SUSE SLES15: cobbler / image-sync-formula / inter-server-sync / jose4j / etc (SUSE-SU-2024:1507-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2024:1507-1 advisory. cobbler: - Provide option to use pre-built GRUB bootloader - Prevent parallel executions of cobbler sync actions bsc1218764 image-sync-formula: - Updat...

CVE-2023-51775

The jose4j Java component prior to version 0.9.4 is vulnerable to an Uncontrolled Resource Consumption (CWE-400) flaw. Attackers can trigger a denial of service (DoS) by providing an excessively large p2c (PBES2 Count) value within a JOSE/JWT payload , leading to high CPU consumption. This vulner...