SUSE: Security Advisory (SUSE-SU-2024:1703-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES12: libosinfo / libosinfo-1_0-0 / libosinfo-devel / libosinfo-lang / etc (SUSE-SU-2024:1700-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:1700-1 advisory. - CVE-2019-13313: Fixed password leak via command line argument inside osinfo-install-script bsc1140749. Tenable has extracted the preceding...

SUSE SLES12: MozillaFirefox / MozillaFirefox-devel / etc (SUSE-SU-2024:1676-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1676-1 advisory. Update to version 115.11.0 ESR bsc1224056: - CVE-2024-4367: Arbitrary JavaScript execution in PDF.js - CVE-2024-4767: IndexedDB fil...

Virtuozzo Hybrid Infrastructure 6.1 Update 1 (6.1.1-35)

In this release, Virtuozzo Hybrid Infrastructure enables virtual CPU and RAM overcommitment per node, as well as provides stability and performance improvements, and addresses issues found in previous releases. Vulnerability id: VSTOR-49565 Network errors occur when migrating a VM that was...

AZL-42226 CVE-2024-35978 affecting package kernel for versions less than 5.15.158.1-1

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix memory leak in hcireqsynccomplete In 'hcireqsynccomplete', always free the previous sync request state before assigning reference to a new one...

AZL-42204 CVE-2024-35972 affecting package kernel for versions less than 5.15.158.1-1

In the Linux kernel, the following vulnerability has been resolved: bnxten: Fix possible memory leak in bnxtrdmaauxdeviceinit If ulp = kzalloc fails, the allocated edev will leak because it is not properly assigned and the cleanup path will not be able to free it. Fix it by assigning it properly...

SUSE: Security Advisory (SUSE-SU-2024:1675-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2024:1676-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-35931 drm/amdgpu: Skip do PCI error slot reset during RAS recovery

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Skip do PCI error slot reset during RAS recovery Why: The PCI error slot reset maybe triggered after inject ue to UMC multi times, this caused system hang. 557.371857 amdgpu 0000:af:00.0: amdgpu: GPU reset succeeded,...

AZL-56262 CVE-2024-35904 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: selinux: avoid dereference of garbage after mount failure In case kernmount fails and returns an error pointer return in the error branch instead of continuing and dereferencing the error pointer. While on it drop the never read...

AZL-59566 CVE-2024-35865 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2isvalidoplockbreak Skip sessions that are being teared down status == SESEXITING to avoid UAF...

AZL-54687 CVE-2024-35864 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2isvalidleasebreak Skip sessions that are being teared down status == SESEXITING to avoid UAF...

CVE-2023-52671

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix hang/underflow when transitioning to ODM4:1 Why Under some circumstances, disabling an OPTC and attempting to reclaim its OPPs for a different OPTC could cause a hang/underflow due to OPPs not being properly...

CVE-2020-15586 affecting package python-tensorboard for versions less than 2.16.2-1

CVE-2020-15586 affecting package python-tensorboard for versions less than 2.16.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-1941 affecting package python-tensorboard for versions less than 2.16.2-1

CVE-2022-1941 affecting package python-tensorboard for versions less than 2.16.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-21698 affecting package keda for versions less than 2.14.0-1

CVE-2022-21698 affecting package keda for versions less than 2.14.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-51779 affecting package hyperv-daemons for versions less than 6.6.29.1-1

CVE-2023-51779 affecting package hyperv-daemons for versions less than 6.6.29.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-27078 affecting package hyperv-daemons for versions less than 6.6.29.1-1

CVE-2024-27078 affecting package hyperv-daemons for versions less than 6.6.29.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-45288 affecting package docker-buildx for versions less than 0.14.0-1

CVE-2023-45288 affecting package docker-buildx for versions less than 0.14.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-3115 affecting package python-tensorboard for versions less than 2.16.2-1

CVE-2021-3115 affecting package python-tensorboard for versions less than 2.16.2-1. An upgraded version of the package is available that resolves this issue...