SUSE SLES12 Security Update : amazon-ssm-agent (SUSE-SU-2023:2656-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:2656-1 advisory. - rebuild the package with the go 1.20 security release bsc1206346. Tenable has extracted the preceding description block directly from the...

SUSE SLES12 Security Update : nodejs18 (SUSE-SU-2023:2662-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2662-1 advisory. Update to version 18.16.1: - CVE-2023-30581: Fixed mainModule.proto Bypass Experimental Policy Mechanism bsc1212574. -...

SUSE SLES12 Security Update : kernel (Live Patch 28 for SLE 12 SP4) (SUSE-SU-2023:2660-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2660-1 advisory. This update for the Linux Kernel 4.12.14-95102 fixes several issues. The following security issues were fixed: - CVE-2023-23455: Fixed a denial...

SUSE SLES12: libopenssl-1_0_0-devel / libopenssl-1_0_0-devel-32bit / etc (SUSE-SU-2023:2624-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2624-1 advisory. - CVE-2022-4304: Reworked the fix for the Timing-Oracle in RSA decryption. The previous fix for this timing side channel turned out to cause...

SUSE SLES12 Security Update : openvswitch (SUSE-SU-2023:2621-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2621-1 advisory. - CVE-2023-1668: Fixed remote traffic denial-of-service via crafted packets with IP proto 0 bsc1210054. Tenable has extracted the preceding...

SUSE SLES12: libopenssl-1_1-devel / libopenssl-1_1-devel-32bit / libopenssl1_1 / etc (SUSE-SU-2023:2623-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2623-1 advisory. - CVE-2022-4304: Reworked the fix for the Timing-Oracle in RSA decryption. The previous fix for this timing side channel turned out to cause...

SUSE SLES12: libjavascriptcoregtk-4_0-18 / libwebkit2gtk-4_0-37 / etc (SUSE-SU-2023:2606-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2606-1 advisory. Add security patches bsc1211846: - CVE-2023-28204: Fixed processing of web content that may disclose sensitive information...

SUSE SLES12 Security Update : ntp (SUSE-SU-2023:2609-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2609-1 advisory. ntp was updated to 4.2.8p17: Fix some regressions of 4.2.8p16 Update to 4.2.8p16: Sec 3808 Assertion failure in ntpq on malformed RT-11 date...

SUSE SLED12 / SLES12 Security Update : bluez (SUSE-SU-2023:2562-1)

The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2562-1 advisory. - CVE-2023-27349: Fixed crash while handling unsupported events bsc1210398. Tenable has extracted the preceding...

SUSE SLES12: libwebp-devel / libwebp5 / libwebp5-32bit / libwebpdecoder1 / etc (SUSE-SU-2023:2552-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2552-1 advisory. - CVE-2023-1999: Fixed double free bsc1210212. Tenable has extracted the preceding description block directly from the SUSE security advisor...

SUSE SLES12: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2023:2537-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2537-1 advisory. The SUSE Linux Enterprise 12 SP4 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were...

SUSE SLES12: libX11-6 / libX11-6-32bit / libX11-data / libX11-devel / etc (SUSE-SU-2023:2531-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2531-1 advisory. - CVE-2023-3138: Fixed buffer overflows in InitExt.c bsc1212102. Tenable has extracted the preceding description block directly from the SUS...

SUSE SLES12: libvmtools0 / open-vm-tools / open-vm-tools-desktop / etc (SUSE-SU-2023:2530-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2530-1 advisory. - CVE-2023-20867: Fixed authentication bypass vulnerability in the vgauth module bsc1212143. Bug fixes: - Fixed build problem with grpc 1.54...

SUSE SLES12: kernel-azure / kernel-azure-base / kernel-azure-devel / etc (SUSE-SU-2023:2507-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2507-1 advisory. The SUSE Linux Enterprise 12 SP5 AZURE kernel was updated to receive various security and bugfixes. The following security bugs wer...

SUSE SLES12: cluster-md-kmp-rt / dlm-kmp-rt / gfs2-kmp-rt / kernel-devel-rt / etc (SUSE-SU-2023:2501-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2501-1 advisory. The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: -...

SUSE SLES12 Security Update : openldap2 (SUSE-SU-2023:2503-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:2503-1 advisory. - CVE-2023-2953: Fixed null pointer deref in bermemallocx bsc1211795. Tenable has extracted the preceding description block directly from th...

SUSE SLES12: libldap-2_4-2 / libldap-2_4-2-32bit / openldap2 / etc (SUSE-SU-2023:2483-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2483-1 advisory. - CVE-2023-2953: Fixed null pointer deref in bermemallocx bsc1211795. Tenable has extracted the preceding description block directly from th...

SUSE SLES12 Security Update : gdb (SUSE-SU-2023:2485-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2485-1 advisory. gdb was updated to 12.1. jscSLE-21561 DBX mode is deprecated, and will be removed in GDB 13. GDB 12 is the last release of GDB that...

SUSE SLED12 / SLES12 Security Update : libcares2 (SUSE-SU-2023:2477-1)

The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2477-1 advisory. - CVE-2023-32067: Fixed a denial of service that could be triggered by a 0-byte UDP payload bsc1211604. -...

SUSE SLES12 Security Update : opensc (SUSE-SU-2023:2466-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:2466-1 advisory. - CVE-2023-2977: Fixed out of bounds read in pkcs15 cardoshaveverifyrcpackage bsc1211894. Tenable has extracted the preceding description...