SUSE-SU-2024:2585-1 Security update for kernel-firmware-nvidia-gspx-G06

This update for kernel-firmware-nvidia-gspx-G06 fixes the following issues: Update to version 555.42.06 for CUDA. Security Update 550.90.07: - CVE-2024-0090: Fixed out of bounds write bsc1223356. - CVE-2024-0092: Fixed incorrect exception handling bsc1223356. - CVE-2024-0091: Fixed untrusted...

SUSE-SU-2024:2560-1 Security update for apache2

This update for apache2 fixes the following issues: - CVE-2024-38476: Fixed server may use exploitable/malicious backend application output to run local handlers via internal redirect bsc1227269...

SUSE-SU-2024:2447-1 Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024111 fixes several issues. The following security issues were fixed: - CVE-2024-26923: Fixed false-positive lockdep splat for spinlock in unixgc bsc1223683. - CVE-2024-26930: Fixed double free of the ha-vpmap pointer bsc1223681. - CVE-2024-26828:...

SUSE-SU-2024:2410-1 Security update for the Linux Kernel RT (Live Patch 14 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-1505001352 fixes several issues. The following security issues were fixed: - CVE-2024-26923: Fixed false-positive lockdep splat for spinlock in unixgc bsc1223683. - CVE-2024-26828: Fixed underflow in parseserverinterfaces bsc1223363...

SUSE-SU-2024:2394-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47089: kfence: fix memory leak when cat kfence objects bsc1220958. - CVE-2021-47432: lib/generic-radix-tree.c: Do not overflow in peek bsc1225391. -...

SUSE-SU-2024:2372-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47089: kfence: fix memory leak when cat kfence objects bsc1220958. - CVE-2021-47432: lib/generic-radix-tree.c: Do not overflow in peek bsc1225391. -...

SUSE-SU-2024:2332-1 Security update for poppler

This update for poppler fixes the following issues: - CVE-2024-6239: Fixed crash when using pdfinfo with -dests parameter on malformed input files bsc1226916...

SUSE-SU-2024:2288-1 Security update for libxml2

This update for libxml2 fixes the following issues: - CVE-2024-34459: Fixed buffer over-read in xmlHTMLPrintFileContext in xmllint.c bsc1224282...

SUSE-SU-2024:2195-1 Security update for hdf5

This update for hdf5 fixes the following issues: - Fix bsc1224158 - this fixes: CVE-2024-29158, CVE-2024-29161, CVE-2024-29166, CVE-2024-32608, CVE-2024-32610, CVE-2024-32614, CVE-2024-32619, CVE-2024-32620, CVE-2024-33873, CVE-2024-33874, CVE-2024-33875 Additionally, these fixes resolve crashes...

SUSE-SU-2024:2166-1 Security update for the Linux Kernel (Live Patch 21 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024100 fixes several issues. The following security issues were fixed: - CVE-2023-6931: Fixed an out of bounds write in the Performance Events subsystem when adding a new event bsc1218259. - CVE-2024-26852: Fixed use-after-free in ip6routempathnotify...

SUSE-SU-2024:2082-1 Security update for libarchive

This update for libarchive fixes the following issues: - CVE-2024-20696: Fixed heap based out-of-bounds write bsc1225971...

SUSE-SU-2024:2056-1 Security update for libaom

This update for libaom fixes the following issues: - CVE-2024-5171: Fixed heap buffer overflow in imgallochelper caused by integer overflow bsc1226020...

SUSE-SU-2024:1590-2 Security update for ghostscript

This update for ghostscript fixes the following issues: - CVE-2023-52722: Do not allow eexec seeds other than the Type 1 standard while using SAFER mode bsc1223852...

SUSE-SU-2024:2028-2 Security update for tiff

This update for tiff fixes the following issues: - CVE-2023-3164: Fixed a heap buffer overflow in tiffcrop. bsc1212233...

SUSE-SU-2024:1102-1 Security update for xen

This update for xen fixes the following issues: - CVE-2023-28746: Register File Data Sampling bsc1221332 - CVE-2024-2193: Fixed GhostRace, a speculative race conditions. bsc1221334 - CVE-2023-46841: Hhadow stack vs exceptions from emulation stubs bsc1219885...

SUSE-SU-2024:0784-1 Security update for python39

This update for python39 fixes the following issues: - CVE-2023-6597: Fixed symlink bug in cleanup of tempfile.TemporaryDirectory bsc1219666. - CVE-2023-27043: Fixed incorrect e-mqil parsing bsc1210638. - CVE-2023-40217: Fixed a ssl.SSLSocket TLS bypass vulnerability where data is sent unencrypte...

SUSE-SU-2024:0590-1 Security update for bind

This update for bind fixes the following issues: Update to release 9.16.48: Feature Changes: The IP addresses for B.ROOT-SERVERS.NET have been updated to 170.247.170.2 and 2801:1b8:10::b. Security Fixes: Validating DNS messages containing a lot of DNSSEC signatures could cause excessive CPU load,...

