New version 4.2.11. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-04475838f9 2025-03-01 01:38:57.010379+00:00 -------------------------------------------------------------------------------- Name : wireshark Product : Fedora 40 Version : 4.2.11 Release : 1.fc40 URL : http://www.wireshark.org/ Summary : Network traffic analyzer Description : Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless (WiFi or Bluetooth) networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols. It has many powerful features including a rich display filter language and the ability to reassemble multiple protocol packets in order to, for example, view a complete TCP stream, save the contents of a file which was transferred over HTTP or CIFS, or play back an RTP audio stream. -------------------------------------------------------------------------------- Update Information: New version 4.2.11 -------------------------------------------------------------------------------- ChangeLog: * Thu Feb 20 2025 Michal Ruprich - 1:4.2.11-1 - New version 4.2.11 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2346670 - wireshark-4.4.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2346670 [ 2 ] Bug #2346741 - CVE-2025-1492 wireshark: Uncontrolled Recursion in Wireshark [fedora-40] https://bugzilla.redhat.com/show_bug.cgi?id=2346741 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-04475838f9' at the command line. For more information, refer to the dnf documentation availableat http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
New version 4.4.4. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-08e73d463e 2025-03-01 01:22:54.667702+00:00 -------------------------------------------------------------------------------- Name : wireshark Product : Fedora 41 Version : 4.4.4 Release : 1.fc41 URL : http://www.wireshark.org/ Summary : Network traffic analyzer Description : Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless (WiFi or Bluetooth) networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols. It has many powerful features including a rich display filter language and the ability to reassemble multiple protocol packets in order to, for example, view a complete TCP stream, save the contents of a file which was transferred over HTTP or CIFS, or play back an RTP audio stream. -------------------------------------------------------------------------------- Update Information: New version 4.4.4 -------------------------------------------------------------------------------- ChangeLog: * Thu Feb 20 2025 Michal Ruprich - 1:4.4.4-1 - New version 4.4.4 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2346670 - wireshark-4.4.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2346670 [ 2 ] Bug #2346742 - CVE-2025-1492 wireshark: Uncontrolled Recursion in Wireshark [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2346742 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-08e73d463e' at the command line. For more information, refer to the dnf documentation availableat http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
