup of the file gmon.c of the component Call Graph Monitor. The manipulation leads to buffer overflow. It is recommended to apply a patch to fix this issue. VDB-220246 is the identifier assigned to this vulnerability. NOTE: The real existence of this vulnerability is still doubted at the moment. The inputs that induce this vulnerability are basically addresses of the running application that is built with gmon enabled. It's basically trusted input or input that needs an actual security flaw to be compromised or controlled.
LowCVE-2023-0687SUSE bug 1207975cpe:/o:opensuse:leap-micro:5.4CVE-2023-0795openSUSE Leap Micro 5.4
LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3488, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.
LowCVE-2023-0795SUSE bug 1208226cpe:/o:opensuse:leap-micro:5.4CVE-2023-0796openSUSE Leap Micro 5.4
LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3592, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.
LowCVE-2023-0796SUSE bug 1208227cpe:/o:opensuse:leap-micro:5.4CVE-2023-0797openSUSE Leap Micro 5.4
LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6921, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.
LowCVE-2023-0797SUSE bug 1208228cpe:/o:opensuse:leap-micro:5.4CVE-2023-0798openSUSE Leap Micro 5.4
LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3400, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.
LowCVE-2023-0798SUSE bug 1208229cpe:/o:opensuse:leap-micro:5.4CVE-2023-0799openSUSE Leap Micro 5.4
LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3701, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.
LowCVE-2023-0799SUSE bug 1208230cpe:/o:opensuse:leap-micro:5.4CVE-2023-0800openSUSE Leap Micro 5.4
LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3502, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.
LowCVE-2023-0800SUSE bug 1208231cpe:/o:opensuse:leap-micro:5.4CVE-2023-0801openSUSE Leap Micro 5.4
LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6778, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.
LowCVE-2023-0801SUSE bug 1208232cpe:/o:opensuse:leap-micro:5.4CVE-2023-0802openSUSE Leap Micro 5.4
LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3724, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.
LowCVE-2023-0802SUSE bug 1208233cpe:/o:opensuse:leap-micro:5.4CVE-2023-0803openSUSE Leap Micro 5.4
LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.
LowCVE-2023-0803SUSE bug 1208234cpe:/o:opensuse:leap-micro:5.4CVE-2023-0804openSUSE Leap Micro 5.4
LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.
LowCVE-2023-0804SUSE bug 1208236cpe:/o:opensuse:leap-micro:5.4CVE-2023-0950openSUSE Leap Micro 5.4
Improper Validation of Array Index vulnerability in the spreadsheet component of The Document Foundation LibreOffice allows an attacker to craft a spreadsheet document that will cause an array index underflow when loaded. In the affected versions of LibreOffice certain malformed spreadsheet formulas, such as AGGREGATE, could be created with less parameters passed to the formula interpreter than it expected, leading to an array index underflow, in which case there is a risk that arbitrary code could be executed. This issue affects: The Document Foundation LibreOffice 7.4 versions prior to 7.4.6; 7.5 versions prior to 7.5.1.
ImportantCVE-2023-0950SUSE bug 1209242cpe:/o:opensuse:leap-micro:5.4CVE-2023-1017openSUSE Leap Micro 5.4
An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can lead to denial of service (crashing the TPM chip/process or rendering it unusable) and/or arbitrary code execution in the TPM context.
ImportantCVE-2023-1017SUSE bug 1206022cpe:/o:opensuse:leap-micro:5.4CVE-2023-1018openSUSE Leap Micro 5.4
An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can read or access sensitive data stored in the TPM.
LowCVE-2023-1018SUSE bug 1206023cpe:/o:opensuse:leap-micro:5.4CVE-2023-1077openSUSE Leap Micro 5.4
In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as the confused entry will not be NULL, but list_head.The buggy error condition would lead to a type confused entry with the list head,which would then be used as a type confused sched_rt_entity,causing memory corruption.
ImportantCVE-2023-1077SUSE bug 1208600SUSE bug 1208839SUSE bug 1213841SUSE bug 1213842cpe:/o:opensuse:leap-micro:5.4CVE-2023-1079openSUSE Leap Micro 5.4
A flaw was found in the Linux kernel. A use-after-free may be triggered in asus_kbd_backlight_set when plugging/disconnecting in a malicious USB device, which advertises itself as an Asus device. Similarly to the previous known CVE-2023-25012, but in asus devices, the work_struct may be scheduled by the LED controller while the device is disconnecting, triggering a use-after-free on the struct asus_kbd_leds *led structure. A malicious USB device may exploit the issue to cause memory corruption with controlled data.
ModerateCVE-2023-1079SUSE bug 1208604cpe:/o:opensuse:leap-micro:5.4CVE-2023-1127openSUSE Leap Micro 5.4
Divide By Zero in GitHub repository vim/vim prior to 9.0.1367.
ModerateCVE-2023-1127SUSE bug 1208828cpe:/o:opensuse:leap-micro:5.4CVE-2023-1170openSUSE Leap Micro 5.4
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376.
ModerateCVE-2023-1170SUSE bug 1208959cpe:/o:opensuse:leap-micro:5.4CVE-2023-1175openSUSE Leap Micro 5.4
Incorrect Calculation of Buffer Size in GitHub repository vim/vim prior to 9.0.1378.
ModerateCVE-2023-1175SUSE bug 1208957cpe:/o:opensuse:leap-micro:5.4CVE-2023-1192openSUSE Leap Micro 5.4
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
ModerateCVE-2023-1192SUSE bug 1208995cpe:/o:opensuse:leap-micro:5.4CVE-2023-1206openSUSE Leap Micro 5.4
A hash collision flaw was found in the IPv6 connection lookup table in the Linux kernel’s IPv6 functionality when a user makes a new kind of SYN flood attack. A user located in the local network or with a high bandwidth connection can increase the CPU usage of the server that accepts IPV6 connections up to 95%.
ModerateCVE-2023-1206SUSE bug 1212703cpe:/o:opensuse:leap-micro:5.4CVE-2023-1249openSUSE Leap Micro 5.4
A use-after-free flaw was found in the Linux kernel’s core dump subsystem. This flaw allows a local user to crash the system. Only if patch 390031c94211 ("coredump: Use the vma snapshot in fill_files_note") not applied yet, then kernel could be affected.
ModerateCVE-2023-1249SUSE bug 1209039cpe:/o:opensuse:leap-micro:5.4CVE-2023-1264openSUSE Leap Micro 5.4
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1392.
ModerateCVE-2023-1264SUSE bug 1209042cpe:/o:opensuse:leap-micro:5.4CVE-2023-1281openSUSE Leap Micro 5.4
Use After Free vulnerability in Linux kernel traffic control index filter (tcindex) allows Privilege Escalation.?The imperfect hash area can be updated while packets are traversing, which will cause a use-after-free when 'tcf_exts_exec()' is called with the destroyed tcf_ext.?A local attacker user can use this vulnerability to elevate its privileges to root.
This issue affects Linux Kernel: from 4.14 before git commit ee059170b1f7e94e55fa6cadee544e176a6e59c2.
ImportantCVE-2023-1281SUSE bug 1209634SUSE bug 1209683SUSE bug 1210335SUSE bug 1210423SUSE bug 1211833cpe:/o:opensuse:leap-micro:5.4CVE-2023-1355openSUSE Leap Micro 5.4
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1402.
ModerateCVE-2023-1355SUSE bug 1209187cpe:/o:opensuse:leap-micro:5.4CVE-2023-1380openSUSE Leap Micro 5.4
A slab-out-of-bound read problem was found in brcmf_get_assoc_ies in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux Kernel. This issue could occur when assoc_info->req_len data is bigger than the size of the buffer, defined as WL_EXTRA_BUF_MAX, leading to a denial of service.
LowCVE-2023-1380SUSE bug 1209287cpe:/o:opensuse:leap-micro:5.4CVE-2023-1382openSUSE Leap Micro 5.4
A data race flaw was found in the Linux kernel, between where con is allocated and con->sock is set. This issue leads to a NULL pointer dereference when accessing con->sock->sk in net/tipc/topsrv.c in the tipc protocol in the Linux kernel.
ModerateCVE-2023-1382SUSE bug 1209288cpe:/o:opensuse:leap-micro:5.4CVE-2023-1513openSUSE Leap Micro 5.4
A flaw was found in KVM. When calling the KVM_GET_DEBUGREGS ioctl, on 32-bit systems, there might be some uninitialized portions of the kvm_debugregs structure that could be copied to userspace, causing an information leak.
LowCVE-2023-1513SUSE bug 1209532cpe:/o:opensuse:leap-micro:5.4CVE-2023-1582openSUSE Leap Micro 5.4
A race problem was found in fs/proc/task_mmu.c in the memory management sub-component in the Linux kernel. This issue may allow a local attacker with user privilege to cause a denial of service.
ModerateCVE-2023-1582SUSE bug 1209636cpe:/o:opensuse:leap-micro:5.4CVE-2023-1611openSUSE Leap Micro 5.4
A use-after-free flaw was found in btrfs_search_slot in fs/btrfs/ctree.c in btrfs in the Linux Kernel.This flaw allows an attacker to crash the system and possibly cause a kernel information lea
ModerateCVE-2023-1611SUSE bug 1209687cpe:/o:opensuse:leap-micro:5.4CVE-2023-1637openSUSE Leap Micro 5.4
A flaw that boot CPU could be vulnerable for the speculative execution behavior kind of attacks in the Linux kernel X86 CPU Power management options functionality was found in the way user resuming CPU from suspend-to-RAM. A local user could use this flaw to potentially get unauthorized access to some memory of the CPU similar to the speculative execution behavior kind of attacks.
ModerateCVE-2023-1637SUSE bug 1209779cpe:/o:opensuse:leap-micro:5.4CVE-2023-1652openSUSE Leap Micro 5.4
A use-after-free flaw was found in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c in the NFS filesystem in the Linux Kernel. This issue could allow a local attacker to crash the system or it may lead to a kernel information leak problem.
ModerateCVE-2023-1652SUSE bug 1209788SUSE bug 1209797cpe:/o:opensuse:leap-micro:5.4CVE-2023-1670openSUSE Leap Micro 5.4
A flaw use after free in the Linux kernel Xircom 16-bit PCMCIA (PC-card) Ethernet driver was found.A local user could use this flaw to crash the system or potentially escalate their privileges on the system.
ModerateCVE-2023-1670SUSE bug 1209871cpe:/o:opensuse:leap-micro:5.4CVE-2023-1829openSUSE Leap Micro 5.4
A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited to achieve local privilege escalation.?The tcindex_delete function which does not properly deactivate filters in case of a perfect hashes while deleting the underlying structure which can later lead to double freeing the structure.?A local attacker user can use this vulnerability to elevate its privileges to root.
We recommend upgrading past commit 8c710f75256bb3cf05ac7b1672c82b92c43f3d28.
ImportantCVE-2023-1829SUSE bug 1210335SUSE bug 1210619cpe:/o:opensuse:leap-micro:5.4CVE-2023-1838openSUSE Leap Micro 5.4
A use-after-free flaw was found in vhost_net_set_backend in drivers/vhost/net.c in virtio network subcomponent in the Linux kernel due to a double fget. This flaw could allow a local attacker to crash the system, and could even lead to a kernel information leak problem.
ModerateCVE-2023-1838SUSE bug 1210203cpe:/o:opensuse:leap-micro:5.4CVE-2023-1855openSUSE Leap Micro 5.4
A use-after-free flaw was found in xgene_hwmon_remove in drivers/hwmon/xgene-hwmon.c in the Hardware Monitoring Linux Kernel Driver (xgene-hwmon). This flaw could allow a local attacker to crash the system due to a race problem. This vulnerability could even lead to a kernel information leak problem.
ModerateCVE-2023-1855SUSE bug 1210202cpe:/o:opensuse:leap-micro:5.4CVE-2023-1859openSUSE Leap Micro 5.4
A use-after-free flaw was found in xen_9pfs_front_removet in net/9p/trans_xen.c in Xen transport for 9pfs in the Linux Kernel. This flaw could allow a local attacker to crash the system due to a race problem, possibly leading to a kernel information leak.
LowCVE-2023-1859SUSE bug 1210169cpe:/o:opensuse:leap-micro:5.4CVE-2023-1981openSUSE Leap Micro 5.4
A vulnerability was found in the avahi library. This flaw allows an unprivileged user to make a dbus call, causing the avahi daemon to crash.
ModerateCVE-2023-1981SUSE bug 1210328cpe:/o:opensuse:leap-micro:5.4CVE-2023-1989openSUSE Leap Micro 5.4
A use-after-free flaw was found in btsdio_remove in drivers\bluetooth\btsdio.c in the Linux Kernel. In this flaw, a call to btsdio_remove with an unfinished job, may cause a race problem leading to a UAF on hdev devices.
ImportantCVE-2023-1989SUSE bug 1210336SUSE bug 1210500SUSE bug 1213841SUSE bug 1213842SUSE bug 1214128cpe:/o:opensuse:leap-micro:5.4CVE-2023-1990openSUSE Leap Micro 5.4
A use-after-free flaw was found in ndlc_remove in drivers/nfc/st-nci/ndlc.c in the Linux Kernel. This flaw could allow an attacker to crash the system due to a race problem.
ModerateCVE-2023-1990SUSE bug 1210337SUSE bug 1210501SUSE bug 1214128cpe:/o:opensuse:leap-micro:5.4CVE-2023-1998openSUSE Leap Micro 5.4
The Linux kernel allows userspace processes to enable mitigations by calling prctl with PR_SET_SPECULATION_CTRL which disables the speculation feature as well as by using seccomp. We had noticed that on VMs of at least one major cloud provider, the kernel still left the victim process exposed to attacks in some cases even after enabling the spectre-BTI mitigation with prctl. The same behavior can be observed on a bare-metal machine when forcing the mitigation to IBRS on boot command line.
This happened because when plain IBRS was enabled (not enhanced IBRS), the kernel had some logic that determined that STIBP was not needed. The IBRS bit implicitly protects against cross-thread branch target injection. However, with legacy IBRS, the IBRS bit was cleared on returning to userspace, due to performance reasons, which disabled the implicit STIBP and left userspace threads vulnerable to cross-thread branch target injection against which STIBP protects.
ModerateCVE-2023-1998SUSE bug 1210506cpe:/o:opensuse:leap-micro:5.4CVE-2023-2002openSUSE Leap Micro 5.4
A vulnerability was found in the HCI sockets implementation due to a missing capability check in net/bluetooth/hci_sock.c in the Linux Kernel. This flaw allows an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication.
ModerateCVE-2023-2002SUSE bug 1210533SUSE bug 1210566cpe:/o:opensuse:leap-micro:5.4CVE-2023-2004openSUSE Leap Micro 5.4
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
ModerateCVE-2023-2004SUSE bug 1210419cpe:/o:opensuse:leap-micro:5.4CVE-2023-2007openSUSE Leap Micro 5.4
The specific flaw exists within the DPT I2O Controller driver. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the kernel.
ModerateCVE-2023-2007SUSE bug 1210448cpe:/o:opensuse:leap-micro:5.4CVE-2023-2008openSUSE Leap Micro 5.4
A flaw was found in the Linux kernel's udmabuf device driver. The specific flaw exists within a fault handler. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an array. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel.
ModerateCVE-2023-2008SUSE bug 1210453cpe:/o:opensuse:leap-micro:5.4CVE-2023-2019openSUSE Leap Micro 5.4
A flaw was found in the Linux kernel's netdevsim device driver, within the scheduling of events. This issue results from the improper management of a reference count. This may allow an attacker to create a denial of service condition on the system.
ModerateCVE-2023-2019SUSE bug 1210454cpe:/o:opensuse:leap-micro:5.4CVE-2023-20569openSUSE Leap Micro 5.4
A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled address, potentially leading to information disclosure.
ModerateCVE-2023-20569SUSE bug 1213287cpe:/o:opensuse:leap-micro:5.4CVE-2023-20588openSUSE Leap Micro 5.4
A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality.?
ModerateCVE-2023-20588SUSE bug 1213927cpe:/o:opensuse:leap-micro:5.4CVE-2023-20593openSUSE Leap Micro 5.4
An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information.
ModerateCVE-2023-20593SUSE bug 1213286SUSE bug 1213616SUSE bug 1215674cpe:/o:opensuse:leap-micro:5.4CVE-2023-20867openSUSE Leap Micro 5.4
A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine.
LowCVE-2023-20867SUSE bug 1212143SUSE bug 1214402cpe:/o:opensuse:leap-micro:5.4CVE-2023-20897openSUSE Leap Micro 5.4
Salt masters prior to 3005.2 or 3006.2 contain a DOS in minion return. After receiving several bad packets on the request server equal to the number of worker threads, the master will become unresponsive to return requests until restarted.
ModerateCVE-2023-20897SUSE bug 1214796cpe:/o:opensuse:leap-micro:5.4CVE-2023-20898openSUSE Leap Micro 5.4
Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongful executions, data corruption and/or crash.
ModerateCVE-2023-20898SUSE bug 1214797cpe:/o:opensuse:leap-micro:5.4CVE-2023-20900openSUSE Leap Micro 5.4
A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html ?in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .
ImportantCVE-2023-20900SUSE bug 1214566cpe:/o:opensuse:leap-micro:5.4CVE-2023-21102openSUSE Leap Micro 5.4
In __efi_rt_asm_wrapper of efi-rt-wrapper.S, there is a possible bypass of shadow stack protection due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-260821414References: Upstream kernel
ImportantCVE-2023-21102SUSE bug 1212155SUSE bug 1212346cpe:/o:opensuse:leap-micro:5.4CVE-2023-2124openSUSE Leap Micro 5.4
An out-of-bounds memory access flaw was found in the Linux kernel’s XFS file system in how a user restores an XFS image after failure (with a dirty log journal). This flaw allows a local user to crash or potentially escalate their privileges on the system.
ModerateCVE-2023-2124SUSE bug 1210498cpe:/o:opensuse:leap-micro:5.4CVE-2023-21400openSUSE Leap Micro 5.4
In multiple functions of io_uring.c, there is a possible kernel memory corruption due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.
ModerateCVE-2023-21400SUSE bug 1213272cpe:/o:opensuse:leap-micro:5.4CVE-2023-2156openSUSE Leap Micro 5.4
A flaw was found in the networking subsystem of the Linux kernel within the handling of the RPL protocol. This issue results from the lack of proper handling of user-supplied data, which can lead to an assertion failure. This may allow an unauthenticated remote attacker to create a denial of service condition on the system.
ImportantCVE-2023-2156SUSE bug 1211131SUSE bug 1211395cpe:/o:opensuse:leap-micro:5.4CVE-2023-2162openSUSE Leap Micro 5.4
A use-after-free vulnerability was found in iscsi_sw_tcp_session_create in drivers/scsi/iscsi_tcp.c in SCSI sub-component in the Linux Kernel. In this flaw an attacker could leak kernel internal information.
