SUSE SLED15 / SLES15 Security Update : python-cryptography (SUSE-SU-2025:01662-2)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:01662-2 advisory. - CVE-2025-3416: openssl: use-after-free in Md::fetch and Cipher::fetch when Some... value passed as properties argume...

SUSE SLED15: gstreamer-plugins-bad / gstreamer-plugins-bad-devel / etc (SUSE-SU-2025:01737-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:01737-1 advisory. - CVE-2025-3887: Fixed possible RCE vulnerability via buffer overflow in H265 Codec Parsing bsc1242809. Tenable has...

SUSE SLED15 / SLES15 Security Update : ucode-intel (SUSE-SU-2025:01651-2)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01651-2 advisory. Intel CPU Microcode was updated to the 20250512 release bsc1243123 - CVE-2024-28956: Exposure of Sensitive...

SUSE SLES15 Security Update : slurm (SUSE-SU-2025:01760-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:01760-1 advisory. - CVE-2025-43904: an issue with permission handling for Coordinators within the accounting system allowed Coordinators to promote a user to...

SUSE SLES15: libwx_base-suse-devel / libwx_base-suse-nostl-devel / etc (SUSE-SU-2025:01735-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:01735-1 advisory. - CVE-2024-58249: Fixed crash when connection is refused in wxWebRequestCURL bsc1239902 Tenable has extracted the preceding description...

SUSE SLES15 / openSUSE 15 Security Update : slurm_23_02 (SUSE-SU-2025:01758-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:01758-1 advisory. - CVE-2025-43904: an issue with permission handling for Coordinators within the accounting system allowed Coordinators to promote a user ...

SUSE SLED15 / SLES15 Security Update : dnsdist (SUSE-SU-2025:01743-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01743-1 advisory. Update to version 1.9.10. - CVE-2025-30194: illegal memory access double-free when processing specially craft...

SUSE SLES15: tomcat10 / tomcat10-admin-webapps / tomcat10-el-5_0-api / etc (SUSE-SU-2025:01537-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01537-1 advisory. Update to Tomcat 10.1.40 - CVE-2025-31650: invalid priority field values should be ignored bsc1242008 - CVE-2025-31651: Better...

SUSE SLES12 Security Update : slurm_22_05 (SUSE-SU-2025:01755-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:01755-1 advisory. - CVE-2025-43904: an issue with permission handling for Coordinators within the accounting system allowed Coordinators to promote a user to...

SUSE SLES12 Security Update : postgresql13 (SUSE-SU-2025:01750-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:01750-1 advisory. Upgrade to 13.21: - CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validatio...

SUSE SLES15: tomcat / tomcat-admin-webapps / tomcat-el-3_0-api / etc (SUSE-SU-2025:01521-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01521-1 advisory. Update to Tomcat 9.0.104 - CVE-2025-31650: invalid priority field values should be ignored bsc1242008 - CVE-2025-31651: Better...

SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2025:01464-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01464-1 advisory. - CVE-2025-43965: Fixed mishandling of image depth after SetQuantumFormat is used in MIFF image processing...

SUSE SLED15 / SLES15 Security Update : python-tornado (SUSE-SU-2025:01726-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:01726-1 advisory. - CVE-2025-47287: excessive logging when parsing malformed multipart/form-data can lead to a denial-of- service...

SUSE SLES15: libmariadbd-devel / libmariadbd19 / mariadb / mariadb-bench / etc (SUSE-SU-2025:01716-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:01716-1 advisory. Update to version 10.11.11. - CVE-2025-21490: vulnerability allows high privileged attacker with network access to cause hang...

SUSE SLES15 Security Update : go1.23-openssl (SUSE-SU-2025:01731-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01731-1 advisory. Update to version 1.23.9 bsc1229122: Security fixes: - CVE-2024-45336: net/http: sensitive headers incorrectly sent after...

SUSE SLES15 / openSUSE 15 Security Update : python39-setuptools (SUSE-SU-2025:01723-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:01723-1 advisory. - CVE-2025-47273: path traversal in PackageIndex.download may lead to an arbitrary file write bsc1243313. Tenable has extract...

SUSE SLES12: libjavascriptcoregtk-4_0-18 / libwebkit2gtk-4_0-37 / etc (SUSE-SU-2025:01720-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01720-1 advisory. Update to version 2.48.2. Security issues fixed: - CVE-2025-31205: lack of checks may lead to cross-origin data exfiltration through a malicio...

SUSE SLES15: gstreamer-plugins-bad / gstreamer-plugins-bad-chromaprint / etc (SUSE-SU-2025:01725-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:01725-1 advisory. - CVE-2025-3887: Fixed possible RCE vulnerability via buffer overflow in H265 Codec Parsing bsc1242809. Tenable has extracted the preceding...

SUSE SLES15 / openSUSE 15 Security Update : govulncheck-vulndb (SUSE-SU-2025:01713-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:01713-1 advisory. - Update to version 0.0.20250523T151856 2025-05-23T15:18:56Z jscPED-11136 GO-2025-3699 GO-2025-3690 GO-2025-3691 GO-2025-3692 GO-2025-369...

SUSE SLES12 Security Update : MozillaFirefox (SUSE-SU-2025:01710-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01710-1 advisory. Update to Firefox Extended Support Release 128.10.1 ESR. - MFSA 2025-37 bsc1243303 CVE-2025-4918: Out-of-bounds access when resolving Promise...