SUSE-SU-2024:3987-1 Security update for java-1_8_0-openjdk

This update for java-180-openjdk fixes the following issues: Update to version jdk8u432 icedtea-3.33.0: - CVE-2024-21208: Enhance HTTP client bsc1231702. - CVE-2024-21210: Improve handling of vectorization bsc1231711. - CVE-2024-21217: Improve deserialization support bsc1231716. - CVE-2024-21235:...

SUSE-SU-2024:3922-1 Security update for libgsf

This update for libgsf fixes the following issues: - CVE-2024-42415, CVE-2024-36474: Fixed integer overflows affecting memory allocation bsc1231282, bsc1231283...

SUSE-SU-2024:3822-1 Security update for the Linux Kernel (Live Patch 57 for SLE 12 SP5)

This update for the Linux Kernel 4.12.14-122219 fixes several issues. The following security issues were fixed: - CVE-2024-35863: Fixed potential UAF in isvalidoplockbreak bsc1225011. - CVE-2023-52752: smb: client: fix use-after-free bug in cifsdebugdataprocshow bsc1225819. - CVE-2024-35862: Fixe...

SUSE-SU-2024:3770-1 Security update for libgsf

This update for libgsf fixes the following issues: - CVE-2016-9888: Fixed null pointer dereference with corrupted tar files bsc1014609 - CVE-2024-36474: Fixed out-of-bounds index when processing a directory via an integer overflow in the compound document binary file format parser bsc1231282 -...

SUSE-SU-2024:3760-1 Security update for python3

This update for python3 fixes the following issues: Security fixes: - CVE-2024-9287: properly quote path names provided when creating a virtual environment bsc1232241 Other fixes: - Drop .pyc files from docdir for reproducible builds bsc1230906...

SUSE-SU-2024:3720-1 Security update for jetty-minimal

This update for jetty-minimal fixes the following issues: - CVE-2024-8184: Fixed remote denial-of-service in ThreadLimitHandler.getRemote bsc1231651...

SUSE-SU-2024:3628-1 Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-1506008 fixes several issues. The following security issues were fixed: - CVE-2024-35861: Fixed potential UAF in cifssignalcifsdforreconnect bsc1225312. - CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfochangednotify bsc1225739. - CVE-2024-40954...

SUSE-SU-2024:3627-1 Security update for the Linux Kernel RT (Live Patch 17 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-1505001361 fixes several issues. The following security issues were fixed: - CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails bsc1227808 - CVE-2024-41059: hfsplus: fix uninit-value in copyname bsc1228573. - CVE-2024-40909...

SUSE-SU-2024:3552-1 Security update for pgadmin4

This update for pgadmin4 fixes the following issues: - CVE-2024-4216: Fixed XSS in /settings/store endpoint bsc1223868...

SUSE-SU-2024:3546-1 Security update for podman

This update for podman fixes the following issues: - CVE-2024-9341: Fixed FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library bsc1231230...

SUSE-SU-2024:3458-1 Security update for kubernetes1.24

This update of kubernetes1.24 fixes the following issues: - rebuild the package with the current go 1.23 security release bsc1229122...

SUSE-SU-2024:3515-1 Security update for expat

This update for expat fixes the following issues: - CVE-2024-45492: integer overflow in function nextScaffoldPart. bsc1229932 - CVE-2024-45491: integer overflow in dtdCopy. bsc1229931 - CVE-2024-45490: negative length for XMLParseBuffer not rejected. bsc1229930...

SUSE-SU-2024:3500-1 Security update for openssl-3

This update for openssl-3 fixes the following issues: - CVE-2024-41996: Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used, allows remote attackers to trigger expensive server-side DHE bsc1230698...

SUSE-SU-2024:3445-1 Security update for opensc

This update for opensc fixes the following issues: - CVE-2024-45620: Incorrect handling of the length of buffers or files in pkcs15init. bsc1230076 - CVE-2024-45619: Incorrect handling length of buffers or files in libopensc. bsc1230075 - CVE-2024-45618: Uninitialized values after incorrect or...

SUSE-SU-2024:3423-1 Security update for xen

This update for xen fixes the following issues: - CVE-2024-2201: Mitigation for Native Branch History Injection XSA-456, bsc1222453 - CVE-2024-31143: Fixed double unlock in x86 guest IRQ handling XSA-458, bsc1227355 - CVE-2024-31145: Fixed error handling in x86 IOMMU identity mapping XSA-460,...