ModerateCVE-2023-2162SUSE bug 1210647SUSE bug 1210662SUSE bug 1213841SUSE bug 1213842SUSE bug 1214128cpe:/o:opensuse:leap-micro:5.4CVE-2023-2166openSUSE Leap Micro 5.4
A null pointer dereference issue was found in can protocol in net/can/af_can.c in the Linux before Linux. ml_priv may not be initialized in the receive path of CAN frames. A local user could use this flaw to crash the system or potentially cause a denial of service.
ModerateCVE-2023-2166SUSE bug 1210627cpe:/o:opensuse:leap-micro:5.4CVE-2023-2176openSUSE Leap Micro 5.4
A vulnerability was found in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA in the Linux Kernel. The improper cleanup results in out-of-boundary read, where a local user can utilize this problem to crash the system or escalation of privilege.
ImportantCVE-2023-2176SUSE bug 1210629SUSE bug 1210630SUSE bug 1213842cpe:/o:opensuse:leap-micro:5.4CVE-2023-2177openSUSE Leap Micro 5.4
A null pointer dereference issue was found in the sctp network protocol in net/sctp/stream_sched.c in Linux Kernel. If stream_in allocation is failed, stream_out is freed which would further be accessed. A local user could use this flaw to crash the system or potentially cause a denial of service.
ModerateCVE-2023-2177SUSE bug 1210643cpe:/o:opensuse:leap-micro:5.4CVE-2023-2235openSUSE Leap Micro 5.4
A use-after-free vulnerability in the Linux Kernel Performance Events system can be exploited to achieve local privilege escalation.
The perf_group_detach function did not check the event's siblings' attach_state before calling add_event_to_groups(), but?remove_on_exec made it possible to call list_del_event() on before detaching from their group, making it possible to use a dangling pointer causing a use-after-free vulnerability.
We recommend upgrading past commit fd0815f632c24878e325821943edccc7fde947a2.
ImportantCVE-2023-2235SUSE bug 1210986SUSE bug 1210987cpe:/o:opensuse:leap-micro:5.4CVE-2023-2255openSUSE Leap Micro 5.4
Improper access control in editor components of The Document Foundation LibreOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. In the affected versions of LibreOffice documents that used "floating frames" linked to external files, would load the contents of those frames without prompting the user for permission to do so. This was inconsistent with the treatment of other linked content in LibreOffice. This issue affects: The Document Foundation LibreOffice 7.4 versions prior to 7.4.7; 7.5 versions prior to 7.5.3.
ImportantCVE-2023-2255SUSE bug 1211746cpe:/o:opensuse:leap-micro:5.4CVE-2023-22652openSUSE Leap Micro 5.4
A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf leads to DoS via malformed config files.
This issue affects libeconf: before 0.5.2.
ImportantCVE-2023-22652SUSE bug 1211078cpe:/o:opensuse:leap-micro:5.4CVE-2023-2269openSUSE Leap Micro 5.4
A denial of service problem was found, due to a possible recursive locking scenario, resulting in a deadlock in table_clear in drivers/md/dm-ioctl.c in the Linux Kernel Device Mapper-Multipathing sub-component.
ModerateCVE-2023-2269SUSE bug 1210806cpe:/o:opensuse:leap-micro:5.4CVE-2023-23001openSUSE Leap Micro 5.4
In the Linux kernel before 5.16.3, drivers/scsi/ufs/ufs-mediatek.c misinterprets the regulator_get return value (expects it to be NULL in the error case, whereas it is actually an error pointer).
LowCVE-2023-23001SUSE bug 1208829cpe:/o:opensuse:leap-micro:5.4CVE-2023-23006openSUSE Leap Micro 5.4
In the Linux kernel before 5.15.13, drivers/net/ethernet/mellanox/mlx5/core/steering/dr_domain.c misinterprets the mlx5_get_uars_page return value (expects it to be NULL in the error case, whereas it is actually an error pointer).
ModerateCVE-2023-23006SUSE bug 1208845cpe:/o:opensuse:leap-micro:5.4CVE-2023-23908openSUSE Leap Micro 5.4
Improper access control in some 3rd Generation Intel(R) Xeon(R) Scalable processors may allow a privileged user to potentially enable information disclosure via local access.
ImportantCVE-2023-23908cpe:/o:opensuse:leap-micro:5.4CVE-2023-2426openSUSE Leap Micro 5.4
Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499.
ModerateCVE-2023-2426SUSE bug 1210996cpe:/o:opensuse:leap-micro:5.4CVE-2023-24329openSUSE Leap Micro 5.4
An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.
ImportantCVE-2023-24329SUSE bug 1208471SUSE bug 1213553SUSE bug 1213554SUSE bug 1213839cpe:/o:opensuse:leap-micro:5.4CVE-2023-24593openSUSE Leap Micro 5.4
** REJECT ** Rejected by upstream.
ModerateCVE-2023-24593SUSE bug 1209714cpe:/o:opensuse:leap-micro:5.4CVE-2023-2483openSUSE Leap Micro 5.4
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-33203. Reason: This candidate is a reservation duplicate of CVE-2023-33203. Notes: All CVE users should reference CVE-2023-33203 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
ModerateCVE-2023-2483SUSE bug 1211037cpe:/o:opensuse:leap-micro:5.4CVE-2023-2513openSUSE Leap Micro 5.4
A use-after-free vulnerability was found in the Linux kernel's ext4 filesystem in the way it handled the extra inode size for extended attributes. This flaw could allow a privileged local user to cause a system crash or other undefined behaviors.
ModerateCVE-2023-2513SUSE bug 1211105cpe:/o:opensuse:leap-micro:5.4CVE-2023-25180openSUSE Leap Micro 5.4
** REJECT ** Rejected by upstream.
ModerateCVE-2023-25180SUSE bug 1209713cpe:/o:opensuse:leap-micro:5.4CVE-2023-2602openSUSE Leap Micro 5.4
A vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cause __real_pthread_create() to return an error, which can exhaust the process memory.
LowCVE-2023-2602SUSE bug 1211418cpe:/o:opensuse:leap-micro:5.4CVE-2023-2603openSUSE Leap Micro 5.4
A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overflow if the input string is close to 4GiB.
ModerateCVE-2023-2603SUSE bug 1211419cpe:/o:opensuse:leap-micro:5.4CVE-2023-2609openSUSE Leap Micro 5.4
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1531.
ImportantCVE-2023-2609SUSE bug 1211256cpe:/o:opensuse:leap-micro:5.4CVE-2023-2610openSUSE Leap Micro 5.4
Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1532.
ImportantCVE-2023-2610SUSE bug 1211257cpe:/o:opensuse:leap-micro:5.4CVE-2023-26112openSUSE Leap Micro 5.4
All versions of the package configobj are vulnerable to Regular Expression Denial of Service (ReDoS) via the validate function, using (.+?)\((.*)\).
**Note:** This is only exploitable in the case of a developer, putting the offending value in a server side configuration file.
LowCVE-2023-26112SUSE bug 1210070cpe:/o:opensuse:leap-micro:5.4CVE-2023-26484openSUSE Leap Micro 5.4
KubeVirt is a virtual machine management add-on for Kubernetes. In versions 0.59.0 and prior, if a malicious user has taken over a Kubernetes node where virt-handler (the KubeVirt node-daemon) is running, the virt-handler service account can be used to modify all node specs. This can be misused to lure-in system-level-privileged components which can, for instance, read all secrets on the cluster, or can exec into pods on other nodes. This way, a compromised node can be used to elevate privileges beyond the node until potentially having full privileged access to the whole cluster. The simplest way to exploit this, once a user could compromise a specific node, is to set with the virt-handler service account all other nodes to unschedulable and simply wait until system-critical components with high privileges appear on its node. No patches are available as of time of publication. As a workaround, gatekeeper users can add a webhook which will block the `virt-handler` service account to modify the spec of a node.
ImportantCVE-2023-26484SUSE bug 1209359cpe:/o:opensuse:leap-micro:5.4CVE-2023-2650openSUSE Leap Micro 5.4
Issue summary: Processing some specially crafted ASN.1 object identifiers or
data containing them may be very slow.
Impact summary: Applications that use OBJ_obj2txt() directly, or use any of
the OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message
size limit may experience notable to very long delays when processing those
messages, which may lead to a Denial of Service.
An OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -
most of which have no size limit. OBJ_obj2txt() may be used to translate
an ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL
type ASN1_OBJECT) to its canonical numeric text form, which are the
sub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by
periods.
When one of the sub-identifiers in the OBJECT IDENTIFIER is very large
(these are sizes that are seen as absurdly large, taking up tens or hundreds
of KiBs), the translation to a decimal number in text may take a very long
time. The time complexity is O(n^2) with 'n' being the size of the
sub-identifiers in bytes (*).
With OpenSSL 3.0, support to fetch cryptographic algorithms using names /
identifiers in string form was introduced. This includes using OBJECT
IDENTIFIERs in canonical numeric text form as identifiers for fetching
algorithms.
Such OBJECT IDENTIFIERs may be received through the ASN.1 structure
AlgorithmIdentifier, which is commonly used in multiple protocols to specify
what cryptographic algorithm should be used to sign or verify, encrypt or
decrypt, or digest passed data.
Applications that call OBJ_obj2txt() directly with untrusted data are
affected, with any version of OpenSSL. If the use is for the mere purpose
of display, the severity is considered low.
In OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,
CMS, CMP/CRMF or TS. It also impacts anything that processes X.509
certificates, including simple things like verifying its signature.
The impact on TLS is relatively low, because all versions of OpenSSL have a
100KiB limit on the peer's certificate chain. Additionally, this only
impacts clients, or servers that have explicitly enabled client
authentication.
In OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,
such as X.509 certificates. This is assumed to not happen in such a way
that it would cause a Denial of Service, so these versions are considered
not affected by this issue in such a way that it would be cause for concern,
and the severity is therefore considered low.
ModerateCVE-2023-2650SUSE bug 1211430cpe:/o:opensuse:leap-micro:5.4CVE-2023-2700openSUSE Leap Micro 5.4
A vulnerability was found in libvirt. This security flaw ouccers due to repeatedly querying an SR-IOV PCI device's capabilities that exposes a memory leak caused by a failure to free the virPCIVirtualFunction array within the parent struct's g_autoptr cleanup.
ModerateCVE-2023-2700SUSE bug 1211390cpe:/o:opensuse:leap-micro:5.4CVE-2023-27349openSUSE Leap Micro 5.4
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
ImportantCVE-2023-27349SUSE bug 1210398cpe:/o:opensuse:leap-micro:5.4CVE-2023-27371openSUSE Leap Micro 5.4
GNU libmicrohttpd before 0.9.76 allows remote DoS (Denial of Service) due to improper parsing of a multipart/form-data boundary in the postprocessor.c MHD_create_post_processor() method. This allows an attacker to remotely send a malicious HTTP POST packet that includes one or more '\0' bytes in a multipart/form-data boundary field, which - assuming a specific heap layout - will result in an out-of-bounds read and a crash in the find_boundary() function.
ModerateCVE-2023-27371SUSE bug 1208745cpe:/o:opensuse:leap-micro:5.4CVE-2023-28319openSUSE Leap Micro 5.4
A use after free vulnerability exists in curl <v8.1.0 in the way libcurl offers a feature to verify an SSH server's public key using a SHA 256 hash. When this check fails, libcurl would free the memory for the fingerprint before it returns an error message containing the (now freed) hash. This flaw risks inserting sensitive heap-based data into the error message that might be shown to users or otherwise get leaked and revealed.
ModerateCVE-2023-28319SUSE bug 1211230cpe:/o:opensuse:leap-micro:5.4CVE-2023-28320openSUSE Leap Micro 5.4
A denial of service vulnerability exists in curl <v8.1.0 in the way libcurl provides several different backends for resolving host names, selected at build time. If it is built to use the synchronous resolver, it allows name resolves to time-out slow operations using `alarm()` and `siglongjmp()`. When doing this, libcurl used a global buffer that was not mutex protected and a multi-threaded application might therefore crash or otherwise misbehave.
LowCVE-2023-28320SUSE bug 1211231cpe:/o:opensuse:leap-micro:5.4CVE-2023-28321openSUSE Leap Micro 5.4
An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports matching of wildcard patterns when listed as "Subject Alternative Name" in TLS server certificates. curl can be built to use its own name matching function for TLS rather than one provided by a TLS library. This private wildcard matching function would match IDN (International Domain Name) hosts incorrectly and could as a result accept patterns that otherwise should mismatch. IDN hostnames are converted to puny code before used for certificate checks. Puny coded names always start with `xn--` and should not be allowed to pattern match, but the wildcard check in curl could still check for `x*`, which would match even though the IDN name most likely contained nothing even resembling an `x`.
ModerateCVE-2023-28321SUSE bug 1211232cpe:/o:opensuse:leap-micro:5.4CVE-2023-28322openSUSE Leap Micro 5.4
An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same handle previously wasused to issue a `PUT` request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the second transfer. The problem exists in the logic for a reused handle when it is (expected to be) changed from a PUT to a POST.
ImportantCVE-2023-28322SUSE bug 1211233cpe:/o:opensuse:leap-micro:5.4CVE-2023-28327openSUSE Leap Micro 5.4
A NULL pointer dereference flaw was found in the UNIX protocol in net/unix/diag.c In unix_diag_get_exact in the Linux Kernel. The newly allocated skb does not have sk, leading to a NULL pointer. This flaw allows a local user to crash or potentially cause a denial of service.
ModerateCVE-2023-28327SUSE bug 1209290cpe:/o:opensuse:leap-micro:5.4CVE-2023-28370openSUSE Leap Micro 5.4
Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL.
LowCVE-2023-28370SUSE bug 1211741cpe:/o:opensuse:leap-micro:5.4CVE-2023-28410openSUSE Leap Micro 5.4
Improper restriction of operations within the bounds of a memory buffer in some Intel(R) i915 Graphics drivers for linux before kernel version 6.2.10 may allow an authenticated user to potentially enable escalation of privilege via local access.
ImportantCVE-2023-28410SUSE bug 1211263SUSE bug 1211819cpe:/o:opensuse:leap-micro:5.4CVE-2023-28464openSUSE Leap Micro 5.4
hci_conn_cleanup in net/bluetooth/hci_conn.c in the Linux kernel through 6.2.9 has a use-after-free (observed in hci_conn_hash_flush) because of calls to hci_dev_put and hci_conn_put. There is a double free that may lead to privilege escalation.
ImportantCVE-2023-28464SUSE bug 1209052SUSE bug 1211111cpe:/o:opensuse:leap-micro:5.4CVE-2023-28466openSUSE Leap Micro 5.4
do_tls_getsockopt in net/tls/tls_main.c in the Linux kernel through 6.2.6 lacks a lock_sock call, leading to a race condition (with a resultant use-after-free or NULL pointer dereference).
ImportantCVE-2023-28466SUSE bug 1209366SUSE bug 1210452SUSE bug 1211833SUSE bug 1213841cpe:/o:opensuse:leap-micro:5.4CVE-2023-28484openSUSE Leap Micro 5.4
In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequently a segfault. This occurs in xmlSchemaFixupComplexType in xmlschemas.c.
ModerateCVE-2023-28484SUSE bug 1210411cpe:/o:opensuse:leap-micro:5.4CVE-2023-2861openSUSE Leap Micro 5.4
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
ImportantCVE-2023-2861SUSE bug 1212968cpe:/o:opensuse:leap-micro:5.4CVE-2023-28736openSUSE Leap Micro 5.4
Buffer overflow in some Intel(R) SSD Tools software before version mdadm-4.2-rc2 may allow a privileged user to potentially enable escalation of privilege via local access.
ModerateCVE-2023-28736SUSE bug 1214244cpe:/o:opensuse:leap-micro:5.4CVE-2023-28840openSUSE Leap Micro 5.4
Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component (`dockerd`), which is developed as moby/moby, is commonly referred to as *Docker*.
Swarm Mode, which is compiled in and delivered by default in dockerd and is thus present in most major Moby downstreams, is a simple, built-in container orchestrator that is implemented through a combination of SwarmKit and supporting network code.
The overlay network driver is a core feature of Swarm Mode, providing isolated virtual LANs that allow communication between containers and services across the cluster. This driver is an implementation/user of VXLAN, which encapsulates link-layer (Ethernet) frames in UDP datagrams that tag the frame with a VXLAN Network ID (VNI) that identifies the originating overlay network. In addition, the overlay network driver supports an optional, off-by-default encrypted mode, which is especially useful when VXLAN packets traverses an untrusted network between nodes.
Encrypted overlay networks function by encapsulating the VXLAN datagrams through the use of the IPsec Encapsulating Security Payload protocol in Transport mode. By deploying IPSec encapsulation, encrypted overlay networks gain the additional properties of source authentication through cryptographic proof, data integrity through check-summing, and confidentiality through encryption.
When setting an endpoint up on an encrypted overlay network, Moby installs three iptables (Linux kernel firewall) rules that enforce both incoming and outgoing IPSec. These rules rely on the u32 iptables extension provided by the xt_u32 kernel module to directly filter on a VXLAN packet's VNI field, so that IPSec guarantees can be enforced on encrypted overlay networks without interfering with other overlay networks or other users of VXLAN.
Two iptables rules serve to filter incoming VXLAN datagrams with a VNI that corresponds to an encrypted network and discards unencrypted datagrams. The rules are appended to the end of the INPUT filter chain, following any rules that have been previously set by the system administrator. Administrator-set rules take precedence over the rules Moby sets to discard unencrypted VXLAN datagrams, which can potentially admit unencrypted datagrams that should have been discarded.
The injection of arbitrary Ethernet frames can enable a Denial of Service attack. A sophisticated attacker may be able to establish a UDP or TCP connection by way of the container’s outbound gateway that would otherwise be blocked by a stateful firewall, or carry out other escalations beyond simple injection by smuggling packets into the overlay network.
Patches are available in Moby releases 23.0.3 and 20.10.24. As Mirantis Container Runtime's 20.10 releases are numbered differently, users of that platform should update to 20.10.16.
Some workarounds are available. Close the VXLAN port (by default, UDP port 4789) to incoming traffic at the Internet boundary to prevent all VXLAN packet injection, and/or ensure that the `xt_u32` kernel module is available on all nodes of the Swarm cluster.
ImportantCVE-2023-28840SUSE bug 1214107SUSE bug 1215525cpe:/o:opensuse:leap-micro:5.4CVE-2023-28841openSUSE Leap Micro 5.4
Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component (`dockerd`), which is developed as moby/moby is commonly referred to as *Docker*.
Swarm Mode, which is compiled in and delivered by default in `dockerd` and is thus present in most major Moby downstreams, is a simple, built-in container orchestrator that is implemented through a combination of SwarmKit and supporting network code.