An update that fixes two vulnerabilities is now available. . SUSE Security Update: Security update for php72 ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:3957-1 Rating: moderate References: #1203867 #1203870 Cross-References: CVE-2022-31628 CVE-2022-31629 CVSS scores: CVE-2022-31628 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-31628 (SUSE): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H CVE-2022-31629 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N Affected Products: SUSE Linux Enterprise High Performance Computing 12 SUSE Linux Enterprise Module for Web Scripting 12 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12-SP3 SUSE Linux Enterprise Server 12-SP4 SUSE Linux Enterprise Server 12-SP5 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12-SP3 SUSE Linux Enterprise Server for SAP Applications 12-SP4 SUSE Linux Enterprise Server for SAP Applications 12-SP5 SUSE Linux Enterprise Software Development Kit 12-SP5 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for php72 fixes the following issues: - CVE-2022-31628: Fixed an uncontrolled recursion in the phar uncompressor while decompressing "quines" gzip files. (bsc#1203867) - CVE-2022-31629: Fixed a bug which could lead an attacker to set an insecure cookie that will treated as secure in the victim's browser. (bsc#1203870) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaSTonline_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 12-SP5: zypper in -t patch SUSE-SLE-SDK-12-SP5-2022-3957=1 - SUSE Linux Enterprise Module for Web Scripting 12: zypper in -t patch SUSE-SLE-Module-Web-Scripting-12-2022-3957=1 Package List: - SUSE Linux Enterprise Software Development Kit 12-SP5 (aarch64 ppc64le s390x x86_64): php72-debuginfo-7.2.5-1.84.1 php72-debugsource-7.2.5-1.84.1 php72-devel-7.2.5-1.84.1 - SUSE Linux Enterprise Module for Web Scripting 12 (aarch64 ppc64le s390x x86_64): apache2-mod_php72-7.2.5-1.84.1 apache2-mod_php72-debuginfo-7.2.5-1.84.1 php72-7.2.5-1.84.1 php72-bcmath-7.2.5-1.84.1 php72-bcmath-debuginfo-7.2.5-1.84.1 php72-bz2-7.2.5-1.84.1 php72-bz2-debuginfo-7.2.5-1.84.1 php72-calendar-7.2.5-1.84.1 php72-calendar-debuginfo-7.2.5-1.84.1 php72-ctype-7.2.5-1.84.1 php72-ctype-debuginfo-7.2.5-1.84.1 php72-curl-7.2.5-1.84.1 php72-curl-debuginfo-7.2.5-1.84.1 php72-dba-7.2.5-1.84.1 php72-dba-debuginfo-7.2.5-1.84.1 php72-debuginfo-7.2.5-1.84.1 php72-debugsource-7.2.5-1.84.1 php72-dom-7.2.5-1.84.1 php72-dom-debuginfo-7.2.5-1.84.1 php72-enchant-7.2.5-1.84.1 php72-enchant-debuginfo-7.2.5-1.84.1 php72-exif-7.2.5-1.84.1 php72-exif-debuginfo-7.2.5-1.84.1 php72-fastcgi-7.2.5-1.84.1 php72-fastcgi-debuginfo-7.2.5-1.84.1 php72-fileinfo-7.2.5-1.84.1 php72-fileinfo-debuginfo-7.2.5-1.84.1 php72-fpm-7.2.5-1.84.1 php72-fpm-debuginfo-7.2.5-1.84.1 php72-ftp-7.2.5-1.84.1 php72-ftp-debuginfo-7.2.5-1.84.1 php72-gd-7.2.5-1.84.1 php72-gd-debuginfo-7.2.5-1.84.1 php72-gettext-7.2.5-1.84.1 php72-gettext-debuginfo-7.2.5-1.84.1 php72-gmp-7.2.5-1.84.1 php72-gmp-debuginfo-7.2.5-1.84.1 php72-iconv-7.2.5-1.84.1 php72-iconv-debuginfo-7.2.5-1.84.1 php72-imap-7.2.5-1.84.1 php72-imap-debuginfo-7.2.5-1.84.1 php72-intl-7.2.5-1.84.1 php72-intl-debuginfo-7.2.5-1.84.1 php72-json-7.2.5-1.84.1 php72-json-debuginfo-7.2.5-1.84.1 php72-ldap-7.2.5-1.84.1 php72-ldap-debuginfo-7.2.5-1.84.1 php72-mbstring-7.2.5-1.84.1 php72-mbstring-debuginfo-7.2.5-1.84.1 php72-mysql-7.2.5-1.84.1 php72-mysql-debuginfo-7.2.5-1.84.1 php72-odbc-7.2.5-1.84.1 php72-odbc-debuginfo-7.2.5-1.84.1 php72-opcache-7.2.5-1.84.1 php72-opcache-debuginfo-7.2.5-1.84.1 php72-openssl-7.2.5-1.84.1 php72-openssl-debuginfo-7.2.5-1.84.1 php72-pcntl-7.2.5-1.84.1 php72-pcntl-debuginfo-7.2.5-1.84.1 php72-pdo-7.2.5-1.84.1 php72-pdo-debuginfo-7.2.5-1.84.1 php72-pgsql-7.2.5-1.84.1 php72-pgsql-debuginfo-7.2.5-1.84.1 php72-phar-7.2.5-1.84.1 php72-phar-debuginfo-7.2.5-1.84.1 php72-posix-7.2.5-1.84.1 php72-posix-debuginfo-7.2.5-1.84.1 php72-pspell-7.2.5-1.84.1 php72-pspell-debuginfo-7.2.5-1.84.1 php72-readline-7.2.5-1.84.1 php72-readline-debuginfo-7.2.5-1.84.1 