openSUSE 15 Security Update : libxml2 (SUSE-SU-2024:0461-1)

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2024:0461-1 advisory. - CVE-2024-25062: Fixed use-after-free in XMLReader bsc1219576. Tenable has extracted the preceding description block directly from the SUSE security advisor...

SUSE SLES15: java-1_8_0-openj9 / java-1_8_0-openj9-accessibility / etc (SUSE-SU-2024:0479-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0479-1 advisory. Update to OpenJDK 8u402 build 06 with OpenJ9 0.43.0 virtual machine Including OpenJ9 0.41.0 fixes of CVE-2023-5676, bsc1217214...

SUSE SLES15: tomcat10 / tomcat10-admin-webapps / tomcat10-docs-webapp / etc (SUSE-SU-2024:0473-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0473-1 advisory. - CVE-2024-22029: Fixed escalation to root from tomcat user via %post script. bsc1219208 Tenable has extracted the preceding...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : suse-build-key (SUSE-SU-2024:0444-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:0444-1 advisory. This update runs a import-suse-build-key script. The previous libzypp-post-script based installation is...

SUSE SLES15: containerized-data-importer-api / etc (SUSE-SU-2024:0442-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0442-1 advisory. - Set ExclusiveArch conditionally depending on the distro - rebuild with current go release. Tenable has extracted the precedi...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : cosign (SUSE-SU-2024:0430-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:0430-1 advisory. Updated to 2.2.3 jscSLE-23879: Bug Fixes: Fix race condition on verification with multiple signatures...

SUSE SLED15: java-17-openjdk / java-17-openjdk-demo / java-17-openjdk-devel / etc (SUSE-SU-2024:0325-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0325-1 advisory. Updated to version 17.0.10 January 2024 CPU: - CVE-2024-20918: Fixed an out of bounds access in...

SUSE SLES15: libpython2_7-1_0 / libpython2_7-1_0-32bit / python / python-32bit / etc (SUSE-SU-2024:0329-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0329-1 advisory. - CVE-2023-27043: Fixed incorrectly parses e-mail addresses which contain a special character bsc1210638. Tenable has extracted the...

SUSE SLES15 / openSUSE 15 Security Update : python-uamqp (SUSE-SU-2024:0323-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:0323-1 advisory. - CVE-2024-21646: Fix integer overflow which may cause remote code execution bsc1219409. Tenable has extracted the preceding...

SUSE SLED15: bouncycastle / bouncycastle-javadoc / bouncycastle-jmail / etc (SUSE-SU-2024:0327-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0327-1 advisory. - Updated jsch to version 0.2.15: - CVE-2023-48795: Fixed a prefix truncation issue that could lead to...

SUSE SLED15: libxerces-c-3_2 / libxerces-c-3_2-32bit / libxerces-c-devel / etc (SUSE-SU-2024:0320-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0320-1 advisory. - CVE-2018-1311: fixed use-after-free triggered during the scanning of external DTDs potentially leading ...

SUSE SLED15: liboath-devel / liboath0 / libopenconnect5 / libpskc-devel / etc (SUSE-SU-2024:0317-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0317-1 advisory. - Update to release 9.12: Explicitly reject overly long tun device names. Increase maximum input...

SUSE SLED15: java-11-openjdk / java-11-openjdk-demo / java-11-openjdk-devel / etc (SUSE-SU-2024:0321-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0321-1 advisory. Updated to version 11.0.22 January 2024 CPU: - CVE-2024-20918: Fixed an out of bounds access in...

SUSE SLES15 / openSUSE 15 Security Update : runc (SUSE-SU-2024:0295-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:0295-1 advisory. Update to runc v1.1.11: - CVE-2024-21626: Fixed container breakout. bsc1218894 Tenable has extracted the preceding description...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : cpio (SUSE-SU-2024:0305-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0305-1 advisory. - Fixed cpio not extracting correctly when using --no-absolute-filenames option the security fix for...

openSUSE 15 Security Update : tinyssh (openSUSE-SU-2024:0036-1)

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2024:0036-1 advisory. - The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity...

openSUSE 15 Security Update : mbedtls (openSUSE-SU-2024:0037-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2024:0037-1 advisory. - An issue was discovered in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2. There was a timing side channel in RSA private operations. This side channe...

SUSE SLES15: libnss_slurm2_20_11 / libpmi0_20_11 / libslurm36 / perl-slurm_20_11 / etc (SUSE-SU-2024:0288-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0288-1 advisory. Security fixes: - CVE-2023-41914: Prevent filesystem race conditions that could let an attacker take control of an arbitrary file...

openSUSE 15: libnss_slurm2_20_02 / libpmi0_20_02 / perl-slurm_20_02 / etc (SUSE-SU-2024:0278-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0278-1 advisory. Security fixes: - CVE-2023-49933: Prevent message extension attacks that could bypass the message hash. bsc1218046 - CVE-2023-49936: Prevent NULL...

SUSE SLES15: libnss_slurm2_22_05 / libpmi0_22_05 / libslurm38 / perl-slurm_22_05 / etc (SUSE-SU-2024:0283-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0283-1 advisory. Update to slurm 22.05.11: Security fixes: - CVE-2023-49933: Prevent message extension attacks that could bypass the message hash...