The `overlay` network driver is a core feature of Swarm Mode, providing isolated virtual LANs that allow communication between containers and services across the cluster. This driver is an implementation/user of VXLAN, which encapsulates link-layer (Ethernet) frames in UDP datagrams that tag the frame with the VXLAN metadata, including a VXLAN Network ID (VNI) that identifies the originating overlay network. In addition, the overlay network driver supports an optional, off-by-default encrypted mode, which is especially useful when VXLAN packets traverses an untrusted network between nodes.
Encrypted overlay networks function by encapsulating the VXLAN datagrams through the use of the IPsec Encapsulating Security Payload protocol in Transport mode. By deploying IPSec encapsulation, encrypted overlay networks gain the additional properties of source authentication through cryptographic proof, data integrity through check-summing, and confidentiality through encryption.
When setting an endpoint up on an encrypted overlay network, Moby installs three iptables (Linux kernel firewall) rules that enforce both incoming and outgoing IPSec. These rules rely on the `u32` iptables extension provided by the `xt_u32` kernel module to directly filter on a VXLAN packet's VNI field, so that IPSec guarantees can be enforced on encrypted overlay networks without interfering with other overlay networks or other users of VXLAN.
An iptables rule designates outgoing VXLAN datagrams with a VNI that corresponds to an encrypted overlay network for IPsec encapsulation.
Encrypted overlay networks on affected platforms silently transmit unencrypted data. As a result, `overlay` networks may appear to be functional, passing traffic as expected, but without any of the expected confidentiality or data integrity guarantees.
It is possible for an attacker sitting in a trusted position on the network to read all of the application traffic that is moving across the overlay network, resulting in unexpected secrets or user data disclosure. Thus, because many database protocols, internal APIs, etc. are not protected by a second layer of encryption, a user may use Swarm encrypted overlay networks to provide confidentiality, which due to this vulnerability this is no longer guaranteed.
Patches are available in Moby releases 23.0.3, and 20.10.24. As Mirantis Container Runtime's 20.10 releases are numbered differently, users of that platform should update to 20.10.16.
Some workarounds are available. Close the VXLAN port (by default, UDP port 4789) to outgoing traffic at the Internet boundary in order to prevent unintentionally leaking unencrypted traffic over the Internet, and/or ensure that the `xt_u32` kernel module is available on all nodes of the Swarm cluster.
ModerateCVE-2023-28841SUSE bug 1214108SUSE bug 1215525cpe:/o:opensuse:leap-micro:5.4CVE-2023-28842openSUSE Leap Micro 5.4
Moby) is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component (`dockerd`), which is developed as moby/moby is commonly referred to as *Docker*.
Swarm Mode, which is compiled in and delivered by default in `dockerd` and is thus present in most major Moby downstreams, is a simple, built-in container orchestrator that is implemented through a combination of SwarmKit and supporting network code.
The `overlay` network driver is a core feature of Swarm Mode, providing isolated virtual LANs that allow communication between containers and services across the cluster. This driver is an implementation/user of VXLAN, which encapsulates link-layer (Ethernet) frames in UDP datagrams that tag the frame with the VXLAN metadata, including a VXLAN Network ID (VNI) that identifies the originating overlay network. In addition, the overlay network driver supports an optional, off-by-default encrypted mode, which is especially useful when VXLAN packets traverses an untrusted network between nodes.
Encrypted overlay networks function by encapsulating the VXLAN datagrams through the use of the IPsec Encapsulating Security Payload protocol in Transport mode. By deploying IPSec encapsulation, encrypted overlay networks gain the additional properties of source authentication through cryptographic proof, data integrity through check-summing, and confidentiality through encryption.
When setting an endpoint up on an encrypted overlay network, Moby installs three iptables (Linux kernel firewall) rules that enforce both incoming and outgoing IPSec. These rules rely on the `u32` iptables extension provided by the `xt_u32` kernel module to directly filter on a VXLAN packet's VNI field, so that IPSec guarantees can be enforced on encrypted overlay networks without interfering with other overlay networks or other users of VXLAN.
The `overlay` driver dynamically and lazily defines the kernel configuration for the VXLAN network on each node as containers are attached and detached. Routes and encryption parameters are only defined for destination nodes that participate in the network. The iptables rules that prevent encrypted overlay networks from accepting unencrypted packets are not created until a peer is available with which to communicate.
Encrypted overlay networks silently accept cleartext VXLAN datagrams that are tagged with the VNI of an encrypted overlay network. As a result, it is possible to inject arbitrary Ethernet frames into the encrypted overlay network by encapsulating them in VXLAN datagrams. The implications of this can be quite dire, and GHSA-vwm3-crmr-xfxw should be referenced for a deeper exploration.
Patches are available in Moby releases 23.0.3, and 20.10.24. As Mirantis Container Runtime's 20.10 releases are numbered differently, users of that platform should update to 20.10.16.
Some workarounds are available. In multi-node clusters, deploy a global ‘pause’ container for each encrypted overlay network, on every node. For a single-node cluster, do not use overlay networks of any sort. Bridge networks provide the same connectivity on a single node and have no multi-node features. The Swarm ingress feature is implemented using an overlay network, but can be disabled by publishing ports in `host` mode instead of `ingress` mode (allowing the use of an external load balancer), and removing the `ingress` network. If encrypted overlay networks are in exclusive use, block UDP port 4789 from traffic that has not been validated by IPSec.
ModerateCVE-2023-28842SUSE bug 1214109SUSE bug 1215525cpe:/o:opensuse:leap-micro:5.4CVE-2023-28938openSUSE Leap Micro 5.4
Uncontrolled resource consumption in some Intel(R) SSD Tools software before version mdadm-4.2-rc2 may allow a priviledged user to potentially enable denial of service via local access.
LowCVE-2023-28938SUSE bug 1214245cpe:/o:opensuse:leap-micro:5.4CVE-2023-29469openSUSE Leap Micro 5.4
An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComputeFastKey in dict.c can produce non-deterministic values, leading to various logic and memory errors, such as a double free. This behavior occurs because there is an attempt to use the first byte of an empty string, and any value is possible (not solely the '\0' value).
ModerateCVE-2023-29469SUSE bug 1210412cpe:/o:opensuse:leap-micro:5.4CVE-2023-29491openSUSE Leap Micro 5.4
ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable.
ModerateCVE-2023-29491SUSE bug 1210434cpe:/o:opensuse:leap-micro:5.4CVE-2023-2953openSUSE Leap Micro 5.4
A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.
ModerateCVE-2023-2953SUSE bug 1211795cpe:/o:opensuse:leap-micro:5.4CVE-2023-2977openSUSE Leap Micro 5.4
A vulnerbility was found in OpenSC. This security flaw cause a buffer overrun vulnerability in pkcs15 cardos_have_verifyrc_package. The attacker can supply a smart card package with malformed ASN1 context. The cardos_have_verifyrc_package function scans the ASN1 buffer for 2 tags, where remaining length is wrongly caculated due to moved starting pointer. This leads to possible heap-based buffer oob read. In cases where ASAN is enabled while compiling this causes a crash. Further info leak or more damage is possible.
ModerateCVE-2023-2977SUSE bug 1211894cpe:/o:opensuse:leap-micro:5.4CVE-2023-2985openSUSE Leap Micro 5.4
A use after free flaw was found in hfsplus_put_super in fs/hfsplus/super.c in the Linux Kernel. This flaw could allow a local user to cause a denial of service problem.
ModerateCVE-2023-2985SUSE bug 1211867cpe:/o:opensuse:leap-micro:5.4CVE-2023-3006openSUSE Leap Micro 5.4
A known cache speculation vulnerability, known as Branch History Injection (BHI) or Spectre-BHB, becomes actual again for the new hw AmpereOne. Spectre-BHB is similar to Spectre v2, except that malicious code uses the shared branch history (stored in the CPU Branch History Buffer, or BHB) to influence mispredicted branches within the victim's hardware context. Once that occurs, speculation caused by the mispredicted branches can cause cache allocation. This issue leads to obtaining information that should not be accessible.
ModerateCVE-2023-3006SUSE bug 1211855cpe:/o:opensuse:leap-micro:5.4CVE-2023-30078openSUSE Leap Micro 5.4
A stack overflow vulnerability exists in function econf_writeFile in file atlibeconf/lib/libeconf.c in libeconf 0.5.1 allows attackers to cause a Denial of service or execute arbitrary code.
ImportantCVE-2023-30078SUSE bug 1214597cpe:/o:opensuse:leap-micro:5.4CVE-2023-30079openSUSE Leap Micro 5.4
A stack overflow vulnerability exists in function read_file in atlibeconf/lib/getfilecontents.c in libeconf 0.5.1 allows attackers to cause a Denial of service or execute arbitrary code.
ImportantCVE-2023-30079SUSE bug 1214598cpe:/o:opensuse:leap-micro:5.4CVE-2023-30456openSUSE Leap Micro 5.4
An issue was discovered in arch/x86/kvm/vmx/nested.c in the Linux kernel before 6.2.8. nVMX on x86_64 lacks consistency checks for CR0 and CR4.
ModerateCVE-2023-30456SUSE bug 1210294cpe:/o:opensuse:leap-micro:5.4CVE-2023-30630openSUSE Leap Micro 5.4
Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible.
ModerateCVE-2023-30630SUSE bug 1210418cpe:/o:opensuse:leap-micro:5.4CVE-2023-30772openSUSE Leap Micro 5.4
The Linux kernel before 6.2.9 has a race condition and resultant use-after-free in drivers/power/supply/da9150-charger.c if a physically proximate attacker unplugs a device.
ModerateCVE-2023-30772SUSE bug 1210329cpe:/o:opensuse:leap-micro:5.4CVE-2023-3090openSUSE Leap Micro 5.4
A heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation.
The out-of-bounds write is caused by missing skb->cb initialization in the ipvlan network driver. The vulnerability is reachable if?CONFIG_IPVLAN is enabled.
We recommend upgrading past commit 90cbed5247439a966b645b34eb0a2e037836ea8e.
ImportantCVE-2023-3090SUSE bug 1212842SUSE bug 1212849SUSE bug 1214128cpe:/o:opensuse:leap-micro:5.4CVE-2023-31083openSUSE Leap Micro 5.4
An issue was discovered in drivers/bluetooth/hci_ldisc.c in the Linux kernel 6.2. In hci_uart_tty_ioctl, there is a race condition between HCIUARTSETPROTO and HCIUARTGETPROTO. HCI_UART_PROTO_SET is set before hu->proto is set. A NULL pointer dereference may occur.
ModerateCVE-2023-31083SUSE bug 1210780cpe:/o:opensuse:leap-micro:5.4CVE-2023-31084openSUSE Leap Micro 5.4
An issue was discovered in drivers/media/dvb-core/dvb_frontend.c in the Linux kernel 6.2. There is a blocking operation when a task is in !TASK_RUNNING. In dvb_frontend_get_event, wait_event_interruptible is called; the condition is dvb_frontend_test_event(fepriv,events). In dvb_frontend_test_event, down(&fepriv->sem) is called. However, wait_event_interruptible would put the process to sleep, and down(&fepriv->sem) may block the process.
ModerateCVE-2023-31084SUSE bug 1210783cpe:/o:opensuse:leap-micro:5.4CVE-2023-3111openSUSE Leap Micro 5.4
A use after free vulnerability was found in prepare_to_relocate in fs/btrfs/relocation.c in btrfs in the Linux Kernel. This possible flaw can be triggered by calling btrfs_ioctl_balance() before calling btrfs_ioctl_defrag().
ModerateCVE-2023-3111SUSE bug 1212051cpe:/o:opensuse:leap-micro:5.4CVE-2023-31124openSUSE Leap Micro 5.4
c-ares is an asynchronous resolver library. When cross-compiling c-ares and using the autotools build system, CARES_RANDOM_FILE will not be set, as seen when cross compiling aarch64 android. This will downgrade to using rand() as a fallback which could allow an attacker to take advantage of the lack of entropy by not using a CSPRNG. This issue was patched in version 1.19.1.
LowCVE-2023-31124SUSE bug 1211607cpe:/o:opensuse:leap-micro:5.4CVE-2023-31130openSUSE Leap Micro 5.4
c-ares is an asynchronous resolver library. ares_inet_net_pton() is vulnerable to a buffer underflow for certain ipv6 addresses, in particular "0::00:00:00/2" was found to cause an issue. C-ares only uses this function internally for configuration purposes which would require an administrator to configure such an address via ares_set_sortlist(). However, users may externally use ares_inet_net_pton() for other purposes and thus be vulnerable to more severe issues. This issue has been fixed in 1.19.1.
ModerateCVE-2023-31130SUSE bug 1211606cpe:/o:opensuse:leap-micro:5.4CVE-2023-31147openSUSE Leap Micro 5.4
c-ares is an asynchronous resolver library. When /dev/urandom or RtlGenRandom() are unavailable, c-ares uses rand() to generate random numbers used for DNS query ids. This is not a CSPRNG, and it is also not seeded by srand() so will generate predictable output. Input from the random number generator is fed into a non-compilant RC4 implementation and may not be as strong as the original RC4 implementation. No attempt is made to look for modern OS-provided CSPRNGs like arc4random() that is widely available. This issue has been fixed in version 1.19.1.
ModerateCVE-2023-31147SUSE bug 1211605cpe:/o:opensuse:leap-micro:5.4CVE-2023-3117openSUSE Leap Micro 5.4
** REJECT ** Duplicate of CVE-2023-3390.
ImportantCVE-2023-3117SUSE bug 1212934SUSE bug 1213245cpe:/o:opensuse:leap-micro:5.4CVE-2023-31248openSUSE Leap Micro 5.4
Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; `nft_chain_lookup_byid()` failed to check whether a chain was active and CAP_NET_ADMIN is in any user or network namespace
ImportantCVE-2023-31248SUSE bug 1213061SUSE bug 1213064cpe:/o:opensuse:leap-micro:5.4CVE-2023-3138openSUSE Leap Micro 5.4
A vulnerability was found in libX11. The security flaw occurs because the functions in src/InitExt.c in libX11 do not check that the values provided for the Request, Event, or Error IDs are within the bounds of the arrays that those functions write to, using those IDs as array indexes. They trust that they were called with values provided by an Xserver adhering to the bounds specified in the X11 protocol, as all X servers provided by X.Org do. As the protocol only specifies a single byte for these values, an out-of-bounds value provided by a malicious server (or a malicious proxy-in-the-middle) can only overwrite other portions of the Display structure and not write outside the bounds of the Display structure itself, possibly causing the client to crash with this memory corruption.
ImportantCVE-2023-3138SUSE bug 1212102SUSE bug 1212746SUSE bug 1213994cpe:/o:opensuse:leap-micro:5.4CVE-2023-3141openSUSE Leap Micro 5.4
A use-after-free flaw was found in r592_remove in drivers/memstick/host/r592.c in media access in the Linux Kernel. This flaw allows a local attacker to crash the system at device disconnect, possibly leading to a kernel information leak.
ModerateCVE-2023-3141SUSE bug 1212129SUSE bug 1215674cpe:/o:opensuse:leap-micro:5.4CVE-2023-31436openSUSE Leap Micro 5.4
qfq_change_class in net/sched/sch_qfq.c in the Linux kernel before 6.2.13 allows an out-of-bounds write because lmax can exceed QFQ_MIN_LMAX.
ModerateCVE-2023-31436SUSE bug 1210940SUSE bug 1211260SUSE bug 1213841SUSE bug 1213842SUSE bug 1214128cpe:/o:opensuse:leap-micro:5.4CVE-2023-31484openSUSE Leap Micro 5.4
CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS.
ImportantCVE-2023-31484SUSE bug 1210999cpe:/o:opensuse:leap-micro:5.4CVE-2023-3161openSUSE Leap Micro 5.4
A flaw was found in the Framebuffer Console (fbcon) in the Linux Kernel. When providing font->width and font->height greater than 32 to fbcon_set_font, since there are no checks in place, a shift-out-of-bounds occurs leading to undefined behavior and possible denial of service.
ModerateCVE-2023-3161SUSE bug 1212154SUSE bug 1215674cpe:/o:opensuse:leap-micro:5.4CVE-2023-3180openSUSE Leap Micro 5.4
A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in virtio_crypto_handle_sym_req. There is no check for the value of `src_len` and `dst_len` in virtio_crypto_sym_op_helper, potentially leading to a heap buffer overflow when the two values differ.
ImportantCVE-2023-3180SUSE bug 1213925cpe:/o:opensuse:leap-micro:5.4CVE-2023-32001openSUSE Leap Micro 5.4
** REJECT ** We issued this CVE pre-maturely, as we have subsequently realized that this issue points out a problem that there really is no safe measures around or protections for.
ModerateCVE-2023-32001SUSE bug 1213237cpe:/o:opensuse:leap-micro:5.4CVE-2023-32067openSUSE Leap Micro 5.4
c-ares is an asynchronous resolver library. c-ares is vulnerable to denial of service. If a target resolver sends a query, the attacker forges a malformed UDP packet with a length of 0 and returns them to the target resolver. The target resolver erroneously interprets the 0 length as a graceful shutdown of the connection. This issue has been patched in version 1.19.1.
ImportantCVE-2023-32067SUSE bug 1211604cpe:/o:opensuse:leap-micro:5.4CVE-2023-3212openSUSE Leap Micro 5.4
A NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel. It occurs on corrupt gfs2 file systems when the evict code tries to reference the journal descriptor structure after it has been freed and set to NULL. A privileged local user could use this flaw to cause a kernel panic.
ModerateCVE-2023-3212SUSE bug 1212265cpe:/o:opensuse:leap-micro:5.4CVE-2023-32181openSUSE Leap Micro 5.4
A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf allows for DoS via malformed configuration files
This issue affects libeconf: before 0.5.2.
ImportantCVE-2023-32181SUSE bug 1211078cpe:/o:opensuse:leap-micro:5.4CVE-2023-32233openSUSE Leap Micro 5.4
In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. This occurs because anonymous sets are mishandled.
ImportantCVE-2023-32233SUSE bug 1211043SUSE bug 1211187cpe:/o:opensuse:leap-micro:5.4CVE-2023-32324openSUSE Leap Micro 5.4
OpenPrinting CUPS is an open source printing system. In versions 2.4.2 and prior, a heap buffer overflow vulnerability would allow a remote attacker to launch a denial of service (DoS) attack. A buffer overflow vulnerability in the function `format_log_line` could allow remote attackers to cause a DoS on the affected system. Exploitation of the vulnerability can be triggered when the configuration file `cupsd.conf` sets the value of `loglevel `to `DEBUG`. No known patches or workarounds exist at time of publication.
ModerateCVE-2023-32324SUSE bug 1211643cpe:/o:opensuse:leap-micro:5.4CVE-2023-32360openSUSE Leap Micro 5.4
An authentication issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. An unauthenticated user may be able to access recently printed documents.
ModerateCVE-2023-32360SUSE bug 1214254cpe:/o:opensuse:leap-micro:5.4CVE-2023-3255openSUSE Leap Micro 5.4
A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages. A wrong exit condition may lead to an infinite loop when inflating an attacker controlled zlib buffer in the `inflate_buffer` function. This could allow a remote authenticated client who is able to send a clipboard to the VNC server to trigger a denial of service.