php72-shmop-7.2.5-1.84.1 php72-shmop-debuginfo-7.2.5-1.84.1 php72-snmp-7.2.5-1.84.1 php72-snmp-debuginfo-7.2.5-1.84.1 php72-soap-7.2.5-1.84.1 php72-soap-debuginfo-7.2.5-1.84.1 php72-sockets-7.2.5-1.84.1 php72-sockets-debuginfo-7.2.5-1.84.1 php72-sodium-7.2.5-1.84.1 php72-sodium-debuginfo-7.2.5-1.84.1 php72-sqlite-7.2.5-1.84.1 php72-sqlite-debuginfo-7.2.5-1.84.1 php72-sysvmsg-7.2.5-1.84.1 php72-sysvmsg-debuginfo-7.2.5-1.84.1 php72-sysvsem-7.2.5-1.84.1 php72-sysvsem-debuginfo-7.2.5-1.84.1 php72-sysvshm-7.2.5-1.84.1 php72-sysvshm-debuginfo-7.2.5-1.84.1 php72-tidy-7.2.5-1.84.1 php72-tidy-debuginfo-7.2.5-1.84.1 php72-tokenizer-7.2.5-1.84.1 php72-tokenizer-debuginfo-7.2.5-1.84.1 php72-wddx-7.2.5-1.84.1 php72-wddx-debuginfo-7.2.5-1.84.1 php72-xmlreader-7.2.5-1.84.1 php72-xmlreader-debuginfo-7.2.5-1.84.1 php72-xmlrpc-7.2.5-1.84.1 php72-xmlrpc-debuginfo-7.2.5-1.84.1 php72-xmlwriter-7.2.5-1.84.1 php72-xmlwriter-debuginfo-7.2.5-1.84.1 php72-xsl-7.2.5-1.84.1 php72-xsl-debuginfo-7.2.5-1.84.1 php72-zip-7.2.5-1.84.1 php72-zip-debuginfo-7.2.5-1.84.1 php72-zlib-7.2.5-1.84.1 php72-zlib-debuginfo-7.2.5-1.84.1 - SUSE Linux Enterprise Module for Web Scripting 12 (noarch): php72-pear-7.2.5-1.84.1 php72-pear-Archive_Tar-7.2.5-1.84.1 References: https://www.suse.com/security/cve/CVE-2022-31628.html https://www.suse.com/security/cve/CVE-2022-31629.html https://bugzilla.suse.com/1203867 https://bugzilla.suse.com/1203870 . The latest patch for php72 resolves two vulnerabilities impacting SUSE environments, as alerted in the advisory SUSE-SU-2022:3957-1, categorized with a moderate severity level.. SUSE PHP Update, Security Fixes, Linux Patch Management, PHP Threats. . LinuxSecurity.com Team
An update that fixes two vulnerabilities is now available. . SUSE Security Update: Security update for php7 ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:3830-1 Rating: moderate References: #1203867 #1203870 Cross-References: CVE-2022-31628 CVE-2022-31629 CVSS scores: CVE-2022-31628 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-31628 (SUSE): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H CVE-2022-31629 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N Affected Products: openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for php7 fixes the following issues: - CVE-2022-31628: Fixed an uncontrolled recursion in the phar uncompressor while decompressing "quines" gzip files. (bsc#1203867) - CVE-2022-31629: Fixed a bug which could lead an attacker to set an insecure cookie that will treated as secure in the victim's browser. (bsc#1203870) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3830=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): php7-wddx-7.2.5-150000.4.98.2 php7-wddx-debuginfo-7.2.5-150000.4.98.2 References: https://www.suse.com/security/cve/CVE-2022-31628.html https://www.suse.com/security/cve/CVE-2022-31629.html https://bugzilla.suse.com/1203867 https://bugzilla.suse.com/1203870 . SUSE Security Bulletin: Critical update for php8 Announcement ID:SUSE-SU-2023:4015-1 Severity:high S. openSUSE Update, php7 Security Fix, PHP Update, SUSE Patch. .LinuxSecurity.com Team
