SUSE-SU-2025:20106-1 Security update for curl

This update for curl fixes the following issues: - CVE-2024-11053: Fixed password leak used for the first host to the followed-to host under certain circumstances bsc1234068...

Malicious code in sdk-coin-bsc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6650f990174d70d2afd4e0e2d02ef38866923c1d7d37e4acac1bed21b078bc19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-309 Malicious code in sdk-coin-bsc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6650f990174d70d2afd4e0e2d02ef38866923c1d7d37e4acac1bed21b078bc19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security update for sudo

This update for sudo fixes the following issues: CVE-2021-3156: Fixed regression in CVE bsc1234371 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product:...

MAL-2024-11870 Malicious code in bsc-genesis-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b748ec201796843d6518adc42387f04d09ff54e6e79a88c0c9c8915d8b503352 The OpenSSF Package Analysis project identified 'bsc-genesis-contract' @ 99.99.99 npm as malicious. It is considered malicious because: - The...

SUSE-SU-2024:4079-1 Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: Update to version 2.46.3 bsc1232747: - CVE-2024-44244: Processing maliciously crafted web content may lead to an unexpected process crash. - CVE-2024-44296: Processing maliciously crafted web content may prevent Content Security Policy from...

SUSE-SU-2024:4142-1 Security update for wireshark

This update for wireshark fixes the following issues: - CVE-2024-11595: FiveCo RAP dissector infinite loop bsc1233594. - CVE-2024-11596: ECMP dissector crash bsc1233593...

SUSE-SU-2024:4137-1 Security update for python-tornado6

This update for python-tornado6 fixes the following issues: - CVE-2024-52804: Fixed a denial of service caused by quadratic performance of cookie parsing bsc1233668...

openSUSE: Security Advisory for bea (SUSE-SU-2024:4007-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2024:4009-1 Security update for SUSE Manager Server 5.0

This update fixes the following issues: server-attestation-image: - Version 5.0.6 Update for next release server-hub-xmlrpc-api-image: - Version 5.0.8 Update for next release server-image: - Version 5.0.9 Add HANA and cluster formulas to Server image bsc1230536 Use /etc/krb5.conf.d for all kerber...

SUSE-SU-2024:4007-1 Security update for SUSE Manager Server 4.3

This update fixes the following issues: release-notes-susemanager: - Update to SUSE Manager 4.3.14 Ubuntu 24.04 support as client Product migration from RHEL and Clones to SUSE Liberty Linux POS image templates now produce compressed images Date format for API endpoints has been changed to ISO-86...

The vulnerability in the script htdocs/webinc/body/bsc_sms_send.php of the D-Link DIR-860L, DIR-865L, DIR-868L, DIR-880L routers allows a attacker to execute an XSS attack.

The vulnerability in the script htdocs/webinc/body/bscsmssend.php of the D-Link DIR-860L, DIR-865L, DIR-868L, and DIR-880L routers is related to improper validation of input data. Exploiting this vulnerability allows an attacker to execute XSS attacks through a specially created parameter for the...

SUSE: Security Advisory (SUSE-SU-2024:3961-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2024:3959-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2024:3926-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2024:3923-1 Security update for gradle

This update for gradle fixes the following issues: - CVE-2023-35947: Fixed an issue while unpacking tar archives, where files could be created outside of the unpack location bsc1212931...

SUSE-SU-2024:3870-1 Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: Update to version 2.46.0 bsc1231039. - CVE-2024-40866 - CVE-2024-44187 Already fixed in version 2.44.3: - CVE-2024-4558 - CVE-2024-27838 - CVE-2024-27851 Already fixed in version 2.44.2: - CVE-2024-27834 - CVE-2024-27808 - CVE-2024-27820 -...

SUSE-SU-2024:3869-1 Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: Update to version 2.46.0 bsc1231039. - CVE-2024-40866 - CVE-2024-44187 Already fixed in version 2.44.3: - CVE-2024-4558 - CVE-2024-27838 - CVE-2024-27851 Already fixed in version 2.44.2: - CVE-2024-27834 - CVE-2024-27808 - CVE-2024-27820 -...

SUSE-SU-2024:3867-1 Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: - CVE-2024-9632: Fixed heap-based buffer overflow privilege escalation in XkbSetCompatMap bsc1231565...

SUSE-SU-2024:3866-1 Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: - CVE-2024-9632: Fixed heap-based buffer overflow privilege escalation in XkbSetCompatMap bsc1231565...