ModerateCVE-2023-3255SUSE bug 1213001cpe:/o:opensuse:leap-micro:5.4CVE-2023-3268openSUSE Leap Micro 5.4
An out of bounds (OOB) memory access flaw was found in the Linux kernel in relay_file_read_start_pos in kernel/relay.c in the relayfs. This flaw could allow a local attacker to crash the system or leak kernel internal information.
ModerateCVE-2023-3268SUSE bug 1212502SUSE bug 1215674cpe:/o:opensuse:leap-micro:5.4CVE-2023-32681openSUSE Leap Micro 5.4
Requests is a HTTP library. Since Requests 2.3.0, Requests has been leaking Proxy-Authorization headers to destination servers when redirected to an HTTPS endpoint. This is a product of how we use `rebuild_proxies` to reattach the `Proxy-Authorization` header to requests. For HTTP connections sent through the tunnel, the proxy will identify the header in the request itself and remove it prior to forwarding to the destination server. However when sent over HTTPS, the `Proxy-Authorization` header must be sent in the CONNECT request as the proxy has no visibility into the tunneled request. This results in Requests forwarding proxy credentials to the destination server unintentionally, allowing a malicious actor to potentially exfiltrate sensitive information. This issue has been patched in version 2.31.0.
ModerateCVE-2023-32681SUSE bug 1211674cpe:/o:opensuse:leap-micro:5.4CVE-2023-3301openSUSE Leap Micro 5.4
A flaw was found in QEMU. The async nature of hot-unplug enables a race scenario where the net device backend is cleared before the virtio-net pci frontend has been unplugged. A malicious guest could use this time window to trigger an assertion and cause a denial of service.
ModerateCVE-2023-3301SUSE bug 1213414cpe:/o:opensuse:leap-micro:5.4CVE-2023-33288openSUSE Leap Micro 5.4
An issue was discovered in the Linux kernel before 6.2.9. A use-after-free was found in bq24190_remove in drivers/power/supply/bq24190_charger.c. It could allow a local attacker to crash the system due to a race condition.
ModerateCVE-2023-33288SUSE bug 1211590cpe:/o:opensuse:leap-micro:5.4CVE-2023-33460openSUSE Leap Micro 5.4
There's a memory leak in yajl 2.1.0 with use of yajl_tree_parse function. which will cause out-of-memory in server and cause crash.
ModerateCVE-2023-33460SUSE bug 1212928cpe:/o:opensuse:leap-micro:5.4CVE-2023-3354openSUSE Leap Micro 5.4
A flaw was found in the QEMU built-in VNC server. When a client connects to the VNC server, QEMU checks whether the current number of connections crosses a certain threshold and if so, cleans up the previous connection. If the previous connection happens to be in the handshake phase and fails, QEMU cleans up the connection again, resulting in a NULL pointer dereference issue. This could allow a remote unauthenticated client to cause a denial of service.
ImportantCVE-2023-3354SUSE bug 1212850cpe:/o:opensuse:leap-micro:5.4CVE-2023-3357openSUSE Leap Micro 5.4
A NULL pointer dereference flaw was found in the Linux kernel AMD Sensor Fusion Hub driver. This flaw allows a local user to crash the system.
ModerateCVE-2023-3357SUSE bug 1212605cpe:/o:opensuse:leap-micro:5.4CVE-2023-3358openSUSE Leap Micro 5.4
A null pointer dereference was found in the Linux kernel's Integrated Sensor Hub (ISH) driver. This issue could allow a local user to crash the system.
ModerateCVE-2023-3358SUSE bug 1212606cpe:/o:opensuse:leap-micro:5.4CVE-2023-3389openSUSE Leap Micro 5.4
A use-after-free vulnerability in the Linux Kernel io_uring subsystem can be exploited to achieve local privilege escalation.
Racing a io_uring cancel poll request with a linked timeout can cause a UAF in a hrtimer.
We recommend upgrading past commit ef7dfac51d8ed961b742218f526bd589f3900a59 (4716c73b188566865bdd79c3a6709696a224ac04 for 5.10 stable and?0e388fce7aec40992eadee654193cad345d62663 for 5.15 stable).
ModerateCVE-2023-3389SUSE bug 1212838cpe:/o:opensuse:leap-micro:5.4CVE-2023-3390openSUSE Leap Micro 5.4
A use-after-free vulnerability was found in the Linux kernel's netfilter subsystem in net/netfilter/nf_tables_api.c.
Mishandled error handling with NFT_MSG_NEWRULE makes it possible to use a dangling pointer in the same transaction causing a use-after-free vulnerability. This flaw allows a local attacker with user access to cause a privilege escalation issue.
We recommend upgrading past commit?1240eb93f0616b21c675416516ff3d74798fdc97.
ImportantCVE-2023-3390SUSE bug 1212846SUSE bug 1212934cpe:/o:opensuse:leap-micro:5.4CVE-2023-34241openSUSE Leap Micro 5.4
OpenPrinting CUPS is a standards-based, open source printing system for Linux and other Unix-like operating systems. Starting in version 2.0.0 and prior to version 2.4.6, CUPS logs data of free memory to the logging service AFTER the connection has been closed, when it should have logged the data right before. This is a use-after-free bug that impacts the entire cupsd process.
The exact cause of this issue is the function `httpClose(con->http)` being called in `scheduler/client.c`. The problem is that httpClose always, provided its argument is not null, frees the pointer at the end of the call, only for cupsdLogClient to pass the pointer to httpGetHostname. This issue happens in function `cupsdAcceptClient` if LogLevel is warn or higher and in two scenarios: there is a double-lookup for the IP Address (HostNameLookups Double is set in `cupsd.conf`) which fails to resolve, or if CUPS is compiled with TCP wrappers and the connection is refused by rules from `/etc/hosts.allow` and `/etc/hosts.deny`.
Version 2.4.6 has a patch for this issue.
ImportantCVE-2023-34241SUSE bug 1212230cpe:/o:opensuse:leap-micro:5.4CVE-2023-34319openSUSE Leap Micro 5.4
The fix for XSA-423 added logic to Linux'es netback driver to deal with
a frontend splitting a packet in a way such that not all of the headers
would come in one piece. Unfortunately the logic introduced there
didn't account for the extreme case of the entire packet being split
into as many pieces as permitted by the protocol, yet still being
smaller than the area that's specially dealt with to keep all (possible)
headers together. Such an unusual packet would therefore trigger a
buffer overrun in the driver.
ModerateCVE-2023-34319SUSE bug 1213546cpe:/o:opensuse:leap-micro:5.4CVE-2023-34322openSUSE Leap Micro 5.4
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
ImportantCVE-2023-34322SUSE bug 1215145cpe:/o:opensuse:leap-micro:5.4CVE-2023-34323openSUSE Leap Micro 5.4
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
ModerateCVE-2023-34323SUSE bug 1215744cpe:/o:opensuse:leap-micro:5.4CVE-2023-34325openSUSE Leap Micro 5.4
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
ModerateCVE-2023-34325SUSE bug 1215747cpe:/o:opensuse:leap-micro:5.4CVE-2023-34326openSUSE Leap Micro 5.4
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
ImportantCVE-2023-34326SUSE bug 1215746cpe:/o:opensuse:leap-micro:5.4CVE-2023-34327openSUSE Leap Micro 5.4
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
ModerateCVE-2023-34327SUSE bug 1215748cpe:/o:opensuse:leap-micro:5.4CVE-2023-34328openSUSE Leap Micro 5.4
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
ModerateCVE-2023-34328SUSE bug 1215748cpe:/o:opensuse:leap-micro:5.4CVE-2023-3446openSUSE Leap Micro 5.4
Issue summary: Checking excessively long DH keys or parameters may be very slow.
Impact summary: Applications that use the functions DH_check(), DH_check_ex()
or EVP_PKEY_param_check() to check a DH key or DH parameters may experience long
delays. Where the key or parameters that are being checked have been obtained
from an untrusted source this may lead to a Denial of Service.
The function DH_check() performs various checks on DH parameters. One of those
checks confirms that the modulus ('p' parameter) is not too large. Trying to use
a very large modulus is slow and OpenSSL will not normally use a modulus which
is over 10,000 bits in length.
However the DH_check() function checks numerous aspects of the key or parameters
that have been supplied. Some of those checks use the supplied modulus value
even if it has already been found to be too large.
An application that calls DH_check() and supplies a key or parameters obtained
from an untrusted source could be vulernable to a Denial of Service attack.
The function DH_check() is itself called by a number of other OpenSSL functions.
An application calling any of those other functions may similarly be affected.
The other functions affected by this are DH_check_ex() and
EVP_PKEY_param_check().
Also vulnerable are the OpenSSL dhparam and pkeyparam command line applications
when using the '-check' option.
The OpenSSL SSL/TLS implementation is not affected by this issue.
The OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.
ModerateCVE-2023-3446SUSE bug 1213487SUSE bug 1213853cpe:/o:opensuse:leap-micro:5.4CVE-2023-34966openSUSE Leap Micro 5.4
An infinite loop vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets sent by the client, the core unmarshalling function sl_unpack_loop() did not validate a field in the network packet that contains the count of elements in an array-like structure. By passing 0 as the count value, the attacked function will run in an endless loop consuming 100% CPU. This flaw allows an attacker to issue a malformed RPC request, triggering an infinite loop, resulting in a denial of service condition.
ImportantCVE-2023-34966SUSE bug 1213173cpe:/o:opensuse:leap-micro:5.4CVE-2023-34967openSUSE Leap Micro 5.4
A Type Confusion vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets, one encoded data structure is a key-value style dictionary where the keys are character strings, and the values can be any of the supported types in the mdssvc protocol. Due to a lack of type checking in callers of the dalloc_value_for_key() function, which returns the object associated with a key, a caller may trigger a crash in talloc_get_size() when talloc detects that the passed-in pointer is not a valid talloc pointer. With an RPC worker process shared among multiple client connections, a malicious client or attacker can trigger a process crash in a shared RPC mdssvc worker process, affecting all other clients this worker serves.
ModerateCVE-2023-34967SUSE bug 1213172cpe:/o:opensuse:leap-micro:5.4CVE-2023-34968openSUSE Leap Micro 5.4
A path disclosure vulnerability was found in Samba. As part of the Spotlight protocol, Samba discloses the server-side absolute path of shares, files, and directories in the results for search queries. This flaw allows a malicious client or an attacker with a targeted RPC request to view the information that is part of the disclosed path.
ModerateCVE-2023-34968SUSE bug 1213171cpe:/o:opensuse:leap-micro:5.4CVE-2023-34969openSUSE Leap Micro 5.4
D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon. If a privileged user with control over the dbus-daemon is using the org.freedesktop.DBus.Monitoring interface to monitor message bus traffic, then an unprivileged user with the ability to connect to the same dbus-daemon can cause a dbus-daemon crash under some circumstances via an unreplyable message. When done on the well-known system bus, this is a denial-of-service vulnerability. The fixed versions are 1.12.28, 1.14.8, and 1.15.6.
ModerateCVE-2023-34969SUSE bug 1212126cpe:/o:opensuse:leap-micro:5.4CVE-2023-35001openSUSE Leap Micro 5.4
Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace
ImportantCVE-2023-35001SUSE bug 1213059SUSE bug 1213063cpe:/o:opensuse:leap-micro:5.4CVE-2023-3567openSUSE Leap Micro 5.4
A use-after-free flaw was found in vcs_read in drivers/tty/vt/vc_screen.c in vc_screen in the Linux Kernel. This issue may allow an attacker with local user access to cause a system crash or leak internal kernel information.
ImportantCVE-2023-3567SUSE bug 1213167SUSE bug 1213244SUSE bug 1213842SUSE bug 1215674cpe:/o:opensuse:leap-micro:5.4CVE-2023-35788openSUSE Leap Micro 5.4
An issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before 6.3.7. It allows an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets. This may result in denial of service or privilege escalation.
ImportantCVE-2023-35788SUSE bug 1212504SUSE bug 1212509cpe:/o:opensuse:leap-micro:5.4CVE-2023-35823openSUSE Leap Micro 5.4
An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in saa7134_finidev in drivers/media/pci/saa7134/saa7134-core.c.
ModerateCVE-2023-35823SUSE bug 1212494cpe:/o:opensuse:leap-micro:5.4CVE-2023-35828openSUSE Leap Micro 5.4
An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in renesas_usb3_remove in drivers/usb/gadget/udc/renesas_usb3.c.
ModerateCVE-2023-35828SUSE bug 1212513cpe:/o:opensuse:leap-micro:5.4CVE-2023-35829openSUSE Leap Micro 5.4
An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in rkvdec_remove in drivers/staging/media/rkvdec/rkvdec.c.
ModerateCVE-2023-35829SUSE bug 1212495cpe:/o:opensuse:leap-micro:5.4CVE-2023-35945openSUSE Leap Micro 5.4
Envoy is a cloud-native high-performance edge/middle/service proxy. Envoy’s HTTP/2 codec may leak a header map and bookkeeping structures upon receiving `RST_STREAM` immediately followed by the `GOAWAY` frames from an upstream server. In nghttp2, cleanup of pending requests due to receipt of the `GOAWAY` frame skips de-allocation of the bookkeeping structure and pending compressed header. The error return [code path] is taken if connection is already marked for not sending more requests due to `GOAWAY` frame. The clean-up code is right after the return statement, causing memory leak. Denial of service through memory exhaustion. This vulnerability was patched in versions(s) 1.26.3, 1.25.8, 1.24.9, 1.23.11.
ImportantCVE-2023-35945SUSE bug 1215713cpe:/o:opensuse:leap-micro:5.4CVE-2023-36054openSUSE Leap Micro 5.4
lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.
ImportantCVE-2023-36054SUSE bug 1214054cpe:/o:opensuse:leap-micro:5.4CVE-2023-3609openSUSE Leap Micro 5.4
A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation.
If tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability.
We recommend upgrading past commit 04c55383fa5689357bcdd2c8036725a55ed632bc.
ModerateCVE-2023-3609SUSE bug 1213586SUSE bug 1213587cpe:/o:opensuse:leap-micro:5.4CVE-2023-3610openSUSE Leap Micro 5.4
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
Flaw in the error handling of bound chains causes a use-after-free in the abort path of NFT_MSG_NEWRULE. The vulnerability requires CAP_NET_ADMIN to be triggered.
We recommend upgrading past commit 4bedf9eee016286c835e3d8fa981ddece5338795.
ImportantCVE-2023-3610SUSE bug 1213580SUSE bug 1213584cpe:/o:opensuse:leap-micro:5.4CVE-2023-3611openSUSE Leap Micro 5.4
An out-of-bounds write vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation.
The qfq_change_agg() function in net/sched/sch_qfq.c allows an out-of-bounds write because lmax is updated according to packet sizes without bounds checks.
We recommend upgrading past commit 3e337087c3b5805fe0b8a46ba622a962880b5d64.
ModerateCVE-2023-3611SUSE bug 1213585cpe:/o:opensuse:leap-micro:5.4CVE-2023-37327openSUSE Leap Micro 5.4
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
ImportantCVE-2023-37327SUSE bug 1213128cpe:/o:opensuse:leap-micro:5.4CVE-2023-37328openSUSE Leap Micro 5.4
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
ImportantCVE-2023-37328SUSE bug 1213131cpe:/o:opensuse:leap-micro:5.4CVE-2023-37453openSUSE Leap Micro 5.4
An issue was discovered in the USB subsystem in the Linux kernel through 6.4.2. There is an out-of-bounds and crash in read_descriptors in drivers/usb/core/sysfs.c.
ModerateCVE-2023-37453SUSE bug 1213123cpe:/o:opensuse:leap-micro:5.4CVE-2023-3772openSUSE Leap Micro 5.4
A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer in xfrm_update_ae_params(), leading to a possible kernel crash and denial of service.
ModerateCVE-2023-3772SUSE bug 1213666cpe:/o:opensuse:leap-micro:5.4CVE-2023-3776openSUSE Leap Micro 5.4
A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation.
If tcf_change_indev() fails, fw_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability.
We recommend upgrading past commit 0323bce598eea038714f941ce2b22541c46d488f.
ModerateCVE-2023-3776SUSE bug 1213588SUSE bug 1215119SUSE bug 1215674cpe:/o:opensuse:leap-micro:5.4CVE-2023-38039openSUSE Leap Micro 5.4
When curl retrieves an HTTP response, it stores the incoming headers so that
they can be accessed later via the libcurl headers API.
However, curl did not have a limit in how many or how large headers it would
accept in a response, allowing a malicious server to stream an endless series
of headers and eventually cause curl to run out of heap memory.
ImportantCVE-2023-38039SUSE bug 1215026cpe:/o:opensuse:leap-micro:5.4CVE-2023-3812openSUSE Leap Micro 5.4
An out-of-bounds memory access flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user generates a malicious (too big) networking packet when napi frags is enabled. This flaw allows a local user to crash or potentially escalate their privileges on the system.
ImportantCVE-2023-3812SUSE bug 1213543SUSE bug 1213706cpe:/o:opensuse:leap-micro:5.4CVE-2023-3817openSUSE Leap Micro 5.4
Issue summary: Checking excessively long DH keys or parameters may be very slow.
Impact summary: Applications that use the functions DH_check(), DH_check_ex()
or EVP_PKEY_param_check() to check a DH key or DH parameters may experience long
delays. Where the key or parameters that are being checked have been obtained
from an untrusted source this may lead to a Denial of Service.
The function DH_check() performs various checks on DH parameters. After fixing
CVE-2023-3446 it was discovered that a large q parameter value can also trigger
an overly long computation during some of these checks. A correct q value,
if present, cannot be larger than the modulus p parameter, thus it is
unnecessary to perform these checks if q is larger than p.
An application that calls DH_check() and supplies a key or parameters obtained
from an untrusted source could be vulnerable to a Denial of Service attack.
The function DH_check() is itself called by a number of other OpenSSL functions.
An application calling any of those other functions may similarly be affected.
The other functions affected by this are DH_check_ex() and
EVP_PKEY_param_check().
Also vulnerable are the OpenSSL dhparam and pkeyparam command line applications
when using the "-check" option.
The OpenSSL SSL/TLS implementation is not affected by this issue.
The OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.
ModerateCVE-2023-3817SUSE bug 1213853cpe:/o:opensuse:leap-micro:5.4CVE-2023-38408openSUSE Leap Micro 5.4
The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. (Code in /usr/lib is not necessarily safe for loading into ssh-agent.) NOTE: this issue exists because of an incomplete fix for CVE-2016-10009.
ImportantCVE-2023-38408SUSE bug 1213504cpe:/o:opensuse:leap-micro:5.4CVE-2023-38545openSUSE Leap Micro 5.4
This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy
handshake.
When curl is asked to pass along the host name to the SOCKS5 proxy to allow
that to resolve the address instead of it getting done by curl itself, the
maximum length that host name can be is 255 bytes.