An update that fixes one vulnerability is now available. . SUSE Security Update: Security update for libcroco ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:3493-1 Rating: important References: #1171685 Cross-References: CVE-2020-12825 CVSS scores: CVE-2020-12825 (NVD) : 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H CVE-2020-12825 (SUSE): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H Affected Products: SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server 15-SP1-BCL SUSE Linux Enterprise Server 15-SP1-LTSS SUSE Linux Enterprise Server for SAP 15 SUSE Linux Enterprise Server for SAP 15-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libcroco fixes the following issues: - CVE-2020-12825: Fixed recursion issue in block and any productions (bsc#1171685). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server for SAP 15-SP1: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2022-3493=1 - SUSE Linux Enterprise Server for SAP 15: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-2022-3493=1 - SUSE Linux EnterpriseServer 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2022-3493=1 - SUSE Linux Enterprise Server 15-SP1-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-BCL-2022-3493=1 - SUSE Linux Enterprise Server 15-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-2022-3493=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2022-3493=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-ESPOS-2022-3493=1 - SUSE Linux Enterprise High Performance Computing 15-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-2022-3493=1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-2022-3493=1 - SUSE Enterprise Storage 6: zypper in -t patch SUSE-Storage-6-2022-3493=1 - SUSE CaaS Platform 4.0: To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. Package List: - SUSE Linux Enterprise Server for SAP 15-SP1 (ppc64le x86_64): libcroco-0.6.12-150000.4.6.2 libcroco-0_6-3-0.6.12-150000.4.6.2 libcroco-0_6-3-debuginfo-0.6.12-150000.4.6.2 libcroco-debuginfo-0.6.12-150000.4.6.2 libcroco-debugsource-0.6.12-150000.4.6.2 libcroco-devel-0.6.12-150000.4.6.2 - SUSE Linux Enterprise Server for SAP 15-SP1 (x86_64): libcroco-0_6-3-32bit-0.6.12-150000.4.6.2 libcroco-0_6-3-32bit-debuginfo-0.6.12-150000.4.6.2 - SUSE Linux Enterprise Server for SAP 15 (ppc64le x86_64): libcroco-0.6.12-150000.4.6.2 libcroco-0_6-3-0.6.12-150000.4.6.2 libcroco-0_6-3-debuginfo-0.6.12-150000.4.6.2 libcroco-debuginfo-0.6.12-150000.4.6.2 libcroco-debugsource-0.6.12-150000.4.6.2 libcroco-devel-0.6.12-150000.4.6.2 - SUSE Linux Enterprise Serverfor SAP 15 (x86_64): libcroco-0_6-3-32bit-0.6.12-150000.4.6.2 libcroco-0_6-3-32bit-debuginfo-0.6.12-150000.4.6.2 - SUSE Linux Enterprise Server 15-SP1-LTSS (aarch64 ppc64le s390x x86_64): libcroco-0.6.12-150000.4.6.2 libcroco-0_6-3-0.6.12-150000.4.6.2 libcroco-0_6-3-debuginfo-0.6.12-150000.4.6.2 libcroco-debuginfo-0.6.12-150000.4.6.2 libcroco-debugsource-0.6.12-150000.4.6.2 libcroco-devel-0.6.12-150000.4.6.2 - SUSE Linux Enterprise Server 15-SP1-LTSS (x86_64): libcroco-0_6-3-32bit-0.6.12-150000.4.6.2 libcroco-0_6-3-32bit-debuginfo-0.6.12-150000.4.6.2 - SUSE Linux Enterprise Server 15-SP1-BCL (x86_64): libcroco-0.6.12-150000.4.6.2 libcroco-0_6-3-0.6.12-150000.4.6.2 libcroco-0_6-3-32bit-0.6.12-150000.4.6.2 libcroco-0_6-3-32bit-debuginfo-0.6.12-150000.4.6.2 libcroco-0_6-3-debuginfo-0.6.12-150000.4.6.2 libcroco-debuginfo-0.6.12-150000.4.6.2 libcroco-debugsource-0.6.12-150000.4.6.2 libcroco-devel-0.6.12-150000.4.6.2 - SUSE Linux Enterprise Server 15-LTSS (aarch64 s390x): libcroco-0.6.12-150000.4.6.2 libcroco-0_6-3-0.6.12-150000.4.6.2 libcroco-0_6-3-debuginfo-0.6.12-150000.4.6.2 libcroco-debuginfo-0.6.12-150000.4.6.2 libcroco-debugsource-0.6.12-150000.4.6.2 libcroco-devel-0.6.12-150000.4.6.2 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (aarch64 x86_64): libcroco-0.6.12-150000.4.6.2 libcroco-0_6-3-0.6.12-150000.4.6.2 libcroco-0_6-3-debuginfo-0.6.12-150000.4.6.2 libcroco-debuginfo-0.6.12-150000.4.6.2 