SUSE-SU-2024:0589-1 Security update for qemu

This update for qemu fixes the following issues: - CVE-2021-3638: hw/display/ati2d: Fix buffer overflow in ati2dblt bsc1188609 - CVE-2023-3180: virtio-crypto: verify src and dst buffer length for sym request bsc1213925 - CVE-2023-3354: io: remove io watch if TLS channel is closed during handshake...

SUSE-SU-2024:0574-1 Security update for bind

This update for bind fixes the following issues: Update to release 9.16.48: - CVE-2023-50387: Fixed a denial-of-service caused by DNS messages containing a lot of DNSSEC signatures bsc1219823. - CVE-2023-50868: Fixed a denial-of-service caused by NSEC3 closest encloser proof bsc1219826. -...

SUSE-SU-2024:0513-1 Security update for SUSE Manager Server 4.3

This update fixes the following issues: release-notes-susemanager: - Update to SUSE Manager 4.3.11 Migrate from RHEL and its clones to SUSE Liberty Linux Reboot required indication for non-SUSE distributions SSH key rotation for enhanced security Configure remote command execution End of Debian 1...

SUSE-SU-2024:0317-1 Security update for openconnect

This update for openconnect fixes the following issues: - Update to release 9.12: Explicitly reject overly long tun device names. Increase maximum input size from stdin 579. Ignore 0.0.0.0 as NBNS address !446, vpnc-scripts58. Fix stray null in URL path after Pulse authentication 4023bd95. Fix...

SUSE-SU-2024:0183-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2023-50229: Fixed an out of bounds write in the primary version counter for the Phone Book Access Profile implementation bsc1218300. - CVE-2023-50230: Fixed an out of bounds write in the secondary version counter for the Phone Book Access...

SUSE-SU-2024:0141-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unixstreamreadgenericon the...

SUSE-SU-2024:0004-1 Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: - CVE-2023-42890: Fixed processing malicious web content may lead to arbitrary code execution bsc1218033. - CVE-2023-42883: Fixed processing a malicious image may lead to a denial-of-service bsc1218032. - CVE-2023-41074: Fixed use-after-free...

SUSE-SU-2023:4902-1 Security update for openssh

This update for openssh fixes the following issues: - CVE-2023-48795: Fixed prefix truncation breaking ssh channel integrity bsc1217950. the following non-security bug was fixed: - Fix the 'no route to host' error when connecting via ProxyJump...

SUSE-SU-2023:4359-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-31085: Fixed a divide-by-zero error in dodivsz,mtd-erasesize that could cause a local DoS. bsc1210778 - CVE-2023-45862: Fixed an issue in the ENE...

SUSE-RU-2023:4334-1 Recommended update for slurm_23_02

This update for slurm2302 fixes the following issues: - Updated to version 23.02.5 with the following changes: Bug Fixes: + Revert a change in 23.02 where SLURMNTASKS was no longer set in the job's environment when --ntasks-per-node was requested. The method that is is being set, however, is...

SUSE-SU-2023:4285-1 Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-1504002438 fixes several issues. The following security issues were fixed: - CVE-2023-4147: Fixed use-after-free in nftablesnewrule bsc1215118. - CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to achieve...

SUSE-RU-2023:4192-1 Recommended update for libssh2_org

This update for libssh2org fixes the following issues: - Upgrade to version 1.11.0 in SLE-15: jscPED-7040 Update to 1.11.0: Enhancements and bugfixes - Adds support for encrypt-then-mac ETM MACs - Adds support for AES-GCM crypto protocols - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed255...

SUSE-SU-2023:4159-1 Security update for suse-module-tools

This update for suse-module-tools fixes the following issues: - Updated to version 12.13: - CVE-2023-1829: Blacklisted the Linux kernel tcindex classifier module bsc1210335. - CVE-2023-23559: Blacklisted the Linux kernel RNDIS modules bsc1205767, jscPED-5731. - Disabled the isstifmboxmsr driver...

SUSE-SU-2023:3700-1 Security update for go1.20

This update for go1.20 fixes the following issues: Update to go1.20.8 bsc1206346. - CVE-2023-39318: Fixed improper handling of HTML-like comments within script contexts in html/template bsc1215084. - CVE-2023-39319: Fixed improper handling of special tags within script contexts in html/template...

SUSE-SU-2023:3628-1 Security update for the Linux Kernel (Live Patch 32 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-15030059121 fixes several issues. The following security issues were fixed: - CVE-2023-32233: Fixed a use-after-free in Netfilter nftables when processing batch requests bsc1211187. - CVE-2023-2156: Fixed a flaw in the networking subsystem within the handli...

SUSE-SU-2023:3262-1 Security update for kernel-firmware

This update for kernel-firmware fixes the following issues: - CVE-2023-20569: Fixed AMD 19h ucode to mitigate a side channel vulnerability in some of the AMD CPUs. bsc1213287...

SUSE-SU-2023:2946-1 Security update for openssh

This update for openssh fixes the following issue: - CVE-2023-38408: Fixed a condition where specific libaries loaded via ssh-agent1's PKCS11 support could be abused to achieve remote code execution via a forwarded agent socket if those libraries were present on the victim's system and if the age...