If the host name is detected to be longer, curl switches to local name
resolving and instead passes on the resolved address only. Due to this bug,
the local variable that means "let the host resolve the name" could get the
wrong value during a slow SOCKS5 handshake, and contrary to the intention,
copy the too long host name to the target buffer instead of copying just the
resolved address there.
The target buffer being a heap based buffer, and the host name coming from the
URL that curl has been told to operate with.
ImportantCVE-2023-38545SUSE bug 1215888cpe:/o:opensuse:leap-micro:5.4CVE-2023-38546openSUSE Leap Micro 5.4
This flaw allows an attacker to insert cookies at will into a running program
using libcurl, if the specific series of conditions are met.
libcurl performs transfers. In its API, an application creates "easy handles"
that are the individual handles for single transfers.
libcurl provides a function call that duplicates en easy handle called
[curl_easy_duphandle](https://curl.se/libcurl/c/curl_easy_duphandle.html).
If a transfer has cookies enabled when the handle is duplicated, the
cookie-enable state is also cloned - but without cloning the actual
cookies. If the source handle did not read any cookies from a specific file on
disk, the cloned version of the handle would instead store the file name as
`none` (using the four ASCII letters, no quotes).
Subsequent use of the cloned handle that does not explicitly set a source to
load cookies from would then inadvertently load cookies from a file named
`none` - if such a file exists and is readable in the current directory of the
program using libcurl. And if using the correct file format of course.
ModerateCVE-2023-38546SUSE bug 1215889cpe:/o:opensuse:leap-micro:5.4CVE-2023-3863openSUSE Leap Micro 5.4
A use-after-free flaw was found in nfc_llcp_find_local in net/nfc/llcp_core.c in NFC in the Linux kernel. This flaw allows a local user with special privileges to impact a kernel information leak issue.
ImportantCVE-2023-3863SUSE bug 1213601SUSE bug 1213603cpe:/o:opensuse:leap-micro:5.4CVE-2023-38633openSUSE Leap Micro 5.4
A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem outside of the expected area), as demonstrated by href=".?../../../../../../../../../../etc/passwd" in an xi:include element.
ImportantCVE-2023-38633SUSE bug 1213502cpe:/o:opensuse:leap-micro:5.4CVE-2023-39192openSUSE Leap Micro 5.4
A flaw was found in the Netfilter subsystem in the Linux kernel. The xt_u32 module did not validate the fields in the xt_u32 structure. This flaw allows a local privileged attacker to trigger an out-of-bounds read by setting the size fields with a value beyond the array boundaries, leading to a crash or information disclosure.
ModerateCVE-2023-39192SUSE bug 1215858cpe:/o:opensuse:leap-micro:5.4CVE-2023-39193openSUSE Leap Micro 5.4
A flaw was found in the Netfilter subsystem in the Linux kernel. The sctp_mt_check did not validate the flag_count field. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, leading to a crash or information disclosure.
ModerateCVE-2023-39193SUSE bug 1215860cpe:/o:opensuse:leap-micro:5.4CVE-2023-39194openSUSE Leap Micro 5.4
A flaw was found in the XFRM subsystem in the Linux kernel. The specific flaw exists within the processing of state filters, which can result in a read past the end of an allocated buffer. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, potentially leading to an information disclosure.
LowCVE-2023-39194SUSE bug 1215861cpe:/o:opensuse:leap-micro:5.4CVE-2023-39615openSUSE Leap Micro 5.4
** DISPUTED ** Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted XML file. NOTE: the vendor's position is that the product does not support the legacy SAX1 interface with custom callbacks; there is a crash even without crafted input.
ModerateCVE-2023-39615SUSE bug 1214768cpe:/o:opensuse:leap-micro:5.4CVE-2023-4004openSUSE Leap Micro 5.4
A use-after-free flaw was found in the Linux kernel's netfilter in the way a user triggers the nft_pipapo_remove function with the element, without a NFT_SET_EXT_KEY_END. This issue could allow a local user to crash the system or potentially escalate their privileges on the system.
ImportantCVE-2023-4004SUSE bug 1213812SUSE bug 1214812cpe:/o:opensuse:leap-micro:5.4CVE-2023-4016openSUSE Leap Micro 5.4
Under some circumstances, this weakness allows a user who has access to run the “ps” utility on a machine, the ability to write almost unlimited amounts of unfiltered data into the process heap.
LowCVE-2023-4016SUSE bug 1214290cpe:/o:opensuse:leap-micro:5.4CVE-2023-40217openSUSE Leap Micro 5.4
An issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and 3.11.x before 3.11.5. It primarily affects servers (such as HTTP servers) that use TLS client authentication. If a TLS server-side socket is created, receives data into the socket buffer, and then is closed quickly, there is a brief window where the SSLSocket instance will detect the socket as "not connected" and won't initiate a handshake, but buffered data will still be readable from the socket buffer. This data will not be authenticated if the server-side TLS peer is expecting client certificate authentication, and is indistinguishable from valid TLS stream data. Data is limited in size to the amount that will fit in the buffer. (The TLS connection cannot directly be used for data exfiltration because the vulnerable code path requires that the connection be closed on initialization of the SSLSocket.)
ImportantCVE-2023-40217SUSE bug 1214692cpe:/o:opensuse:leap-micro:5.4CVE-2023-40225openSUSE Leap Micro 5.4
HAProxy through 2.0.32, 2.1.x and 2.2.x through 2.2.30, 2.3.x and 2.4.x through 2.4.23, 2.5.x and 2.6.x before 2.6.15, 2.7.x before 2.7.10, and 2.8.x before 2.8.2 forwards empty Content-Length headers, violating RFC 9110 section 8.6. In uncommon cases, an HTTP/1 server behind HAProxy may interpret the payload as an extra request.
ModerateCVE-2023-40225SUSE bug 1214102cpe:/o:opensuse:leap-micro:5.4CVE-2023-4039openSUSE Leap Micro 5.4
A failure in the -fstack-protector feature in GCC-based toolchains
that target AArch64 allows an attacker to exploit an existing buffer
overflow in dynamically-sized local variables in your application
without this being detected. This stack-protector failure only applies
to C99-style dynamically-sized local variables or those created using
alloca(). The stack-protector operates as intended for statically-sized
local variables.
The default behavior when the stack-protector
detects an overflow is to terminate your application, resulting in
controlled loss of availability. An attacker who can exploit a buffer
overflow without triggering the stack-protector might be able to change
program flow control to cause an uncontrolled loss of availability or to
go further and affect confidentiality or integrity.
ImportantCVE-2023-4039SUSE bug 1214052cpe:/o:opensuse:leap-micro:5.4CVE-2023-40660openSUSE Leap Micro 5.4
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
ImportantCVE-2023-40660SUSE bug 1215762cpe:/o:opensuse:leap-micro:5.4CVE-2023-40661openSUSE Leap Micro 5.4
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
ModerateCVE-2023-40661SUSE bug 1215761cpe:/o:opensuse:leap-micro:5.4CVE-2023-4091openSUSE Leap Micro 5.4
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
ModerateCVE-2023-4091SUSE bug 1215904cpe:/o:opensuse:leap-micro:5.4CVE-2023-4128openSUSE Leap Micro 5.4
A use-after-free flaw was found in net/sched/cls_fw.c in classifiers (cls_fw, cls_u32, and cls_route) in the Linux Kernel. This flaw allows a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak issue.
ModerateCVE-2023-4128SUSE bug 1214149cpe:/o:opensuse:leap-micro:5.4CVE-2023-4133openSUSE Leap Micro 5.4
A use-after-free vulnerability was found in the cxgb4 driver in the Linux kernel. The bug occurs when the cxgb4 device is detaching due to a possible rearming of the flower_stats_timer from the work queue. This flaw allows a local user to crash the system, causing a denial of service condition.
ModerateCVE-2023-4133SUSE bug 1213970cpe:/o:opensuse:leap-micro:5.4CVE-2023-4134openSUSE Leap Micro 5.4
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
ModerateCVE-2023-4134SUSE bug 1213971cpe:/o:opensuse:leap-micro:5.4CVE-2023-4147openSUSE Leap Micro 5.4
A use-after-free flaw was found in the Linux kernel’s Netfilter functionality when adding a rule with NFTA_RULE_CHAIN_ID. This flaw allows a local user to crash or escalate their privileges on the system.
ImportantCVE-2023-4147SUSE bug 1213968SUSE bug 1215118cpe:/o:opensuse:leap-micro:5.4CVE-2023-4154openSUSE Leap Micro 5.4
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
ImportantCVE-2023-4154SUSE bug 1215908cpe:/o:opensuse:leap-micro:5.4CVE-2023-4155openSUSE Leap Micro 5.4
A flaw was found in KVM AMD Secure Encrypted Virtualization (SEV) in the Linux kernel. A KVM guest using SEV-ES or SEV-SNP with multiple vCPUs can trigger a double fetch race condition vulnerability and invoke the `VMGEXIT` handler recursively. If an attacker manages to call the handler multiple times, they can trigger a stack overflow and cause a denial of service or potentially guest-to-host escape in kernel configurations without stack guard pages (`CONFIG_VMAP_STACK`).
ModerateCVE-2023-4155SUSE bug 1214022cpe:/o:opensuse:leap-micro:5.4CVE-2023-4156openSUSE Leap Micro 5.4
A heap out-of-bounds read flaw was found in builtin.c in the gawk package. This issue may lead to a crash and could be used to read sensitive information.
LowCVE-2023-4156SUSE bug 1214025cpe:/o:opensuse:leap-micro:5.4CVE-2023-4194openSUSE Leap Micro 5.4
A flaw was found in the Linux kernel's TUN/TAP functionality. This issue could allow a local user to bypass network filters and gain unauthorized access to some resources. The original patches fixing CVE-2023-1076 are incorrect or incomplete. The problem is that the following upstream commits - a096ccca6e50 ("tun: tun_chr_open(): correctly initialize socket uid"), - 66b2c338adce ("tap: tap_open(): correctly initialize socket uid"), pass "inode->i_uid" to sock_init_data_uid() as the last parameter and that turns out to not be accurate.
ModerateCVE-2023-4194SUSE bug 1214019cpe:/o:opensuse:leap-micro:5.4CVE-2023-42669openSUSE Leap Micro 5.4
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
ModerateCVE-2023-42669SUSE bug 1215905cpe:/o:opensuse:leap-micro:5.4CVE-2023-4273openSUSE Leap Micro 5.4
A flaw was found in the exFAT driver of the Linux kernel. The vulnerability exists in the implementation of the file name reconstruction function, which is responsible for reading file name entries from a directory index and merging file name parts belonging to one file into a single long file name. Since the file name characters are copied into a stack variable, a local privileged attacker could use this flaw to overflow the kernel stack.
ImportantCVE-2023-4273SUSE bug 1214120SUSE bug 1214123cpe:/o:opensuse:leap-micro:5.4CVE-2023-42753openSUSE Leap Micro 5.4
An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the `h->nets` array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer out-of-bound. This issue may allow a local user to crash the system or potentially escalate their privileges on the system.
ModerateCVE-2023-42753cpe:/o:opensuse:leap-micro:5.4CVE-2023-42754openSUSE Leap Micro 5.4
A NULL pointer dereference flaw was found in the Linux kernel ipv4 stack. The socket buffer (skb) was assumed to be associated with a device before calling __ip_options_compile, which is not always the case if the skb is re-routed by ipvs. This issue may allow a local user with CAP_NET_ADMIN privileges to crash the system.
ModerateCVE-2023-42754SUSE bug 1215467cpe:/o:opensuse:leap-micro:5.4CVE-2023-43785openSUSE Leap Micro 5.4
A vulnerability was found in libX11 due to a boundary condition within the _XkbReadKeySyms() function. This flaw allows a local user to trigger an out-of-bounds read error and read the contents of memory on the system.
LowCVE-2023-43785SUSE bug 1215683cpe:/o:opensuse:leap-micro:5.4CVE-2023-43786openSUSE Leap Micro 5.4
A vulnerability was found in libX11 due to an infinite loop within the PutSubImage() function. This flaw allows a local user to consume all available system resources and cause a denial of service condition.
LowCVE-2023-43786SUSE bug 1215682SUSE bug 1215684cpe:/o:opensuse:leap-micro:5.4CVE-2023-43787openSUSE Leap Micro 5.4
A vulnerability was found in libX11 due to an integer overflow within the XCreateImage() function. This flaw allows a local user to trigger an integer overflow and execute arbitrary code with elevated privileges.
LowCVE-2023-43787SUSE bug 1215682SUSE bug 1215685cpe:/o:opensuse:leap-micro:5.4CVE-2023-43804openSUSE Leap Micro 5.4
urllib3 is a user-friendly HTTP client library for Python. urllib3 doesn't treat the `Cookie` HTTP header special or provide any helpers for managing cookies over HTTP, that is the responsibility of the user. However, it is possible for a user to specify a `Cookie` header and unknowingly leak information via HTTP redirects to a different origin if that user doesn't disable redirects explicitly. This issue has been patched in urllib3 version 1.26.17 or 2.0.5.
ModerateCVE-2023-43804SUSE bug 1215968cpe:/o:opensuse:leap-micro:5.4CVE-2023-4387openSUSE Leap Micro 5.4
A use-after-free flaw was found in vmxnet3_rq_alloc_rx_buf in drivers/net/vmxnet3/vmxnet3_drv.c in VMware's vmxnet3 ethernet NIC driver in the Linux Kernel. This issue could allow a local attacker to crash the system due to a double-free while cleaning up vmxnet3_rq_cleanup_all, which could also lead to a kernel information leak problem.
ModerateCVE-2023-4387SUSE bug 1214350cpe:/o:opensuse:leap-micro:5.4CVE-2023-4389openSUSE Leap Micro 5.4
A flaw was found in btrfs_get_root_ref in fs/btrfs/disk-io.c in the btrfs filesystem in the Linux Kernel due to a double decrement of the reference count. This issue may allow a local attacker with user privilege to crash the system or may lead to leaked internal kernel information.
ModerateCVE-2023-4389SUSE bug 1214351cpe:/o:opensuse:leap-micro:5.4CVE-2023-4459openSUSE Leap Micro 5.4
A NULL pointer dereference flaw was found in vmxnet3_rq_cleanup in drivers/net/vmxnet3/vmxnet3_drv.c in the networking sub-component in vmxnet3 in the Linux Kernel. This issue may allow a local attacker with normal user privilege to cause a denial of service due to a missing sanity check during cleanup.
ModerateCVE-2023-4459SUSE bug 1214451cpe:/o:opensuse:leap-micro:5.4CVE-2023-4504openSUSE Leap Micro 5.4
Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to a heap-based buffer overflow and possibly code execution. This issue has been fixed in CUPS version 2.4.7, released in September of 2023.
ImportantCVE-2023-4504SUSE bug 1215204cpe:/o:opensuse:leap-micro:5.4CVE-2023-4563openSUSE Leap Micro 5.4
** REJECT ** This was assigned as a duplicate of CVE-2023-4244.
LowCVE-2023-4563SUSE bug 1214727cpe:/o:opensuse:leap-micro:5.4CVE-2023-4569openSUSE Leap Micro 5.4
A memory leak flaw was found in nft_set_catchall_flush in net/netfilter/nf_tables_api.c in the Linux Kernel. This issue may allow a local attacker to cause a double-deactivations of catchall elements, which results in a memory leak.
LowCVE-2023-4569SUSE bug 1214729cpe:/o:opensuse:leap-micro:5.4CVE-2023-4622openSUSE Leap Micro 5.4
A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation.
The unix_stream_sendpage() function tries to add data to the last skb in the peer's recv queue without locking the queue. Thus there is a race where unix_stream_sendpage() could access an skb locklessly that is being released by garbage collection, resulting in use-after-free.
We recommend upgrading past commit 790c2f9d15b594350ae9bca7b236f2b1859de02c.
ImportantCVE-2023-4622SUSE bug 1215117SUSE bug 1215442cpe:/o:opensuse:leap-micro:5.4CVE-2023-4623openSUSE Leap Micro 5.4
A use-after-free vulnerability in the Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component can be exploited to achieve local privilege escalation.
If a class with a link-sharing curve (i.e. with the HFSC_FSC flag set) has a parent without a link-sharing curve, then init_vf() will call vttree_insert() on the parent, but vttree_remove() will be skipped in update_vf(). This leaves a dangling pointer that can cause a use-after-free.
We recommend upgrading past commit b3d26c5702c7d6c45456326e56d2ccf3f103e60f.
ImportantCVE-2023-4623SUSE bug 1215115SUSE bug 1215440cpe:/o:opensuse:leap-micro:5.4CVE-2023-4641openSUSE Leap Micro 5.4
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
LowCVE-2023-4641SUSE bug 1214806cpe:/o:opensuse:leap-micro:5.4CVE-2023-4733openSUSE Leap Micro 5.4
Use After Free in GitHub repository vim/vim prior to 9.0.1840.
ImportantCVE-2023-4733SUSE bug 1215004cpe:/o:opensuse:leap-micro:5.4CVE-2023-4734openSUSE Leap Micro 5.4
Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846.
ModerateCVE-2023-4734SUSE bug 1214925cpe:/o:opensuse:leap-micro:5.4CVE-2023-4735openSUSE Leap Micro 5.4
Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1847.
LowCVE-2023-4735SUSE bug 1214924cpe:/o:opensuse:leap-micro:5.4CVE-2023-4738openSUSE Leap Micro 5.4
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848.
ImportantCVE-2023-4738SUSE bug 1214922cpe:/o:opensuse:leap-micro:5.4CVE-2023-4752openSUSE Leap Micro 5.4
Use After Free in GitHub repository vim/vim prior to 9.0.1858.
ImportantCVE-2023-4752SUSE bug 1215006cpe:/o:opensuse:leap-micro:5.4CVE-2023-4781openSUSE Leap Micro 5.4
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873.
ImportantCVE-2023-4781SUSE bug 1215033SUSE bug 1215457cpe:/o:opensuse:leap-micro:5.4CVE-2023-4813openSUSE Leap Micro 5.4
A flaw was found in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured with SUCCESS=continue or SUCCESS=merge.
ModerateCVE-2023-4813SUSE bug 1215286cpe:/o:opensuse:leap-micro:5.4CVE-2023-4881openSUSE Leap Micro 5.4
** REJECT ** CVE-2023-4881 was wrongly assigned to a bug that was deemed to be a non-security issue by the Linux kernel security team.
ModerateCVE-2023-4881SUSE bug 1215221cpe:/o:opensuse:leap-micro:5.4CVE-2023-4921openSUSE Leap Micro 5.4
A use-after-free vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation.
When the plug qdisc is used as a class of the qfq qdisc, sending network packets triggers use-after-free in qfq_dequeue() due to the incorrect .peek handler of sch_plug and lack of error checking in agg_dequeue().
We recommend upgrading past commit 8fc134fee27f2263988ae38920bc03da416b03d8.