libcroco-debugsource-0.6.12-150000.4.6.2 libcroco-devel-0.6.12-150000.4.6.2 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (x86_64): libcroco-0_6-3-32bit-0.6.12-150000.4.6.2 libcroco-0_6-3-32bit-debuginfo-0.6.12-150000.4.6.2 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (aarch64 x86_64): libcroco-0.6.12-150000.4.6.2 libcroco-0_6-3-0.6.12-150000.4.6.2 libcroco-0_6-3-debuginfo-0.6.12-150000.4.6.2 libcroco-debuginfo-0.6.12-150000.4.6.2 libcroco-debugsource-0.6.12-150000.4.6.2 libcroco-devel-0.6.12-150000.4.6.2 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (x86_64): libcroco-0_6-3-32bit-0.6.12-150000.4.6.2 libcroco-0_6-3-32bit-debuginfo-0.6.12-150000.4.6.2 - SUSE Linux Enterprise High Performance Computing 15-LTSS (aarch64 x86_64): libcroco-0.6.12-150000.4.6.2 libcroco-0_6-3-0.6.12-150000.4.6.2 libcroco-0_6-3-debuginfo-0.6.12-150000.4.6.2 libcroco-debuginfo-0.6.12-150000.4.6.2 libcroco-debugsource-0.6.12-150000.4.6.2 libcroco-devel-0.6.12-150000.4.6.2 - SUSE Linux Enterprise High Performance Computing 15-LTSS (x86_64): libcroco-0_6-3-32bit-0.6.12-150000.4.6.2 libcroco-0_6-3-32bit-debuginfo-0.6.12-150000.4.6.2 - SUSE Linux Enterprise High Performance Computing 15-ESPOS (aarch64 x86_64): libcroco-0.6.12-150000.4.6.2 libcroco-0_6-3-0.6.12-150000.4.6.2 libcroco-0_6-3-debuginfo-0.6.12-150000.4.6.2 libcroco-debuginfo-0.6.12-150000.4.6.2 libcroco-debugsource-0.6.12-150000.4.6.2 libcroco-devel-0.6.12-150000.4.6.2 - SUSE Linux Enterprise High Performance Computing 15-ESPOS (x86_64): libcroco-0_6-3-32bit-0.6.12-150000.4.6.2 libcroco-0_6-3-32bit-debuginfo-0.6.12-150000.4.6.2 - SUSE Enterprise Storage 6 (aarch64 x86_64): libcroco-0.6.12-150000.4.6.2 libcroco-0_6-3-0.6.12-150000.4.6.2 libcroco-0_6-3-debuginfo-0.6.12-150000.4.6.2 libcroco-debuginfo-0.6.12-150000.4.6.2 libcroco-debugsource-0.6.12-150000.4.6.2 libcroco-devel-0.6.12-150000.4.6.2 - SUSE Enterprise Storage 6 (x86_64): libcroco-0_6-3-32bit-0.6.12-150000.4.6.2 libcroco-0_6-3-32bit-debuginfo-0.6.12-150000.4.6.2 - SUSE CaaS Platform 4.0 (x86_64): libcroco-0.6.12-150000.4.6.2 libcroco-0_6-3-0.6.12-150000.4.6.2 libcroco-0_6-3-32bit-0.6.12-150000.4.6.2 libcroco-0_6-3-32bit-debuginfo-0.6.12-150000.4.6.2 libcroco-0_6-3-debuginfo-0.6.12-150000.4.6.2 libcroco-debuginfo-0.6.12-150000.4.6.2 libcroco-debugsource-0.6.12-150000.4.6.2 libcroco-devel-0.6.12-150000.4.6.2 References: https://www.suse.com/security/cve/CVE-2020-12825.html https://bugzilla.suse.com/1171685 . A significant patch has been released for SUSE addressing a looping problem in libcroco that impacts various systems.. SUSE Security Update, Libcroco Fix, CaaS Platform, Enterprise Storage, Patch Recommendation. . Severity: Important. LinuxSecurity.com Team
An update that fixes one vulnerability is now available. . SUSE Security Update: Security update for libcroco ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:2909-1 Rating: important References: #1171685 Cross-References: CVE-2020-12825 CVSS scores: CVE-2020-12825 (NVD) : 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H CVE-2020-12825 (SUSE): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H Affected Products: SUSE Linux Enterprise Server 12-SP2-BCL SUSE Linux Enterprise Server 12-SP3-BCL SUSE Linux Enterprise Server 12-SP4-LTSS SUSE Linux Enterprise Server 12-SP5 SUSE Linux Enterprise Server for SAP 12-SP4 SUSE Linux Enterprise Server for SAP Applications 12-SP5 SUSE Linux Enterprise Software Development Kit 12-SP5 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 9 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libcroco fixes the following issues: - CVE-2020-12825: Fixed an uncontrolled recursion issue (bsc#1171685). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE OpenStack Cloud Crowbar 9: zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-9-2022-2909=1 - SUSE OpenStack Cloud 9: zypper in -t patch SUSE-OpenStack-Cloud-9-2022-2909=1 - SUSE Linux Enterprise Software Development Kit 12-SP5: zypper in -t patch SUSE-SLE-SDK-12-SP5-2022-2909=1 - SUSE Linux Enterprise Server for SAP 12-SP4: zypper in -t patch SUSE-SLE-SAP-12-SP4-2022-2909=1 - SUSE LinuxEnterprise Server 12-SP5: zypper in -t patch SUSE-SLE-SERVER-12-SP5-2022-2909=1 - SUSE Linux Enterprise Server 12-SP4-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-SP4-LTSS-2022-2909=1 - SUSE Linux Enterprise Server 12-SP3-BCL: zypper in -t patch SUSE-SLE-SERVER-12-SP3-BCL-2022-2909=1 - SUSE Linux Enterprise Server 12-SP2-BCL: zypper in -t patch SUSE-SLE-SERVER-12-SP2-BCL-2022-2909=1 Package List: - SUSE OpenStack Cloud Crowbar 9 (x86_64): libcroco-0_6-3-0.6.11-12.6.45 libcroco-0_6-3-32bit-0.6.11-12.6.45 libcroco-0_6-3-debuginfo-0.6.11-12.6.45 libcroco-0_6-3-debuginfo-32bit-0.6.11-12.6.45 libcroco-debuginfo-0.6.11-12.6.45 libcroco-debugsource-0.6.11-12.6.45 - SUSE OpenStack Cloud 9 (x86_64): libcroco-0_6-3-0.6.11-12.6.45 libcroco-0_6-3-32bit-0.6.11-12.6.45 libcroco-0_6-3-debuginfo-0.6.11-12.6.45 libcroco-0_6-3-debuginfo-32bit-0.6.11-12.6.45 libcroco-debuginfo-0.6.11-12.6.45 libcroco-debugsource-0.6.11-12.6.45 - SUSE Linux Enterprise Software Development Kit 12-SP5 (aarch64 ppc64le s390x x86_64): libcroco-0.6.11-12.6.45 libcroco-debuginfo-0.6.11-12.6.45 libcroco-debugsource-0.6.11-12.6.45 libcroco-devel-0.6.11-12.6.45 - SUSE Linux Enterprise Server for SAP 12-SP4 (ppc64le x86_64): libcroco-0_6-3-0.6.11-12.6.45 libcroco-0_6-3-debuginfo-0.6.11-12.6.45 libcroco-debuginfo-0.6.11-12.6.45 libcroco-debugsource-0.6.11-12.6.45 - SUSE Linux Enterprise Server for SAP 12-SP4 (x86_64): libcroco-0_6-3-32bit-0.6.11-12.6.45 libcroco-0_6-3-debuginfo-32bit-0.6.11-12.6.45 - SUSE Linux Enterprise Server 12-SP5 (aarch64 ppc64le s390x x86_64): libcroco-0_6-3-0.6.11-12.6.45 libcroco-0_6-3-debuginfo-0.6.11-12.6.45 libcroco-debuginfo-0.6.11-12.6.45 libcroco-debugsource-0.6.11-12.6.45 - SUSE Linux Enterprise Server 12-SP5 (s390x x86_64): libcroco-0_6-3-32bit-0.6.11-12.6.45 libcroco-0_6-3-debuginfo-32bit-0.6.11-12.6.45 - SUSE Linux Enterprise Server 12-SP4-LTSS (aarch64 ppc64le s390x x86_64): libcroco-0_6-3-0.6.11-12.6.45 libcroco-0_6-3-debuginfo-0.6.11-12.6.45 libcroco-debuginfo-0.6.11-12.6.45 libcroco-debugsource-0.6.11-12.6.45 - SUSE Linux Enterprise Server 12-SP4-LTSS (s390x x86_64): libcroco-0_6-3-32bit-0.6.11-12.6.45 libcroco-0_6-3-debuginfo-32bit-0.6.11-12.6.45 - SUSE Linux Enterprise Server 12-SP3-BCL (x86_64): libcroco-0_6-3-0.6.11-12.6.45 libcroco-0_6-3-32bit-0.6.11-12.6.45 libcroco-0_6-3-debuginfo-0.6.11-12.6.45 libcroco-0_6-3-debuginfo-32bit-0.6.11-12.6.45 libcroco-debuginfo-0.6.11-12.6.45 libcroco-debugsource-0.6.11-12.6.45 - SUSE Linux Enterprise Server 12-SP2-BCL (x86_64): libcroco-0_6-3-0.6.11-12.6.45 libcroco-0_6-3-32bit-0.6.11-12.6.45 libcroco-0_6-3-debuginfo-0.6.11-12.6.45 libcroco-0_6-3-debuginfo-32bit-0.6.11-12.6.45 libcroco-debuginfo-0.6.11-12.6.45 libcroco-debugsource-0.6.11-12.6.45 References: https://www.suse.com/security/cve/CVE-2020-12825.html https://bugzilla.suse.com/1171685 . A critical update from SUSE addresses a notable stack overflow vulnerability in libcroco across different operating systems.. SUSE Linux, Libcroco, Security Patch, Update Instructions. . Severity: Important. LinuxSecurity.com Team
