Threat database

Multiple security vulnerabilities have been identified and fixed in the python-Pillow library, addressing issues such as decompression bomb protection bypasses, denial of service via infinite loops and memory exhaustion, heap buffer overflows, out-of-bounds reads, and potential code execution. These flaws affect various image formats and parsing operations, including MPO, DCX, PDF, TIFF, MIC, FPX JPEG, APNG, GIF, and others. The update resolves these critical issues to prevent resource exhaustion, crashes, and potential remote code execution.

This SUSE Linux Enterprise Kernel update addresses multiple security vulnerabilities affecting various kernel components including crypto, xfrm, sctp, ipvs, SUNRPC, nfsd, and ipv4. The update fixes issues such as improper handling of initialization vectors, stale pointers after asynchronous crypto operations, overflow conditions, and memory management errors. These vulnerabilities are collectively rated as high severity and are resolved in this security update.

This security update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.72 addresses multiple security vulnerabilities affecting various kernel components such as virtiofs, netfs, xfrm, sctp, ipvs, SUNRPC, nfsd, and ipv4. The fixes resolve issues including use-after-free, buffer overruns, stale pointers, overflow conditions, and error path bugs. These vulnerabilities were identified by their CVE identifiers and have been remediated in this update.

A use-after-free (UAF) vulnerability exists in the libstdc++ library of gcc48 due to improper pointer update when the erase_if function is called on a binary heap priority queue. This issue is addressed by a security update from SUSE.

This security update for the nvidia-open-driver-G06-signed package addresses multiple security vulnerabilities by updating CUDA and non-CUDA variants to version 580.196.07. The update includes fixes for a large number of CVEs associated with the previous security release 580.178.04. No specific technical details or exploitation methods are provided in the available data.