ImportantCVE-2023-4921SUSE bug 1215275SUSE bug 1215300cpe:/o:opensuse:leap-micro:5.4CVE-2023-5345openSUSE Leap Micro 5.4
A use-after-free vulnerability in the Linux kernel's fs/smb/client component can be exploited to achieve local privilege escalation.
In case of an error in smb3_fs_context_parse_param, ctx->password was freed but the field was not set to NULL which could lead to double free.
We recommend upgrading past commit e6e43b8aa7cd3c3af686caf0c2e11819a886d705.
ModerateCVE-2023-5345SUSE bug 1215899SUSE bug 1215971cpe:/o:opensuse:leap-micro:5.4libpython3_6m1_0python3python3-baseopenSUSE-releasekernel-defaultkgraft-patch-3_12_38-44-defaultkgraft-patch-3_12_39-47-defaultkgraft-patch-3_12_43-52_6-defaultkgraft-patch-3_12_44-52_10-defaultkgraft-patch-3_12_44-52_18-defaultkgraft-patch-3_12_48-52_27-defaultkgraft-patch-3_12_49-11-defaultkgraft-patch-3_12_51-52_31-defaultkgraft-patch-3_12_51-52_34-defaultkgraft-patch-3_12_51-52_39-defaultkgraft-patch-3_12_51-60_20-defaultkgraft-patch-3_12_51-60_25-defaultkgraft-patch-3_12_53-60_30-defaultkgraft-patch-3_12_57-60_35-defaultkgraft-patch-3_12_59-60_41-defaultkgraft-patch-3_12_59-60_45-defaultkgraft-patch-3_12_32-33-defaultkgraft-patch-3_12_36-38-defaultkgraft-patch-4_4_21-69-defaultkgraft-patch-4_4_21-81-defaultkgraft-patch-4_4_21-84-defaultkgraft-patch-4_4_21-90-defaultkgraft-patch-4_4_38-93-defaultkgraft-patch-3_12_62-60_62-defaultkgraft-patch-3_12_62-60_64_8-defaultkgraft-patch-3_12_67-60_64_18-defaultkgraft-patch-3_12_67-60_64_21-defaultkgraft-patch-4_4_103-6_33-defaultkgraft-patch-4_4_103-6_38-defaultkgraft-patch-4_4_82-6_3-defaultkgraft-patch-4_4_82-6_6-defaultkgraft-patch-4_4_82-6_9-defaultkgraft-patch-4_4_92-6_18-defaultkgraft-patch-4_4_92-6_30-defaultkgraft-patch-4_4_49-92_11-defaultkgraft-patch-4_4_49-92_14-defaultkgraft-patch-4_4_59-92_17-defaultkgraft-patch-4_4_59-92_20-defaultkgraft-patch-4_4_59-92_24-defaultkgraft-patch-4_4_74-92_29-defaultkgraft-patch-4_4_74-92_32-defaultkgraft-patch-4_4_74-92_35-defaultkgraft-patch-4_4_74-92_38-defaultkgraft-patch-4_4_90-92_45-defaultkgraft-patch-4_12_14-95_40-defaultkgraft-patch-4_12_14-120-defaultkgraft-patch-4_12_14-122_7-defaultkernel-livepatch-4_12_14-150_41-defaultkernel-livepatch-4_12_14-197_26-defaultkgraft-patch-4_4_114-94_11-defaultkgraft-patch-4_4_114-94_14-defaultkgraft-patch-4_4_103-92_53-defaultkgraft-patch-4_4_103-92_56-defaultkgraft-patch-4_4_90-92_50-defaultkernel-livepatch-4_12_14-23-defaultkernel-livepatch-4_12_14-25_3-defaultkernel-default-basekernel-rtkgraft-patch-3_12_67-60_64_24-defaultkgraft-patch-3_12_69-60_64_29-defaultkgraft-patch-3_12_69-60_64_32-defaultkgraft-patch-3_12_69-60_64_35-defaultkgraft-patch-4_4_73-5-defaultkgraft-patch-4_4_120-94_17-defaultkgraft-patch-4_4_126-94_22-defaultkgraft-patch-4_12_14-95_19-defaultkgraft-patch-4_12_14-95_24-defaultkgraft-patch-4_12_14-95_29-defaultkgraft-patch-4_12_14-95_32-defaultkgraft-patch-4_12_14-95_37-defaultkgraft-patch-4_12_14-95_45-defaultkgraft-patch-4_12_14-95_48-defaultkgraft-patch-4_12_14-95_51-defaultkgraft-patch-4_12_14-122_12-defaultkgraft-patch-4_12_14-122_17-defaultkgraft-patch-4_12_14-122_20-defaultkernel-livepatch-4_12_14-150_22-defaultkernel-livepatch-4_12_14-150_27-defaultkernel-livepatch-4_12_14-150_32-defaultkernel-livepatch-4_12_14-150_35-defaultkernel-livepatch-4_12_14-150_38-defaultkernel-livepatch-4_12_14-150_47-defaultkernel-livepatch-4_12_14-195-defaultkernel-livepatch-4_12_14-197_10-defaultkernel-livepatch-4_12_14-197_15-defaultkernel-livepatch-4_12_14-197_18-defaultkernel-livepatch-4_12_14-197_21-defaultkernel-livepatch-4_12_14-197_29-defaultkernel-livepatch-4_12_14-197_34-defaultkernel-livepatch-4_12_14-197_37-defaultkernel-livepatch-4_12_14-197_4-defaultkernel-livepatch-4_12_14-197_40-defaultkernel-livepatch-4_12_14-197_7-defaultkgraft-patch-4_4_131-94_29-defaultkgraft-patch-4_4_132-94_33-defaultkernel-livepatch-4_12_14-25_13-defaultkernel-livepatch-4_12_14-25_6-defaultkgraft-patch-4_4_138-94_39-defaultkgraft-patch-4_4_140-94_42-defaultkgraft-patch-4_4_143-94_47-defaultkernel-livepatch-4_12_14-25_16-defaultkgraft-patch-4_4_155-94_50-defaultkgraft-patch-4_4_156-94_57-defaultkgraft-patch-4_4_156-94_61-defaultkgraft-patch-4_4_156-94_64-defaultkernel-livepatch-4_12_14-25_19-defaultkgraft-patch-4_12_14-94_41-defaultkgraft-patch-4_12_14-95_3-defaultkgraft-patch-4_12_14-95_6-defaultkernel-livepatch-4_12_14-25_28-defaultkgraft-patch-4_4_162-94_69-defaultkgraft-patch-4_4_162-94_72-defaultkernel-livepatch-4_12_14-25_22-defaultkernel-livepatch-4_12_14-25_25-defaultkgraft-patch-4_12_14-95_68-defaultkgraft-patch-4_12_14-95_71-defaultkgraft-patch-4_12_14-95_74-defaultkgraft-patch-4_12_14-95_77-defaultkgraft-patch-4_12_14-95_80-defaultkgraft-patch-4_12_14-95_83-defaultkernel-livepatch-4_12_14-150_66-defaultkernel-livepatch-4_12_14-150_69-defaultkernel-livepatch-4_12_14-150_72-defaultkernel-livepatch-4_12_14-150_75-defaultkernel-livepatch-4_12_14-150_78-defaultkgraft-patch-4_12_14-95_13-defaultkgraft-patch-4_12_14-95_16-defaultkernel-livepatch-4_12_14-150_14-defaultkernel-livepatch-4_12_14-150_17-defaultkgraft-patch-4_4_175-94_79-defaultkgraft-patch-4_4_176-94_88-defaultkgraft-patch-4_4_178-94_91-defaultkgraft-patch-4_4_180-94_97-defaultqemu-ovmf-x86_64qemu-uefi-aarch64kgraft-patch-4_12_14-95_54-defaultkernel-livepatch-4_12_14-150_52-defaultkgraft-patch-4_12_14-95_57-defaultkgraft-patch-4_12_14-95_60-defaultkernel-livepatch-4_12_14-150_55-defaultkernel-livepatch-4_12_14-150_58-defaultkernel-livepatch-4_12_14-150_63-defaultkgraft-patch-4_12_14-95_65-defaultkgraft-patch-4_12_14-122_23-defaultkgraft-patch-4_12_14-122_26-defaultkgraft-patch-4_12_14-122_29-defaultkgraft-patch-4_12_14-122_32-defaultkgraft-patch-4_12_14-122_37-defaultkgraft-patch-4_12_14-122_41-defaultkgraft-patch-4_12_14-122_46-defaultkgraft-patch-4_12_14-122_51-defaultkgraft-patch-4_12_14-122_54-defaultkernel-livepatch-4_12_14-197_45-defaultkernel-livepatch-4_12_14-197_48-defaultkernel-livepatch-4_12_14-197_51-defaultkernel-livepatch-4_12_14-197_56-defaultkernel-livepatch-4_12_14-197_61-defaultkernel-livepatch-4_12_14-197_64-defaultkernel-livepatch-4_12_14-197_67-defaultkernel-livepatch-4_12_14-197_72-defaultkernel-livepatch-4_12_14-197_75-defaultkernel-livepatch-5_3_18-22-defaultkernel-livepatch-5_3_18-24_12-defaultkernel-livepatch-5_3_18-24_15-defaultkernel-livepatch-5_3_18-24_9-defaultkernel-livepatch-5_3_18-24_24-defaultkernel-livepatch-5_3_18-24_29-defaultkernel-livepatch-5_3_18-24_34-defaultkernel-livepatch-5_3_18-24_37-defaultkernel-livepatch-5_3_18-24_43-defaultlibicu73_2libicu73_2-bedatalibicu73_2-ledataqemuqemu-accel-tcg-x86qemu-armqemu-audio-spiceqemu-chardev-spiceqemu-guest-agentqemu-hw-display-qxlqemu-hw-display-virtio-gpuqemu-hw-display-virtio-vgaqemu-hw-usb-redirectqemu-ipxeqemu-s390xqemu-seabiosqemu-sgabiosqemu-toolsqemu-ui-openglqemu-ui-spice-coreqemu-vgabiosqemu-x86libssh2-1kgraft-patch-4_12_14-122_60-defaultkgraft-patch-4_12_14-122_63-defaultkernel-livepatch-4_12_14-197_83-defaultkernel-livepatch-4_12_14-197_86-defaultkernel-livepatch-5_3_18-24_49-defaultkernel-livepatch-5_3_18-24_52-defaultkernel-livepatch-5_3_18-57-defaultkgraft-patch-4_12_14-122_57-defaultkernel-livepatch-4_12_14-197_78-defaultkernel-livepatch-5_3_18-24_46-defaultkgraft-patch-4_12_14-122_66-defaultkernel-livepatch-5_3_18-24_53_4-defaultkgraft-patch-4_12_14-122_71-defaultkgraft-patch-4_12_14-122_74-defaultkgraft-patch-4_12_14-122_77-defaultkernel-livepatch-4_12_14-197_89-defaultkernel-livepatch-4_12_14-197_92-defaultkernel-livepatch-5_3_18-24_61-defaultkernel-livepatch-5_3_18-24_64-defaultkernel-livepatch-5_3_18-24_67-defaultkgraft-patch-4_12_14-95_102-defaultkgraft-patch-4_12_14-95_105-defaultkgraft-patch-4_12_14-95_88-defaultkgraft-patch-4_12_14-95_93-defaultkgraft-patch-4_12_14-95_96-defaultkgraft-patch-4_12_14-95_99-defaultkgraft-patch-4_12_14-122_103-defaultkgraft-patch-4_12_14-122_106-defaultkgraft-patch-4_12_14-122_110-defaultkgraft-patch-4_12_14-122_113-defaultkgraft-patch-4_12_14-122_116-defaultkgraft-patch-4_12_14-122_121-defaultkgraft-patch-4_12_14-122_124-defaultkgraft-patch-4_12_14-122_127-defaultkgraft-patch-4_12_14-122_130-defaultkgraft-patch-4_12_14-122_88-defaultkgraft-patch-4_12_14-122_91-defaultkgraft-patch-4_12_14-122_98-defaultkernel-livepatch-4_12_14-150000_150_89-defaultkernel-livepatch-4_12_14-150000_150_92-defaultkernel-livepatch-4_12_14-150000_150_95-defaultkernel-livepatch-4_12_14-150000_150_98-defaultkernel-livepatch-4_12_14-150_83-defaultkernel-livepatch-4_12_14-150_86-defaultkernel-livepatch-4_12_14-150100_197_111-defaultkernel-livepatch-4_12_14-150100_197_114-defaultkernel-livepatch-4_12_14-150100_197_117-defaultkernel-livepatch-4_12_14-150100_197_120-defaultkernel-livepatch-4_12_14-197_102-defaultkernel-livepatch-4_12_14-197_105-defaultkernel-livepatch-4_12_14-197_108-defaultkernel-livepatch-5_3_18-150200_24_112-defaultkernel-livepatch-5_3_18-150200_24_115-defaultkernel-livepatch-5_3_18-150200_24_126-defaultkernel-livepatch-5_3_18-24_102-defaultkernel-livepatch-5_3_18-24_107-defaultkernel-livepatch-5_3_18-24_83-defaultkernel-livepatch-5_3_18-24_86-defaultkernel-livepatch-5_3_18-24_93-defaultkernel-livepatch-5_3_18-24_96-defaultkernel-livepatch-5_3_18-24_99-defaultkernel-livepatch-5_3_18-150300_59_43-defaultkernel-livepatch-5_3_18-150300_59_46-defaultkernel-livepatch-5_3_18-150300_59_49-defaultkernel-livepatch-5_3_18-150300_59_54-defaultkernel-livepatch-5_3_18-150300_59_60-defaultkernel-livepatch-5_3_18-150300_59_63-defaultkernel-livepatch-5_3_18-150300_59_68-defaultkernel-livepatch-5_3_18-150300_59_71-defaultkernel-livepatch-5_3_18-150300_59_76-defaultkernel-livepatch-5_3_18-150300_59_87-defaultkernel-livepatch-5_3_18-59_24-defaultkernel-livepatch-5_3_18-59_27-defaultkernel-livepatch-5_3_18-59_34-defaultkernel-livepatch-5_3_18-59_37-defaultkernel-livepatch-5_3_18-59_40-defaultkernel-livepatch-5_14_21-150400_22-defaultkernel-livepatch-5_14_21-150400_24_11-defaultkernel-livepatch-5_14_21-150400_24_18-defaultkgraft-patch-4_12_14-122_80-defaultkgraft-patch-4_12_14-122_83-defaultkernel-livepatch-4_12_14-197_99-defaultkernel-livepatch-5_3_18-24_70-defaultkernel-livepatch-5_3_18-24_75-defaultkernel-livepatch-5_3_18-24_78-defaultkernel-livepatch-5_3_18-59_10-defaultkernel-livepatch-5_3_18-59_13-defaultkernel-livepatch-5_3_18-59_16-defaultkernel-livepatch-5_3_18-59_19-defaultkernel-livepatch-5_3_18-59_5-defaultkernel-livepatch-5_3_18-150200_24_129-defaultkernel-livepatch-5_3_18-150200_24_134-defaultkernel-livepatch-5_3_18-150300_59_90-defaultkernel-livepatch-5_3_18-150300_59_93-defaultkernel-livepatch-5_3_18-150300_59_98-defaultkernel-livepatch-5_14_21-150400_24_21-defaultkernel-livepatch-5_14_21-150400_24_28-defaultkernel-livepatch-5_14_21-150400_24_33-defaultlibbluetooth3librados2librbd1samba-client-libssamba-libskernel-livepatch-5_3_18-150300_59_101-defaultshimucode-intelkgraft-patch-4_12_14-95_108-defaultkgraft-patch-4_12_14-95_111-defaultkgraft-patch-4_12_14-122_133-defaultkgraft-patch-4_12_14-122_136-defaultkernel-livepatch-4_12_14-150100_197_123-defaultkernel-livepatch-4_12_14-150100_197_126-defaultkernel-livepatch-4_12_14-150000_150_101-defaultkernel-livepatch-4_12_14-150000_150_104-defaultlibX11-6libX11-datalibX11-xcb1kgraft-patch-4_12_14-95_114-defaultkgraft-patch-4_12_14-122_139-defaultkgraft-patch-4_12_14-122_144-defaultkernel-livepatch-4_12_14-150100_197_131-defaultkernel-livepatch-5_3_18-150200_24_139-defaultdockerxen-libslibpcre2-8-0libopenssl-1_1-devellibopenssl1_1libopenssl1_1-hmacopenssl-1_1kernel-livepatch-5_14_21-150400_15_5-rtkernel-livepatch-5_14_21-150400_24_38-defaultsupportutilskernel-livepatch-5_3_18-150200_24_142-defaultkernel-livepatch-5_3_18-150200_24_145-defaultkernel-livepatch-5_3_18-150300_59_106-defaultkernel-livepatch-5_3_18-150300_59_109-defaultkernel-livepatch-5_3_18-150300_59_112-defaultkernel-livepatch-5_3_18-150300_59_115-defaultkernel-livepatch-5_14_21-150400_15_8-rtkernel-livepatch-5_14_21-150400_24_41-defaultkgraft-patch-4_12_14-122_147-defaultkernel-livepatch-5_14_21-150400_15_11-rtkernel-livepatch-5_14_21-150400_15_18-rtkernel-livepatch-5_14_21-150400_15_23-