openSUSE Security Advisory (SUSE-SU-2024:4295-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

radare2-5.9.8-1.1 on GA media (moderate)

radare2-5.9.8-1.1 on GA media Announcement ID: openSUSE-SU-2024:14569-1 Rating: moderate Cross-References: CVE-2024-29645 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the radare2-5.9.8-1.1...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2024:0406-1 Rating: important References: 1234118 Cross-References: CVE-2024-12053 Affected Products: openSUSE Backports SLE-15-SP5 An update that fixes one vulnerability is now available. Description: This update...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : wget (SUSE-SU-2024:4138-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:4138-1 advisory. - CVE-2024-10524: Fixed SSRF via shorthand HTTP URL bsc1233773 Tenable has extracted the preceding...

SUSE SLES15: postgresql13 / postgresql13-contrib / postgresql13-devel / etc (SUSE-SU-2024:4175-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:4175-1 advisory. - CVE-2024-10976: Ensure cached plans are marked as dependent on the calling role when RLS applies to a non-top-level...

SUSE SLES15: apache2-mod_php7 / php7 / php7-bcmath / php7-bz2 / php7-calendar / etc (SUSE-SU-2024:4146-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:4146-1 advisory. - CVE-2024-11233: Single byte overread with convert.quoted-printable-decode filter bsc1233702. - CVE-2024-11234:...

openSUSE 15: libpython3_10-1_0 / libpython3_10-1_0-32bit / python310 / etc (SUSE-SU-2024:4153-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2024:4153-1 advisory. - CVE-2024-11168: improper validation of IPv6 and IPvFuture addresses. bsc1233307 Bug fixes: - Remove -IVendor/ from python-config. bsc1231795 - Include...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python3-virtualenv (SUSE-SU-2024:4143-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:4143-1 advisory. Security issue fixed: - CVE-2024-53899: Fixed a command injection through activation scripts bsc1233706...

SUSE SLES15 / openSUSE 15 Security Update : postgresql12 (SUSE-SU-2024:4099-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:4099-1 advisory. - CVE-2024-10976: Ensure cached plans are marked as dependent on the calling role when RLS applies to a non-top-level...

libsvn_auth_gnome_keyring-1-0-1.14.5-1.1 on GA media (moderate)

libsvnauthgnomekeyring-1-0-1.14.5-1.1 on GA media Announcement ID: openSUSE-SU-2024:14570-1 Rating: moderate Cross-References: CVE-2024-46901 CVSS scores: CVE-2024-46901 SUSE : 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L Affected Products: openSUSE Tumbleweed An update that solves one...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2024:0405-1 Rating: important References: 1234118 Cross-References: CVE-2024-12053 Affected Products: openSUSE Backports SLE-15-SP6 An update that fixes one vulnerability is now available. Description: This update...

openSUSE Security Advisory (SUSE-SU-2024:4291-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2024:4286-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2024:14573-1 teleport-17.0.5-1.1 on GA media

These are all security issues fixed in the teleport-17.0.5-1.1 package on the GA media of openSUSE Tumbleweed...

openSUSE 15 Security Update : cobbler (openSUSE-SU-2024:0370-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2024:0370-1 advisory. Update to 3.3.7 Security: Fix issue that allowed anyone to connect to the API as admin CVE-2024-47533, boo1231332 bind - Fix bug that prevents cname...

SUSE SLES15: helm / helm-bash-completion / helm-fish-completion / etc (SUSE-SU-SUSE-RU-2024:4213-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-SUSE-RU-2024:4213-1 advisory. helm was updated to fix the following issues: Update to version 3.16.3: fix: fix label name Fix typo in...

openSUSE 15 Security Update : chromium (openSUSE-SU-2024:0377-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2024:0377-1 advisory. - Chromium 131.0.6778.85 stable released 2024-11-19 boo1233534 CVE-2024-11395: Type Confusion in V8 Tenable has extracted the preceding description block...

openSUSE 15 Security Update : radare2 (openSUSE-SU-2024:0397-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2024:0397-1 advisory. Update to version 5.9.8: - CVE-2024-29645: buffer overflow vulnerability allows an attacker to execute arbitrary code via the parsedie function boo123406...

openSUSE 15 Security Update : python-python-multipart (SUSE-SU-2024:4194-1)

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2024:4194-1 advisory. - CVE-2024-53981: excessive logging for certain inputs when parsing form data. bsc1234115 Tenable has extracted the preceding description block directly from...

openSUSE 15 Security Update : cobbler (openSUSE-SU-2024:0382-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2024:0382-1 advisory. Update to 3.3.7: Security: Fix issue that allowed anyone to connect to the API as admin CVE-2024-47533, boo1231332 bind - Fix bug that prevents cname...