382 matches found
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : mozjs78 (SUSE-SU-2024:4412-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:4412-1 advisory. - CVE-2024-50602: Fixed DoS via XMLResumeParser bsc1232599 Tenable has extracted the preceding descriptio...
Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-15040024116 fixes several issues. The following security issues were fixed: CVE-2024-35861: Fixed potential UAF in cifssignalcifsdforreconnect bsc1225312. CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfochangednotify bsc1225739. CVE-2024-40954...
SUSE-SU-2024:1368-1 Security update for shim
This update for shim fixes the following issues: - Update shim-install to set the TPM2 SRK algorithm bsc1213945 - Limit the requirement of fde-tpm-helper-macros to the distro with suseversion 1600 and above bsc1219460 Update to version 15.8: Security issues fixed: - mok: fix LogError invocation...
SUSE-SU-2024:0542-1 Security update for postgresql12
This update for postgresql12 fixes the following issues: Upgrade to 12.18: - CVE-2024-0985: Tighten security restrictions within REFRESH MATERIALIZED VIEW CONCURRENTLY bsc1219679...
SUSE-SU-2024:0526-1 Security update for openvswitch
This update for openvswitch fixes the following issues: - CVE-2024-22563: Fixed memory leak via the function xmalloc in /lib/util.c bsc1219059...
SUSE-SU-2023:4647-1 Security update for haproxy
This update for haproxy fixes the following issues: - CVE-2023-45539: Fixed misinterpretation of a pathend rule with as part of the URI component bsc1217653...
SUSE-SU-2023:4115-1 Security update for slurm
This update for slurm fixes the following issues: - CVE-2023-41914: Fixed a filesystem handling race conditions that could lead to an attacker taking control of an arbitrary file. bsc1216207...
SUSE-SU-2023:3658-1 Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-1505005512 fixes one issue. The following security issue was fixed: - CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol bsc1211395...
SUSE-SU-2023:3017-1 Security update for samba
This update for samba fixes the following issues: - CVE-2022-2127: Fixed issue where lmresplen was not checked properly in winbinddpamauthcrapsend bsc1213174. Bugfixes: - Fixed trust relationship failure bsc1213384...
SUSE-SU-2023:2794-1 Security update for bind
This update for bind fixes the following issues: - CVE-2023-2828: Fixed denial-of-service against recursive resolvers related to cache-cleaning algorithm bsc1212544...
SUSE-SU-2023:2609-1 Security update for ntp
This update for ntp fixes the following issues: ntp was updated to 4.2.8p17: Fix some regressions of 4.2.8p16 Update to 4.2.8p16: Sec 3808 Assertion failure in ntpq on malformed RT-11 date Sec 3807, bsc1210390, CVE-2023-26555: praecisparse in the Palisade refclock driver has a hypothetical input...
SUSE-SU-2023:2467-1 Security update for libwebp
This update for libwebp fixes the following issues: - CVE-2023-1999: Fixed a double free bsc1210212...
SUSE: Security Advisory (SUSE-SU-2023:1817-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE-SU-2023:1640-1 Security update for the Linux Kernel (Live Patch 39 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122147 fixes several issues. The following security issues were fixed: - CVE-2023-26545: Fixed double free in net/mpls/afmpls.c upon an allocation failure bsc1208909. - CVE-2023-0266: Fixed a use-after-free vulnerability inside the ALSA PCM package...
SUSE-SU-2023:0320-1 Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400155 fixes one issue. The following security issue was fixed: - CVE-2022-4379: Fixed a use-after-free vulnerability in nfs4file.c:nfs42sscopen bsc1206209...
SUSE-RU-2022:4297-1 Recommended update for pdsh, slurm_22_05
This update for pdsh, slurm2205 fixes the following issues: Slurm was updated to 22.05.5 - Fixes a number of moderate severity issues, noteable are: Load hash plugin at slurmstepd launch time to prevent issues loading the plugin at step completion if the Slurm installation is upgraded. Update nvm...
SUSE-SU-2022:4266-1 Security update for nginx
This update for nginx fixes the following issues: - CVE-2021-3618: Fixed the ALPACA attack limiting the number of errors after which the connection is closed bsc1187685...
SUSE-SU-2022:4054-1 Security update for go1.19
This update for go1.19 fixes the following issues: Update to go 1.19.3 released 2022-11-01 bsc1200441: Security fixes: - CVE-2022-41716: Fixed unsanitized NUL in environment variables in syscalls, os/exec go56327 bsc1204941. Bugfixes: - runtime: lock count' fatal error when cgo is enabled go56308...
Vulnerability fixed in Expat
A vulnerability has been fixed in Expat. A malicious person can cause a use-after-free in libexpat via the doContent function in xmlparse.c. Misuse of the vulnerability potentially results in the following categories of damage: Denial-of-Service DoS. Manipulation of data Remote code execution Use...