SUSE-SU-2023:2831-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-1077: Fixed a type confusion in picknextrtentity, that could cause memory corruption bsc1208600. - CVE-2023-1249: Fixed a use-after-free flaw in t...

SUSE-SU-2023:2290-1 Security update for ucode-intel

This update for ucode-intel fixes the following issues: - Updated to Intel CPU Microcode 20230512 release. bsc1211382 - New Platforms | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | ADL-N | A0 |...

SUSE-SU-2023:0779-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-3606: Fixed a null pointer dereference inside the function findprogbysecinsn of the file tools/lib/bpf/libbpf.c of the component BPF bsc1204502. -...

SUSE-SU-2023:0768-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. - CVE-2021-4203: Fixed use-after-free read flaw that was found in sockgetsockopt in net/core/sock.c due to SOPEERCRED and SOPEERGROUPS race with listen bsc1194535. - CVE-2022-2991: Fixed an heap-based...

SUSE-SU-2023:0681-1 Security update for python-py

This update for python-py fixes the following issues: Bugfixes: - Fixed bugs introduced with the fix for CVE-2022-42969 bsc1204364, bsc1208181...

SUSE-SU-2023:0435-1 Security update for java-17-openjdk

This update for java-17-openjdk fixes the following issues: Updated to version jdk-17.0.6.0+10: - CVE-2023-21835: Fixed handshake DoS attack against DTLS connections bsc1207246. - CVE-2023-21843: Fixed soundbank URL remote loading bsc1207248. Bugfixes: - Avoid calling CGetInfo too early, before...

SUSE-SU-2022:0562-2 Security update for jasper

This update for jasper fixes the following issues: - CVE-2021-27845: Fixed divide-by-zery issue in cpcreate bsc1188437...

SUSE-SU-2023:0305-2 Security update for openssl-1_0_0

This update for openssl-100 fixes the following issues: - CVE-2023-0286: Fixed X.400 address type confusion in X.509 GENERALNAMEcmp for x400Address bsc1207533. - CVE-2023-0215: Fixed use-after-free following BIOnewNDEF bsc1207536. - CVE-2022-4304: Fixed timing Oracle in RSA Decryption bsc1207534...

SUSE-SU-2023:0293-1 Security update for nginx

This update for nginx fixes the following issues: - CVE-2022-41741: Handle duplicated atoms in mp4 streams, to mitigate out-of-bound reads. bsc1204526 - CVE-2022-41742: Handle duplicated atoms in mp4 streams, to mitigate out-of-bound reads. bsc1204527...

SUSE-FU-2022:4496-1 Feature update for SCA patterns

This update for SCA patterns fixes the following issues: sca-patterns-base: - Version update from 1.3.1 to 1.5.0 to implement the conversion of SCA Tool to Python3 jscSLE-25064, jscSLE-24335: Convert SCA Tool from Python2 to Python3 bsc1191005, SLE-21579 Added Core.loadFullFile for sectionless...

SUSE-SU-2022:4266-1 Security update for nginx

This update for nginx fixes the following issues: - CVE-2021-3618: Fixed the ALPACA attack limiting the number of errors after which the connection is closed bsc1187685...

SUSE-SU-2022:4146-1 Security update for binutils

This update for binutils fixes the following issues: The following security bugs were fixed: - CVE-2019-1010204: Fixed out-of-bounds read in elfcpp/elfcppfile.h bsc1142579. - CVE-2021-3530: Fixed stack-based buffer overflow in demanglepath in rust-demangle.c bsc1185597. - CVE-2021-3648: Fixed...

SUSE-SU-2022:4069-1 Security update for php7

This update for php7 fixes the following issues: - Version update to 7.4.33: - CVE-2022-31630: Fixed out-of-bounds read due to insufficient input validation in imageloadfont bsc1204979. - CVE-2022-37454: Fixed buffer overflow in hashupdate on long parameter bsc1204577. - Version update to 7.4.32...

SUSE-SU-2022:4005-1 Security update for php8

This update for php8 fixes the following issues: - CVE-2022-37454: Fixed buffer overflow in hashupdate on long parameter bug81738 bsc1204577. - CVE-2022-31630: Fixed OOB read due to insufficient input validation in imageloadfont bug81739 bsc1204979. - version update to 8.0.25 27 Oct 2022 Session:...

SUSE-SU-2022:3888-1 Security update for vsftpd

This update for vsftpd fixes the following issues: - CVE-2021-3618: Enforced security checks against ALPACA attack PM-3322, bsc1187686, bsc1187678. Bugfixes: - Fixed a seccomp failure in FIPS mode when SSL was enabled bsc1052900. - Allowed wait4 to be called so that the broker can wait for its...

SUSE-SU-2022:3682-1 Security update for bind

This update for bind fixes the following issues: - CVE-2022-2795: Fixed potential performance degredation due to missing database lookup limits when processing large delegations bsc1203614. - CVE-2022-38177: Fixed a memory leak that could be externally triggered in the DNSSEC verification code fo...