SUSE SLES12 Security Update : libXpm (SUSE-SU-2023:3962-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3962-1 advisory. - CVE-2023-43788: Fixed an out of bounds read when creating an image bsc1215686. - CVE-2023-43789: Fixed an out of bounds read when...

SUSE SLES12: MozillaFirefox / MozillaFirefox-devel / etc (SUSE-SU-2023:3950-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3950-1 advisory. Mozilla Firefox was updated to 115.3.1 ESR, fixing a security issue: MFSA 2023-44 bsc1215814 CVE-2023-5217: Fixed heap buffer overflow in...

SUSE SLES12 Security Update : ghostscript (SUSE-SU-2023:3938-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3938-1 advisory. - CVE-2023-43115: Fixed remote code execution via crafted PostScript documents in gdevijs.c b sc1215466. Tenable has extracted the preceding...

SUSE SLES12: libpython3_4m1_0 / libpython3_4m1_0-32bit / python3 / python3-base / etc (SUSE-SU-2023:3939-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3939-1 advisory. - CVE-2023-40217: Fixed TLS handshake bypass on closed sockets bsc1214692. - CVE-2023-41105: Fixed input truncation on null bytes i...

SUSE SLES12 Security Update : vim (SUSE-SU-2023:3942-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3942-1 advisory. Security fixes: - CVE-2023-4733: Fixed use-after-free in function buflistaltfpos bsc1215004. - CVE-2023-4734: Fixed segmentation...

SUSE SLES12: xen / xen-devel / xen-doc-html / xen-libs / xen-libs-32bit / etc (SUSE-SU-2023:3894-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3894-1 advisory. - CVE-2023-20588: Fixed AMD CPU transitional execution leak via division by zero XSA-439 bsc1215474. - CVE-2023-34322: Fixed...

SUSE SLES12 Security Update : SUSE Manager Client Tools (SUSE-SU-2023:3867-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3867-1 advisory. golang-github-lusitaniae-apacheexporter: - Security issues fixed: CVE-2022-32149: Fix denial of service vulnerability bsc1204501...

SUSE SLES12 Security Update : gpg2 (SUSE-SU-2023:3857-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3857-1 advisory. - CVE-2018-9234: Fixed unenforced configuration allows for apparently valid certifications actually signed by signing subkeys bsc1088255...

SUSE SLES12: MozillaFirefox / MozillaFirefox-devel / etc (SUSE-SU-2023:3837-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3837-1 advisory. Update to Firefox Extended Support Release 115.3.0 ESR MFSA 2023-42, bsc1215575: Security fixes: - CVE-2023-5168: Out-of-bounds wri...

SUSE SLES12 Security Update : libpng15 (SUSE-SU-2023:3799-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:3799-1 advisory. Security issue fixed: - CVE-2017-12652: Fixed an Input Validation Error related to the length of chunks bsc1141493. Tenable has extracted th...

SUSE SLES12 Security Update : nghttp2 (SUSE-SU-2023:3842-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3842-1 advisory. - CVE-2023-35945: Fixed memory leak when PUSHPROMISE or HEADERS frame cannot be sent bsc1215713. Tenable has extracted the preceding...

SUSE SLED12 / SLES12 Security Update : netatalk (SUSE-SU-2023:3779-1)

The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3779-1 advisory. - CVE-2023-42464: Fixed afpd daemon vulnerable to type confusion bsc1214744. Tenable has extracted the preceding...

SUSE SLES12: libwebp-devel / libwebp5 / libwebp5-32bit / libwebpdecoder1 / etc (SUSE-SU-2023:3794-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3794-1 advisory. - CVE-2023-4863: Fixed a heap buffer overflow bsc1215231. Tenable has extracted the preceding description block directly from the SUSE...

SUSE SLES12: libospf0 / libospfapiclient0 / libquagga_pb0 / libzebra1 / quagga / etc (SUSE-SU-2023:3793-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3793-1 advisory. - CVE-2023-38802: Fixed bad length handling in BGP attribute handling bsc1213284. - CVE-2023-41358: Fixed possible crash when...

SUSE SLES12: bind / bind-chrootenv / bind-devel / bind-doc / bind-utils / etc (SUSE-SU-2023:3796-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3796-1 advisory. - CVE-2023-3341: Fixed stack exhaustion flaw in control channel code may cause named to terminate unexpectedly bsc1215472. Tenable has...

SUSE SLES12: libvmtools0 / open-vm-tools / open-vm-tools-desktop / etc (SUSE-SU-2023:3795-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3795-1 advisory. Update to 12.3.0 build 22234872 bsc1214850 - There are no new features in the open-vm-tools 12.3.0 release. This is primarily a maintenance...

SUSE SLES12 Security Update : djvulibre (SUSE-SU-2023:3755-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3755-1 advisory. - CVE-2021-46310: Fixed divide by zero in IW44Image.cpp bsc1214670. - CVE-2021-46312: Fixed divide by zero in IW44EncodeCodec.cpp...

SUSE SLES12 Security Update : kernel (Live Patch 47 for SLE 12 SP5) (SUSE-SU-2023:3748-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3748-1 advisory. This update for the Linux Kernel 4.12.14-122173 fixes several issues. The following security issues were fixed: - CVE-2023-1829: Fixed a...

SUSE SLES12 Security Update : kernel (Live Patch 35 for SLE 12 SP5) (SUSE-SU-2023:3749-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3749-1 advisory. This update for the Linux Kernel 4.12.14-122133 fixes several issues. The following security issues were fixed: - CVE-2023-1829: Fixed a...

SUSE SLES12: libpython3_6m1_0 / libpython3_6m1_0-32bit / python36 / etc (SUSE-SU-2023:3731-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3731-1 advisory. - CVE-2023-40217: Fixed TLS handshake bypass on closed sockets bsc1214692. Tenable has extracted the preceding description block directly fr...