SUSE SLES15 Security Update : ldb, samba (SUSE-SU-2023:1687-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:1687-1 advisory. - A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a...

SUSE SLES15 Security Update : xorg-x11-server (SUSE-SU-2023:1679-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:1679-1 advisory. - CVE-2023-1393: Fixed use-after-free overlay window ZDI-CAN-19866 bsc1209543. Tenable has extracted the preceding description block directl...

SUSE SLES15: ctdb / libdcerpc-binding0 / libdcerpc-binding0-32bit / etc (SUSE-SU-2023:1682-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:1682-1 advisory. - CVE-2023-0922: Fixed Samba AD DC admin tool samba-tool sending passwords in cleartext bso15315 bsc1209481. Tenable has...

SUSE SLES15 Security Update : tomcat (SUSE-SU-2023:1669-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:1669-1 advisory. - When using the RemoteIpFilter with requests received from a reverse proxy via HTTP that include the X-Forwarded-Proto header set to https,...

SUSE SLES15: ruby2.5-rubygem-rack / ruby2.5-rubygem-rack-doc / etc (SUSE-SU-2023:1685-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:1685-1 advisory. - CVE-2023-27539: Fixed denial of service in header parsing bsc1209503. Tenable has extracted the preceding description block directly fro...

SUSE SLES15 / openSUSE 15 Security Update : python-Werkzeug (SUSE-SU-2023:1664-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:1664-1 advisory. - Werkzeug is a comprehensive WSGI web application library. Prior to version 2.2.3, Werkzeug's multipart form data parser will...

SUSE SLED15: xorg-x11-server / xorg-x11-server-extra / xorg-x11-server-sdk / etc (SUSE-SU-2023:1675-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:1675-1 advisory. - CVE-2023-1393: Fixed use-after-free overlay window ZDI-CAN-19866 bsc1209543. Tenable has extracted the...

SUSE SLED15: ctdb / ctdb-pcp-pmda / ldb-tools / libldb-devel / libldb2 / etc (SUSE-SU-2023:1689-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:1689-1 advisory. ldb: - CVE-2022-32746: Fixed an use-after-free issue in the database audit logging module...

SUSE SLES15 / openSUSE 15 Security Update : rubygem-loofah (SUSE-SU-2023:1657-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:1657-1 advisory. - Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. Loofa...

SUSE SLED15: xorg-x11-server / xorg-x11-server-extra / xorg-x11-server-sdk / etc (SUSE-SU-2023:1678-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:1678-1 advisory. - CVE-2023-1393: Fixed use-after-free overlay window ZDI-CAN-19866 bsc1209543. Tenable has extracted the...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : sudo (SUSE-SU-2023:1665-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:1665-1 advisory. - Sudo before 1.9.13p2 has a double free in the per-command chroot feature. CVE-2023-27320 - Sud...

SUSE SLES15 / openSUSE 15 Security Update : samba (SUSE-SU-2023:1683-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:1683-1 advisory. - The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset password...

SUSE SLED15: apache2 / apache2-devel / apache2-doc / apache2-event / etc (SUSE-SU-2023:1658-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:1658-1 advisory. - CVE-2023-27522: Fixed HTTP response splitting in modproxyuwsgi bsc1209049. - CVE-2023-25690:...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : xstream (SUSE-SU-2023:1673-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:1673-1 advisory. - Those using Xstream to seralize XML data may be vulnerable to Denial of Service attacks DOS. I...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : zstd (SUSE-SU-2023:1688-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:1688-1 advisory. - A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libmicrohttpd (SUSE-SU-2023:1686-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:1686-1 advisory. - GNU libmicrohttpd before 0.9.76 allows remote DoS Denial of Service due to improper parsing of a...

SUSE SLES15 / openSUSE 15 Security Update : containerd (SUSE-SU-2023:1628-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:1628-1 advisory. - containerd is an open source container runtime. A bug was found in containerd's CRI implementation where a user can exhaust...

SUSE SLES15 Security Update : kernel (Live Patch 2 for SLE 15 SP4) (SUSE-SU-2023:1649-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:1649-1 advisory. - A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRVCTLIOCTLELEMREAD|WRITE32 is missing locks that can be...

SUSE SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2023:1609-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:1609-1 advisory. - A vulnerability was found in Linux Kernel. It has been classified as problematic. Affected is an unknown function of the file...

SUSE SLES15 Security Update : kernel (Live Patch 34 for SLE 15 SP2) (SUSE-SU-2023:1610-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2023:1610-1 advisory. This update for the Linux Kernel 5.3.18-15020024145 fixes one issue. The following security issue was fixed: - CVE-2023-1078: Fixed a heap out-of-bound...