rtkernel-livepatch-5_14_21-150400_24_46-defaultkernel-livepatch-5_14_21-150400_24_55-defaultkernel-livepatch-5_14_21-150400_24_60-defaultvim-data-commonvim-smallkgraft-patch-4_12_14-95_117-defaultkernel-livepatch-4_12_14-150100_197_134-defaultglibcglibc-develglibc-localeglibc-locale-baselibtiff5libxmlsec1-1libxmlsec1-openssl1libtpms0kgraft-patch-4_12_14-122_150-defaultkgraft-patch-4_12_14-122_153-defaultkgraft-patch-4_12_14-122_156-defaultkgraft-patch-4_12_14-122_159-defaultkgraft-patch-4_12_14-122_162-defaultkernel-livepatch-4_12_14-150100_197_137-defaultkernel-livepatch-4_12_14-150100_197_142-defaultkernel-livepatch-4_12_14-150100_197_145-defaultkernel-livepatch-5_3_18-150200_24_148-defaultkernel-livepatch-5_3_18-150200_24_151-defaultkernel-livepatch-5_3_18-150200_24_154-defaultkernel-livepatch-5_3_18-150300_59_118-defaultkernel-livepatch-5_3_18-150300_59_121-defaultkernel-livepatch-5_3_18-150300_59_124-defaultkernel-livepatch-5_14_21-150400_15_28-rtkernel-livepatch-5_14_21-150400_24_63-defaultkernel-livepatch-5_14_21-150400_24_66-defaultkernel-livepatch-5_14_21-150500_11-rtkernel-livepatch-5_14_21-150500_53-defaultkgraft-patch-4_12_14-95_120-defaultxxdkgraft-patch-4_12_14-122_165-defaultkgraft-patch-4_12_14-122_173-defaultkernel-livepatch-4_12_14-150100_197_148-defaultkernel-livepatch-4_12_14-150100_197_151-defaultkernel-livepatch-4_12_14-150100_197_154-defaultkernel-livepatch-5_3_18-150200_24_157-defaultkernel-livepatch-5_3_18-150200_24_160-defaultkernel-livepatch-5_3_18-150300_59_127-defaultkernel-livepatch-5_3_18-150300_59_130-defaultkernel-livepatch-5_14_21-150400_15_37-rtkernel-livepatch-5_14_21-150500_13_5-rtavahilibavahi-client3libavahi-common3libavahi-core7libfreetype6kernel-firmware-allkernel-firmware-amdgpukernel-firmware-ath10kkernel-firmware-ath11kkernel-firmware-atheroskernel-firmware-bluetoothkernel-firmware-bnx2kernel-firmware-brcmkernel-firmware-chelsiokernel-firmware-dpaa2kernel-firmware-i915kernel-firmware-intelkernel-firmware-iwlwifikernel-firmware-liquidiokernel-firmware-marvellkernel-firmware-mediakernel-firmware-mediatekkernel-firmware-mellanoxkernel-firmware-mwifiexkernel-firmware-networkkernel-firmware-nfpkernel-firmware-nvidiakernel-firmware-platformkernel-firmware-presterakernel-firmware-qcomkernel-firmware-qlogickernel-firmware-radeonkernel-firmware-realtekkernel-firmware-serialkernel-firmware-soundkernel-firmware-tikernel-firmware-ueaglekernel-firmware-usb-networkucode-amdlibvmtools0open-vm-toolspython3-saltsaltsalt-minionsalt-transactional-updatekernel-livepatch-5_14_21-150400_15_40-rtkernel-livepatch-5_14_21-150400_24_69-defaultkernel-livepatch-5_14_21-150400_24_74-defaultkernel-livepatch-5_14_21-150500_55_12-defaultkernel-livepatch-5_14_21-150500_55_7-defaultlibeconf0glib2-toolslibgio-2_0-0libglib-2_0-0libgmodule-2_0-0libgobject-2_0-0libcap2python3-configobjkubevirt-manifestskubevirt-virtctllibvirt-clientlibvirt-daemonlibvirt-daemon-driver-interfacelibvirt-daemon-driver-networklibvirt-daemon-driver-nodedevlibvirt-daemon-driver-nwfilterlibvirt-daemon-driver-qemulibvirt-daemon-driver-secretlibvirt-daemon-driver-storagelibvirt-daemon-driver-storage-corelibvirt-daemon-driver-storage-disklibvirt-daemon-driver-storage-iscsilibvirt-daemon-driver-storage-iscsi-directlibvirt-daemon-driver-storage-logicallibvirt-daemon-driver-storage-mpathlibvirt-daemon-driver-storage-rbdlibvirt-daemon-driver-storage-scsilibvirt-daemon-qemulibvirt-libslibmicrohttpd12curllibcurl4python3-tornadolibxml2-2libxml2-toolspython3-libxml2mdadmlibncurses6ncurses-utilsterminfoterminfo-baselibldap-2_4-2libldap-dataopenscdmidecodelibcares2kgraft-patch-4_12_14-95_125-defaultperlperl-basecups-configlibcups2python3-requestslibyajl2dbus-1dbus-1-x11libdbus-1-3libnghttp2-14krb5gstreamer-plugins-baselibgstallocators-1_0-0libgstapp-1_0-0libgstaudio-1_0-0libgstgl-1_0-0libgstpbutils-1_0-0libgstriff-1_0-0libgsttag-1_0-0libgstvideo-1_0-0libopenssl3opensshopenssh-clientsopenssh-commonopenssh-fipsopenssh-servergdk-pixbuf-loader-rsvglibrsvg-2-2libprocps7procpshaproxylibgcc_s1libstdc++6gawkkernel-livepatch-5_14_21-150400_15_46-rtkernel-livepatch-5_14_21-150400_24_81-defaultkernel-livepatch-5_14_21-150500_13_11-rtkernel-livepatch-5_14_21-150500_55_19-defaultpython3-urllib3login_defsshadow(aarch64|s390x|x86_64)0:3.6.15-150300.10.48.1b88b2fd43dbdc2845.40:3.12.38-44.10:5-2.1-00:3.12.39-47.10:3.12.43-52.6.10:3.12.44-52.10.10:4-2.1-00:3.12.44-52.18.10:3.12.48-52.27.10:3-2.1-00:3.12.49-11.10:5-14.2-00:3.12.51-52.31.10:3.12.51-52.34.10:3.12.51-52.39.10:2-2.1-00:3.12.51-60.20.20:3.12.51-60.25.10:3.12.53-60.30.10:3.12.57-60.35.10:2-2.2-00:3.12.59-60.41.20:3.12.59-60.45.20:3.12.59-60.45.20:3.12.32-33.10:3.12.32-33.10:3.12.36-38.10:3.12.36-38.10:2-7.1-00:2-10.1-00:3.12.39-47.10:2-3.1-00:2-6.1-00:3.12.43-52.6.10:2-5.1-00:3.12.49-11.10:4-2.3-00:2-4.1-00:3.12.44-52.18.10:3.12.51-60.25.10:3.12.51-60.20.20:3-8.2-00:6-2.1-00:4-11.2-00:3.12.53-60.30.10:4.4.21-69.10:4.4.21-81.30:4.4.21-84.10:4.4.21-90.10:4.4.38-93.10:4.4.38-93.10:3.12.57-60.35.10:6-17.2-00:3.12.59-60.41.20:7-20.2-00:7-2.1-00:3.12.62-60.62.10:3-5.1-00:3.12.62-60.62.10:2-9.1-00:3.12.62-60.64.8.20:3.12.62-60.64.8.20:8-23.2-00:8-2.1-00:3.12.67-60.64.18.10:4.4.21-81.30:3.12.67-60.64.21.10:4.4.21-84.10:4.4.103-6.33.10:5-2.2-00:4.4.103-6.38.10:4.4.82-6.3.10:8-2.2-00:4.4.82-6.6.10:7-2.2-00:4.4.82-6.9.10:4.4.92-6.18.10:6-2.2-00:4.4.92-6.30.10:4.4.92-6.30.10:9-18.10.1-00:9-2.1-00:4.4.49-92.11.10:4.4.49-92.14.10:4.4.59-92.17.30:4.4.59-92.20.20:4.4.59-92.24.20:4.4.74-92.29.10:4.4.74-92.32.10:4.4.74-92.35.10:4.4.74-92.38.10:4.4.74-92.38.10:10-18.13.1-00:10-4.1-00:9-4.1-00:7-4.1-00:6-4.1-00:5-4.1-00:4-4.1-00:3-4.1-00:4.4.74-92.35.10:4.4.82-6.3.10:7-21.1-00:7-3.1-00:6-3.1-00:4-3.1-00:3-3.1-00:4.4.59-92.20.20:4.4.90-92.45.10:4.4.90-92.45.10:4.4.92-6.18.10:4.12.14-95.40.10:4.12.14-95.40.10:4.12.14-120.10:8-21.2-00:4.12.14-122.7.10:4.12.14-122.7.10:4.12.14-150.41.10:4.12.14-150.41.10:4.12.14-197.26.10:4.12.14-197.26.10:11-2.1-00:4.4.59-92.24.20:10-2.1-00:4.4.82-6.9.10:4.4.114-94.11.30:4.4.114-94.14.10:4.4.21-69.10:4.4.103-92.53.10:4.4.103-92.56.10:4.4.90-92.50.10:4.4.90-92.50.10:4.12.14-23.10:4.12.14-25.3.10:4.12.14-25.3.10:8-18.7.1-00:4.4.49-92.11.1(aarch64|s390x|x86_64)0:5.14.21-150400.24.60.1(aarch64|s390x|x86_64)0:5.14.21-150400.24.60.1.150400.24.24.3(x86_64)0:5.14.21-150400.15.23.10:3.12.67-60.64.24.10:3.12.69-60.64.29.10:4-11.1-00:3.12.69-60.64.32.10:3.12.69-60.64.35.10:4.4.49-92.14.10:4.4.74-92.29.10:4.4.73-5.10:2-2.3.2-00:4.4.73-5.10:3-2.2-00:4.4.120-94.17.10:4.4.126-94.22.10:4.12.14-95.19.10:4.12.14-95.24.10:4.12.14-95.29.10:4.12.14-95.32.10:4.12.14-95.37.10:4.12.14-95.45.10:4.12.14-95.48.10:4.12.14-95.51.10:4.12.14-95.51.10:5-12.2-00:4.12.14-122.12.10:4.12.14-122.17.10:4.12.14-122.20.10:4.12.14-150.22.10:4.12.14-150.27.10:4.12.14-150.32.10:4.12.14-150.35.10:4.12.14-150.38.10:4.12.14-150.47.10:4.12.14-150.47.10:4.12.14-195.10:12-34.1-00:4.12.14-197.10.10:4.12.14-197.15.10:4.12.14-197.18.10:4.12.14-197.21.10:4.12.14-197.29.10:4.12.14-197.34.10:4.12.14-197.37.10:4.12.14-197.4.10:4.12.14-197.40.10:4.12.14-197.7.10:4.12.14-197.7.10:4.4.131-94.29.10:4.4.132-94.33.10:4.12.14-25.13.10:3-2.3-00:4.12.14-25.6.10:4.12.14-25.6.10:4.4.138-94.39.10:4.4.140-94.42.10:4.4.143-94.47.10:4-10.2-00:4.12.14-25.16.10:9-25.2-00:4.12.14-23.10:4.4.155-94.50.10:4.4.156-94.57.10:4.4.156-94.61.10:4.4.156-94.64.10:5-13.2-00:4.12.14-25.19.10:4.4.140-94.42.10:10-28.1-00:3-7.3-00:4.12.14-94.41.10:9-2.25.1-00:4.12.14-95.3.10:8-2.5-00:4.12.14-95.6.10:7-2.5-00:4.12.14-95.6.10:4.12.14-25.28.10:7-2.3-00:4.12.14-25.28.10:4.4.162-94.69.20:4.4.162-94.72.10:4.4.162-94.72.10:3-2.7.2-00:4.12.14-95.3.10:8-22.2-00:4.12.14-25.22.10:4.12.14-25.25.10:6-16.2-00:4.12.14-95.68.10:14-2.2-00:4.12.14-95.71.10:13-2.2-00:4.12.14-95.74.10:10-2.2-00:4.12.14-95.77.10:9-2.2-00:4.12.14-95.80.10:4.12.14-95.83.20:4.12.14-95.83.20:4.12.14-150.66.10:4.12.14-150.69.10:4.12.14-150.72.10:4.12.14-150.75.10:4.12.14-150.78.10:4.12.14-150.78.10:5-2.5-00:4-2.5-00:2-2.5-00:10-2.5-00:9-2.5-00:12-2.1-00:4.4.132-94.33.10:7-19.2-00:6-15.2-00:4.12.14-120.10:4.12.14-95.13.10:6-2.5-00:4.12.14-95.16.10:4.12.14-150.14.20:6-2.3-00:4.12.14-150.17.10:5-2.13.1-00:4.4.175-94.79.10:4.4.176-94.88.10:4.4.178-94.91.20:4.4.178-94.91.20:6-2.16.1-00:4-10.1-00:4.12.14-195.10:4.4.180-94.97.10:4.4.180-94.97.10:3-7.2-00:4.12.14-197.4.1(noarch)0:202202-150400.5.10.10:7-2.19.1-00:6-16.1-00:4.12.14-95.45.10:4.12.14-197.29.10:4.12.14-197.18.10:4.12.14-95.29.10:4.12.14-150.32.10:4-2.2-00:4.12.14-95.54.10:4.12.14-95.54.10:4.12.14-150.52.10:4.12.14-150.52.10:8-2.22.1-00:7-19.1-00:3-6.2-00:10-28.2-00:4-2.10.2-00:4.4.175-94.79.10:4.12.14-95.48.10:4.12.14-197.37.10:4.12.14-95.57.10:4.12.14-95.60.10:4.12.14-95.60.10:4.12.14-150.55.10:4.12.14-150.58.10:4.12.14-150.58.10:7-18.2-00:4.12.14-197.40.10:4.12.14-150.63.10:4.12.14-150.69.10:4.12.14-95.65.10:4.12.14-95.65.10:4.12.14-122.23.10:4.12.14-122.26.10:4.12.14-122.29.10:4.12.14-122.32.10:4.12.14-122.37.10:4.12.14-122.41.10:4.12.14-122.46.10:4.12.14-122.51.20:4.12.14-122.54.10:4.12.14-122.54.10:4.12.14-150.63.10:4.12.14-197.45.10:4.12.14-197.48.10:4.12.14-197.51.10:4.12.14-197.56.10:4.12.14-197.61.10:4.12.14-197.64.10:4.12.14-197.67.10:4.12.14-197.72.10:4.12.14-197.75.10:4.12.14-197.75.10:5.3.18-22.20:7-5.2-00:5.3.18-24.12.10:5.3.18-24.15.10:5.3.18-24.9.10:5.3.18-24.9.10:5.3.18-24.24.10:5.3.18-24.29.20:5.3.18-24.34.10:5.3.18-24.37.10:5.3.18-24.43.2(aarch64|ppc64le|s390x|x86_64)0:73.2-150000.1.3.1(noarch)0:73.2-150000.1.3.10:4.12.14-197.61.10:4-9.1-00:11-31.2-00:4.12.14-95.57.10:4.12.14-150.55.10:4.12.14-197.51.10:2-5.2-00:2-2.3-00:4.12.14-197.56.1(aarch64|s390x|x86_64)0:6.2.0-150400.37.14.2(x86_64)0:6.2.0-150400.37.14.2(aarch64)0:6.2.0-150400.37.14.2(noarch)0:1.0.0+-150400.37.14.2(s390x)0:6.2.0-150400.37.14.2(noarch)0:1.15.0_0_g2dd4b9b-150400.37.14.2(noarch)0:8-150400.37.14.20:4.12.14-197.45.10:5.3.18-22.2(aarch64|s390x|x86_64)0:1.9.0-150000.4.16.10:9-3.2-00:4.12.14-197.67.10:5-5.2-00:4.12.14-95.71.10:4.12.14-122.60.10:4.12.14-122.63.10:4.12.14-122.63.10:4.12.14-197.83.10:4.12.14-197.86.10:4.12.14-197.86.10:5.3.18-24.49.20:5.3.18-24.52.10:5.3.18-24.52.10:5.3.18-57.30:10-3.2-00:5.3.18-57.30:11-2.2-00:4.12.14-122.57.10:4.12.14-122.60.10:4.12.14-197.78.10:4.12.14-197.78.10:8-5.2-00:4.12.14-95.68.10:4.12.14-150.66.10:4.12.14-197.83.10:5.3.18-24.46.10:6-5.2-00:4.12.14-122.57.10:12-2.2-00:4.12.14-122.66.20:4.12.14-122.66.20:11-5.2-00:5.3.18-24.53.4.10:4.12.14-95.77.10:15-2.2-00:4.12.14-122.71.10:4.12.14-122.74.10:4.12.14-122.77.10:4.12.14-122.77.10:4.12.14-150.72.10:4.12.14-197.89.20:4.12.14-197.92.10:4.12.14-197.92.10:14-5.2-00:5.3.18-24.61.10:5.3.18-24.64.10:5.3.18-24.67.30:4.12.14-95.102.10:4.12.14-95.105.10:13-2.3-00:4.12.14-95.88.10:9-2.3-00:4.12.14-95.93.10:8-2.3-00:4.12.14-95.96.10:4.12.14-95.99.30:4.12.14-95.99.30:4.12.14-122.103.10:14-2.3-00:4.12.14-122.106.10:12-2.3-00:4.12.14-122.110.10:10-2.3-00:4.12.14-122.113.10:4.12.14-122.116.10:4.12.14-122.121.20:5-2.3-00:4.12.14-122.124.30:4.12.14-122.127.10:4.12.14-122.130.10:4.12.14-122.88.10:16-2.3-00:4.12.14-122.91.20:4.12.14-122.98.10:4.12.14-122.98.10:4.12.14-150000.150.89.10:7-150000.2.2-00:4.12.14-150000.150.92.20:4-150000.2.1-00:4.12.14-150000.150.95.10:2-150000.2.1-00:4.12.14-150000.150.98.10:13-150000.2.2-00:4.12.14-150.83.10:9-150000.2.2-00:4.12.14-150.86.10:8-150000.2.2-00:4.12.14-150.86.10:4.12.14-150100.197.111.10:7-150100.2.2-00:4.12.14-150100.197.114.20:4-150100.2.1-00:4.12.14-150100.197.117.10:2-150100.2.1-00:4.12.14-150100.197.120.10:4.12.14-197.102.20:13-150100.2.2-00:4.12.14-197.105.10:9-150100.2.2-00:4.12.14-197.108.10:8-150100.2.2-00:4.12.14-197.108.10:5.3.18-150200.24.112.10:7-150200.2.2-00:5.3.18-150200.24.115.10:5-150200.2.1-00:5.3.18-150200.24.126.10:2-150200.2.1-00:5.3.18-24.102.10:12-150200.2.2-00:5.3.18-24.107.10:11-150200.2.2-00:5.3.18-24.83.20:16-150200.2.2-00:5.3.18-24.86.20:5.3.18-24.93.10:15-150200.2.2-00:5.3.18-24.96.10:14-150200.2.2-00:5.3.18-24.99.10:13-150200.2.2-00:5.3.18-24.99.10:5.3.18-150300.59.43.10:13-150300.2.2-00:5.3.18-150300.59.46.10:5.3.18-150300.59.49.10:12-150300.2.2-00:5.3.18-150300.59.54.10:11-150