SUSE-SU-2024:1138-1

Import Source

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2024:1138-1

Related

Published

2024-04-08T09:31:11Z

Modified

2024-04-08T09:31:11Z

Summary

Security update for guava

Details

This update for guava fixes the following issues:

Upgrade to guava from v30.1.1 to v32.0.1
CVE-2023-2976: Fixed Predictable temporary files and directories used in FileBackedOutputStream. (bsc#1212401)
CVE-2020-8908: Fixed a bug that could allow an attacker with access to the machine to potentially access data in a temporary directory created by the Guava. (bsc#1179926)

References

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

32.0.1-150400.3.3.1

{
    "binaries": [
        {
            "guava": "32.0.1-150400.3.3.1"
        }
    ]
}