An update that fixes one vulnerability is now available. . openSUSE Security Update: Security update for libcroco ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1294-1 Rating: moderate References: #1171685 Cross-References: CVE-2020-12825 CVSS scores: CVE-2020-12825 (NVD) : 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H CVE-2020-12825 (SUSE): 2.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libcroco fixes the following issues: - CVE-2020-12825: Fixed recursion issue in block and any productions (bsc#1171685). This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1294=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libcroco-0.6.13-lp152.2.3.1 libcroco-0_6-3-0.6.13-lp152.2.3.1 libcroco-0_6-3-debuginfo-0.6.13-lp152.2.3.1 libcroco-debuginfo-0.6.13-lp152.2.3.1 libcroco-debugsource-0.6.13-lp152.2.3.1 libcroco-devel-0.6.13-lp152.2.3.1 - openSUSE Leap 15.2 (x86_64): libcroco-0_6-3-32bit-0.6.13-lp152.2.3.1 libcroco-0_6-3-32bit-debuginfo-0.6.13-lp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-12825.html https://bugzilla.suse.com/1171685 . A recent update for libcroco tackles a significant vulnerability within openSUSE, fortifying the system's security via effective patch management.. libcroco security update, openSUSE leap security, moderaterisk patch. . LinuxSecurity.com Team
An update that fixes one vulnerability is now available. . SUSE Security Update: Security update for libcroco ______________________________________________________________________________ Announcement ID: SUSE-SU-2021:3123-1 Rating: moderate References: #1171685 Cross-References: CVE-2020-12825 CVSS scores: CVE-2020-12825 (NVD) : 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H CVE-2020-12825 (SUSE): 2.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L Affected Products: SUSE MicroOS 5.0 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libcroco fixes the following issues: - CVE-2020-12825: Fixed recursion issue in block and any productions (bsc#1171685). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE MicroOS 5.0: zypper in -t patch SUSE-SUSE-MicroOS-5.0-2021-3123=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2021-3123=1 - SUSE Linux Enterprise Module for Basesystem 15-SP2: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP2-2021-3123=1 Package List: - SUSE MicroOS 5.0 (aarch64 x86_64): libcroco-0_6-3-0.6.13-3.3.1 libcroco-0_6-3-debuginfo-0.6.13-3.3.1 libcroco-debuginfo-0.6.13-3.3.1 libcroco-debugsource-0.6.13-3.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): libcroco-0.6.13-3.3.1 libcroco-0_6-3-0.6.13-3.3.1 libcroco-0_6-3-debuginfo-0.6.13-3.3.1 libcroco-debuginfo-0.6.13-3.3.1 libcroco-debugsource-0.6.13-3.3.1 libcroco-devel-0.6.13-3.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP2 (aarch64 ppc64le s390x x86_64): libcroco-0.6.13-3.3.1 libcroco-0_6-3-0.6.13-3.3.1 libcroco-0_6-3-debuginfo-0.6.13-3.3.1 libcroco-debuginfo-0.6.13-3.3.1 libcroco-debugsource-0.6.13-3.3.1 libcroco-devel-0.6.13-3.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP2 (x86_64): libcroco-0_6-3-32bit-0.6.13-3.3.1 libcroco-0_6-3-32bit-debuginfo-0.6.13-3.3.1 References: https://www.suse.com/security/cve/CVE-2020-12825.html https://bugzilla.suse.com/1171685 . SUSE has released a Security Update that includes a fix for libcroco, targeting a moderate risk recursion vulnerability.. SUSE Update, libcroco Fix, MicroOS Security, Patch Instructions. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.