300.2.2-00:5.3.18-150300.59.60.40:10-150300.2.2-00:5.3.18-150300.59.63.10:7-150300.2.2-00:5.3.18-150300.59.68.10:6-150300.2.2-00:5.3.18-150300.59.71.20:5-150300.2.1-00:5.3.18-150300.59.76.10:4-150300.2.1-00:5.3.18-150300.59.87.10:3-150300.2.1-00:5.3.18-59.24.10:16-150300.2.2-00:5.3.18-59.27.10:5.3.18-59.34.10:15-150300.2.2-00:5.3.18-59.37.20:14-150300.2.2-00:5.3.18-59.40.10:5.3.18-59.40.10:5.14.21-150400.22.10:5-150400.4.12.3-00:5.14.21-150400.24.11.10:2-150400.2.1-00:5.14.21-150400.24.18.10:5.14.21-150400.24.18.10:6-150000.2.1-00:15-150000.2.2-00:11-150000.2.2-00:10-150000.2.2-00:4.12.14-95.80.10:4.12.14-122.80.10:4.12.14-122.83.10:4.12.14-122.88.10:4.12.14-150.75.10:4.12.14-197.99.10:4.12.14-197.99.10:5.3.18-24.70.10:5.3.18-24.75.30:5.3.18-24.78.10:5.3.18-24.78.10:5.3.18-59.10.10:8-150300.2.2-00:5.3.18-59.13.10:5.3.18-59.16.10:5.3.18-59.19.10:5.3.18-59.5.20:5.3.18-59.5.20:4.12.14-197.64.10:13-5.2-00:4.12.14-122.32.10:13-2.1-00:2-150300.2.1-00:12-3.1-00:10-150300.2.1-00:9-150300.2.1-00:8-150300.2.1-00:6-150300.2.1-00:5.3.18-24.53.4.10:9-3.1-00:5.3.18-24.93.10:16-2.2-00:4.12.14-122.80.10:5.3.18-24.75.30:5-3.1-00:4.12.14-95.74.10:4.12.14-122.71.10:4.12.14-197.89.20:5.3.18-24.64.10:10-5.2-00:9-5.2-00:12-5.2-00:6-150100.2.1-00:15-150100.2.2-00:11-150100.2.2-00:10-150100.2.2-00:10-150200.2.2-00:8-150200.2.1-00:18-150200.2.2-00:17-150200.2.2-00:9-150300.2.2-00:7-150300.2.1-00:18-150300.2.2-00:17-150300.2.2-00:8-150400.4.21.1-00:5-150400.2.1-00:5.14.21-150400.24.11.10:8-3.2-00:4.12.14-122.83.10:5.3.18-24.70.1(aarch64|s390x|x86_64)0:6.2.0-150400.37.23.1(x86_64)0:6.2.0-150400.37.23.1(aarch64)0:6.2.0-150400.37.23.1(noarch)0:1.0.0+-150400.37.23.1(s390x)0:6.2.0-150400.37.23.1(noarch)0:1.15.0_0_g2dd4b9b-150400.37.23.1(noarch)0:8-150400.37.23.10:11-2.3-00:6-3.2-00:2-150200.2.2-00:3-150200.2.2-00:5.3.18-150200.24.129.10:5.3.18-150200.24.134.10:4-150200.2.1-00:3-150200.2.1-00:12-150200.2.1-00:14-150200.2.1-00:11-150200.2.1-00:10-150200.2.1-00:7-150200.2.1-00:6-150200.2.1-00:2-150300.2.2-00:3-150300.2.2-00:5.3.18-150300.59.90.10:5.3.18-150300.59.93.10:5.3.18-150300.59.98.10:14-150200.3.1-00:12-150300.2.1-00:11-150300.2.1-00:2-150400.4.3.3-00:5.14.21-150400.24.21.20:2-150400.2.2-00:5.14.21-150400.24.28.10:5.14.21-150400.24.33.20:5.14.21-150400.24.33.20:15-2.1-00:14-2.1-00:4.12.14-95.96.10:15-150000.2.1-00:12-150000.2.1-00:7-150000.2.1-00:3-150000.2.1-00:13-150200.3.1-00:4-150300.2.2-00:5.3.18-24.96.10:11-3.2-00:5-150300.2.2-0(aarch64|s390x|x86_64)0:5.62-150400.4.16.10:4.12.14-122.91.20:5.3.18-24.86.20:16-2.1-00:16-150000.2.1-00:13-150000.2.1-00:8-150000.2.1-00:8-150100.2.1-00:16-150100.2.1-00:15-150100.2.1-00:13-150100.2.1-00:16-150200.2.1-00:13-150200.2.1-00:9-150200.2.1-00:16-150200.3.1-00:14-150300.2.1-00:13-150300.2.1-00:10-150000.2.1-00:5-150000.2.1-00:5-150100.2.1-00:12-150100.2.1-00:10-150100.2.1-00:4.12.14-95.88.10:4.12.14-150.83.1(aarch64|x86_64)0:16.2.11.58+g38d6afd3b78-150400.3.6.10:7-150100.2.1-00:3-150100.2.1-00:14-150100.2.1-00:15-150200.2.1-00:15-150200.3.1-00:4.12.14-95.93.10:5.14.21-150400.22.10:14-150000.2.2-00:5-150000.2.2-00:4-150000.2.2-00:5-150100.2.2-00:4-150100.2.2-00:16-150100.2.2-00:14-150100.2.2-00:8-150200.2.2-00:9-150200.2.2-00:18-150200.3.2-00:4-150200.2.2-00:19-150200.3.2-00:17-150200.3.1-00:15-150300.2.1-00:17-2.2-00:6-150000.2.2-00:12-150000.2.2-00:6-150100.2.2-00:12-150100.2.2-00:6-150400.4.15.3-00:6-150200.2.2-00:4-150400.4.9.3-00:18-2.3-00:17-2.3-00:5-150000.2.3-00:16-150000.2.3-00:11-150000.2.3-00:7-150000.2.3-00:6-150000.2.3-00:5-150100.2.3-00:11-150100.2.3-00:7-150100.2.3-00:6-150100.2.3-00:16-150100.2.3-00:5-150200.2.3-00:10-150200.2.3-00:9-150200.2.3-00:18-150200.2.3-00:17-150200.2.3-00:16-150200.2.3-00:14-150200.2.3-00:13-150200.2.3-00:12-150200.2.3-00:11-150200.2.3-00:11-150300.2.3-00:10-150300.2.3-00:9-150300.2.3-00:8-150300.3.2-00:5-150300.2.3-00:4-150300.2.3-00:18-150300.2.3-00:17-150300.2.3-00:16-150300.2.3-00:14-150300.2.3-00:13-150300.2.3-00:12-150300.2.3-00:3-150400.4.6.2-0(aarch64|s390x|x86_64)0:4.15.13+git.663.9c654e06cdb-150400.3.28.1(aarch64|s390x|x86_64)0:5.14.21-150400.24.63.1(aarch64|x86_64)0:5.14.21-150400.24.63.1.150400.24.27.1(x86_64)0:5.14.21-150400.15.28.20:11-150100.2.1-00:5.3.18-150300.59.101.10:5.3.18-150300.59.98.10:10-150400.4.2-00:7-150400.2.1-00:6-150400.2.1-00:4-150400.2.1-00:3-150400.2.1-00:14-150000.2.1-00:11-150000.2.1-0(aarch64|x86_64)0:15.7-150300.4.16.10:3-150100.2.2-00:3-150400.2.2-00:16-150000.2.2-00:19-150300.2.2-00:4.12.14-122.130.10:4.12.14-150100.197.120.10:5.3.18-150200.24.126.10:3-150000.2.2-0(x86_64)0:20230512-150200.24.10:4.12.14-95.108.10:4.12.14-95.111.10:4.12.14-122.133.10:4.12.14-122.136.10:4.12.14-122.136.10:4.12.14-150100.197.123.10:4.12.14-150100.197.126.10:5.14.21-150400.24.28.10:4.12.14-150000.150.101.10:4.12.14-150000.150.104.10:9-150400.4.24.1-0(aarch64|s390x|x86_64)0:1.6.5-150000.3.27.1(noarch)0:1.6.5-150000.3.27.10:4.12.14-95.114.10:4.12.14-122.139.10:4.12.14-122.144.10:4.12.14-122.144.10:9-150100.2.1-00:4.12.14-150100.197.131.10:5.3.18-150200.24.139.10:5.3.18-24.107.10:11-150400.7.2-00:8-150400.2.1-0(aarch64|s390x|x86_64)0:20.10.23_ce-150000.175.10:7-150400.4.18.3-00:5.14.21-150400.24.21.2(aarch64|s390x|x86_64)0:5.14.21-150400.24.81.1(aarch64|x86_64)0:5.14.21-150400.24.81.1.150400.24.35.3(x86_64)0:5.14.21-150400.15.46.1(x86_64)0:20230808-150200.27.1(x86_64)0:4.16.5_02-150400.4.31.1(aarch64|s390x|x86_64)0:10.39-150400.4.9.1(x86_64)0:4.16.3_06-150400.4.25.1(aarch64|s390x|x86_64)0:5.14.21-150400.24.66.1(aarch64|x86_64)0:5.14.21-150400.24.66.1.150400.24.29.1(x86_64)0:5.14.21-150400.15.37.2(aarch64|s390x|x86_64)0:1.1.1l-150400.7.42.10:5.14.21-150400.24.38.10:(noarch)0:3.1.26-150300.7.35.21.10:5.3.18-150200.24.142.10:5-150200.2.2-00:5.3.18-150200.24.145.10:5.3.18-150200.24.145.10:5.3.18-150300.59.106.10:5.3.18-150300.59.109.10:5.3.18-150300.59.112.10:5.3.18-150300.59.115.20:12-150400.2.3-00:5.14.21-150400.24.41.10:4.12.14-122.147.10:4.12.14-122.147.10:6-150200.2.3-00:3-150200.2.3-00:5.3.18-150200.24.139.10:3-150300.2.3-00:8-150300.2.3-00:6-150300.2.3-00:4-150400.2.3-00:12-150400.10.3-00:9-150400.2.3-00:8-150400.2.3-00:6-150400.2.3-00:5-150400.2.3-00:3-150400.2.3-00:4-150400.2.2-00:6-150400.2.2-00:5-150400.2.2-00:14-150400.16.1-00:11-150400.2.3-00:10-150400.2.3-00:7-150400.2.3-00:5.14.21-150400.24.46.10:5.14.21-150400.24.55.30:5.14.21-150400.24.60.10:2-150400.2.3-00:8-150200.2.3-00:4-150200.2.3-00:7-150300.2.3-0(noarch)0:9.0.1386-150000.5.37.1(aarch64|s390x|x86_64)0:9.0.1386-150000.5.37.10:4.12.14-95.117.10:4.12.14-150100.197.134.10:4.12.14-150100.197.134.10:5.3.18-150200.24.142.10:13-150400.13.2-00:10-150400.2.2-00:9-150400.2.2-00:7-150400.2.2-0(aarch64|s390x|x86_64)0:2.31-150300.46.1(aarch64|s390x|x86_64)0:4.0.9-150000.45.28.1(x86_64)0:1.2.37-150400.14.3.4(aarch64|s390x|x86_64)0:0.8.2-150300.3.9.10:4.12.14-122.150.10:4.12.14-122.153.10:4.12.14-122.156.10:4.12.14-122.159.10:4.12.14-122.162.10:4.12.14-122.162.10:8-150100.2.3-00:4.12.14-150100.197.137.20:4.12.14-150100.197.142.10:4.12.14-150100.197.145.10:4.12.14-150100.197.145.10:5.3.18-150200.24.148.10:5.3.18-150200.24.151.10:5.3.18-150200.24.154.10:5.3.18-150200.24.154.10:5.3.18-150300.59.118.10:5.3.18-150300.59.121.20:5.3.18-150300.59.124.10:8-150400.2.2-00:14-150400.2.2-00:13-150400.2.2-00:11-150400.2.2-00:5.14.21-150400.24.63.10:5.14.21-150400.24.66.10:3-150500.6.2-00:5.14.21-150500.53.2(aarch64|s390x|x86_64)0:5.14.21-150400.24.69.1(aarch64|x86_64)0:5.14.21-150400.24.69.1.150400.24.31.10:2-150200.2.3-00:2-150300.2.3-00:4.12.14-95.120.40:4.12.14-122.150.1(noarch)0:9.0.1443-150000.5.40.1(aarch64|s390x|x86_64)0:9.0.1443-150000.5.40.1(aarch64|ppc64le|s390x|x86_64)0:9.0.1443-150000.5.40.1(aarch64|s390x|x86_64)0:5.14.21-150400.24.92.1(aarch64|x86_64)0:5.14.21-150400.24.92.1.150400.24.42.1(x86_64)0:5.14.21-150400.15.56.10:4.12.14-122.153.10:2-150100.2.2-00:4.12.14-150100.197.137.20:4.12.14-95.120.40:4.12.14-122.165.10:4.12.14-122.173.10:4.12.14-122.173.10:4.12.14-150100.197.148.10:4.12.14-150100.197.151.10:4.12.14-150100.197.154.10:4.12.14-150100.197.154.10:5.3.18-150200.24.157.10:5.3.18-150200.24.160.20:5.3.18-150200.24.160.20:5.3.18-150300.59.127.10:5.3.18-150300.59.130.10:12-150400.2.2-00:4-150500.9.2-00:3-150500.2.1-0(x86_64)0:5.14.21-150400.15.40.10:5.3.18-150200.24.148.1(aarch64|s390x|x86_64)0:0.8-150400.7.3.10:4.12.14-122.156.10:4.12.14-150100.197.142.10:4.12.14-150100.197.148.10:2-150500.3.1-0(aarch64|s390x|x86_64)0:2.10.4-150000.4.15.1(aarch64|s390x|x86_64)0:5.14.21-150400.24.88.1(aarch64|x86_64)0:5.14.21-150400.24.88.1.150400.24.40.1(x86_64)0:5.14.21-150400.15.53.1(noarch)0:20220509-150400.4.22.1(x86_64)0:4.16.5_04-150400.4.34.1(aarch64|s390x|x86_64)0:5.14.21-150400.24.74.1(aarch64|x86_64)0:5.14.21-150400.24.74.1.150400.24.33.3(noarch)0:20220509-150400.4.19.1(x86_64)0:12.2.0-150300.29.1(aarch64|s390x|x86_64)0:3006.0-150400.8.44.1(x86_64)0:12.3.0-150300.37.10:5.14.21-150400.24.69.10:5.14.21-150400.24.74.10:2-150500.2.1-00:5.14.21-150500.55.12.10:5.14.21-150500.55.7.10:4.12.14-122.159.1(aarch64|s390x|x86_64)0:0.5.2-150400.3.6.10:5.3.18-150200.24.151.10:4.12.14-95.114.10:4.12.14-150100.197.131.1(noarch)0:9.0.1572-150000.5.46.1(aarch64|s390x|x86_64)0:9.0.1572-150000.5.46.1(aarch64|s390x|x86_64)0:3.6.15-150300.10.45.1(aarch64|s390x|x86_64)0:2.70.5-150400.3.8.1(aarch64|s390x|x86_64)0:2.63-150400.3.3.1(noarch)0:5.0.6-150000.3.3.1(x86_64)0:0.54.0-150400.3.13.1(aarch64|s390x|x86_64)0:1.1.1l-150400.7.37.10:13-150100.2.3-00:10-150100.2.3-00:3-150100.2.3-00:2-150100.2.3-0(aarch64|s390x|x86_64)0:8.0.0-150400.7.6.1(aarch64|x86_64)0:8.0.0-150400.7.6.1(aarch64|s390x|x86_64)0:5.62-150400.4.13.1(aarch64|s390x|x86_64)0:0.9.57-150000.3.3.1(aarch64|s390x|x86_64)0:8.0.1-150400.5.23.1(aarch64|s390x|x86_64)0:3006.0-150400.8.37.2(aarch64|s390x|x86_64)0:4.5.3-150000.3.6.1(aarch64|s390x|x86_64)0:2.9.14-150400.5.16.1(aarch64|s390x|x86_64)0:6.2.0-150400.37.20.1(x86_64)0:6.2.0-150400.37.20.1(aarch64)0:6.2.0-150400.37.20.1(noarch)0:1.0.0+-150400.37.20.1(s390x)0:6.2.0-150400.37.20.1(noarch)0:1.15.0_0_g2dd4b9b-150400.37.20.1(noarch)0:8-150400.37.20.1(aarch64|s390x|x86_64)0:4.1-150300.24.33.1(aarch64|s390x|x86_64)0:24.0.5_ce-150000.185.1(aarch64|s390x|x86_64)0:6.1-150000.5.15.1(aarch64|s390x|x86_64)0:2.4.46-150200.14.14.1(noarch)0:2.4.46-150200.14.14.1(aarch64|s390x|x86_64)0:0.22.0-150400.3.3.1(aarch64|x86_64)0:3.4-150400.16.8.1(aarch64|s390x|x86_64)0:1.19.1-150000.3.23.1(aarch64|s390x|x86_64)0:1.6.5-150000.3.30.1(noarch)0:1.6.5-150000.3.30.10:4.12.14-95.125.10:4.12.14-95.125.1(aarch64|s390x|x86_64)0:5.26.1-150300.17.14.1(aarch64|s390x|x86_64)0:8.0.1-150400.5.26.1(aarch64|s390x|x86_64)0:2.2.7-150000.3.43.1(aarch64|s390x|x86_64)0:2.2.7-150000.3.51.2(noarch)0:2.24.0-150300.3.3.1(aarch64|s390x|x86_64)0:2.1.0-150000.4.6.1(aarch64|s390x|x86_64)0:2.2.7-150000.3.46.1(x86_64)0:4.16.5_06-150400.4.37.1(aarch64|s390x|x86_64)0:1.1.1l-150400.7.48.1(aarch64|s390x|x86_64)0:1.12.2-150400.18.8.10:4.12.14-122.165.10:4.12.14-150100.197.151.10:5.3.18-150200.24.157.1(aarch64|s390x|x86_64)0:1.40.0-150200.9.1(aarch64|s390x|x86_64)0:1.19.2-150400.3.6.1(aarch64|s390x|x86_64)0:1.20.1-150400.3.3.1(aarch64|s390x|x86_64)0:8.0.1-150400.5.29.1(aarch64|s390x|x86_64)0:1.1.1l-150400.7.53.1(aarch64|ppc64le|s390x|x86_64)0:3.0.8-150400.4.34.1(aarch64|s390x|x86_64)0:8.4p1-150300.3.22.1(aarch64|s390x|x86_64)0:8.0.1-150400.5.32.1(aarch64|s390x|x86_64)0:2.52.10-150400.3.6.1(aarch64|s390x|x86_64)0:2.9.14-150400.5.22.1(aarch64|s390x|x86_64)0:3.3.15-150000.7.34.1(aarch64|s390x|x86_64)0:3.6.15-150300.10.51.1(aarch64|s390x|x86_64)0:2.4.22+git0.f8e3218e2-150400.3.16.1(aarch64|s390x|x86_64)0:12.3.0+git1204-150000.1.16.1(aarch64|s390x|x86_64)0:0.22.0-150400.3.6.1(aarch64|s390x|x86_64)0:4.15.13+git.691.3d3cea0641-150400.3.31.1(aarch64|s390x|x86_64)0:4.2.1-150000.3.3.10:5.14.21-150400.24.81.10:5.14.21-150500.55.19.1(aarch64|s390x|x86_64)0:1.6.5-150000.3.33.1(noarch)0:1.6.5-150000.3.33.1(noarch)0:1.25.10-150300.4.6.1(noarch)0:4.8.1-150400.3.3.1(aarch64|s390x|x86_64)0:4.8.1-150400.3.3.1(noarch)0:9.0.1894-150000.5.54.1(aarch64|s390x|x86_64)0:9.0.1894-150000.5.54.1(aarch64|s390x|x86_64)0:2.31-150300.63.1