SUSE-SU-2024:3398-1 Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-1506002314 fixes one issue. The following security issue was fixed: - CVE-2024-40909: Fix a potential use-after-free in bpflinkfree bsc1228349...

SUSE-SU-2024:3397-1 Security update for libmfx

This update for libmfx fixes the following issues: - CVE-2023-48368: Fixed an improper input validation. bsc1226897 - CVE-2023-45221: Fixed an improper buffer restrictions. bsc1226898 - CVE-2023-22656: Fixed an out-of-bounds read. bsc1226899 - CVE-2023-47282: Fixed an out-of-bounds write...

SUSE-SU-2024:3384-1 Security update for python3

This update for python3 fixes the following issues: - CVE-2024-6232: excessive backtracking when parsing tarfile headers leads to ReDoS. bsc1230227 - CVE-2024-7592: quadratic algorithm used when parsing cookies leads to excessive resource consumption. bsc1229596...

SUSE-SU-2024:3345-1 Security update for python-azure-identity

This update for python-azure-identity fixes the following issues: - CVE-2024-35255: Fixed an Azure identity libraries elevation of privilege vulnerability. bsc1230100...

SUSE-SU-2024:3332-1 Security update for ucode-intel

This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20240910 release bsc1230400 - CVE-2024-23984: Observable discrepancy in RAPL interface for some Intel Processors may allow a privileged user to potentially enable information disclosure via local...

SUSE-SU-2024:3322-1 Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-150600105 fixes one issue. The following security issue was fixed: - CVE-2024-40909: Fix a potential use-after-free in bpflinkfree bsc1228349...

SUSE-SU-2024:3319-1 Security update for the Linux Kernel RT (Live Patch 16 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-1505001358 fixes several issues. The following security issues were fixed: - CVE-2024-40909: Fix a potential use-after-free in bpflinkfree bsc1228349. - CVE-2023-52846: Prevent use after free in prpcreatetaggedframe bsc1225099. - CVE-2024-26923: Fixed...

SUSE-SU-2024:3318-1 Security update for the Linux Kernel RT (Live Patch 11 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-1505001338 fixes several issues. The following security issues were fixed: - CVE-2023-52846: Prevent use after free in prpcreatetaggedframe bsc1225099. - CVE-2022-48662: Fixed a general protection fault GPF in i915perfopenioctl bsc1223521. - CVE-2022-48662...

SUSE-SU-2024:3302-1 Security update for python3

This update for python3 fixes the following issues: - CVE-2024-6923: Fixed uncontrolled CPU resource consumption when in http.cookies module bsc1228780. - CVE-2024-7592: Fixed Email header injection due to unquoted newlines bsc1229596 Bug fixes: - %profileopt variable is set according to the...

SUSE-SU-2024:3250-1 Security update for wireshark

This update for wireshark fixes the following issues: - CVE-2024-8250: Fixed NTLMSSP dissector crash bsc1229907...

SUSE-SU-2024:3217-1 Security update for libpcap

This update for libpcap fixes the following issues: - CVE-2024-8006: NULL pointer dereference in function pcapfindalldevsex. bsc1230034 - CVE-2023-7256: double free via struct addrinfo in function sockinitaddress. bsc1230020...

SUSE-SU-2024:3203-1 Security update for curl

This update for curl fixes the following issues: - CVE-2024-8096: OCSP stapling bypass with GnuTLS. bsc1230093...

SUSE-SU-2024:3188-1 Security update for containerd

This update for containerd fixes the following issues: - Update to containerd v1.7.21 - CVE-2023-47108: Fixed DoS vulnerability in otelgrpc uncontrolled resource consumption due to unbound cardinality metrics. bsc1217070 - CVE-2023-45142: Fixed DoS vulnerability in otelhttp. bsc1228553...

SUSE-SU-2024:3082-1 Security update for 389-ds

This update for 389-ds fixes the following issues: Security issues fixed: - CVE-2024-3657: Fixed potential denial of service via specially crafted kerberos AS-REQ request bsc1225512 - CVE-2024-5953: Fixed a denial of service caused by malformed userPassword hashes bsc1226277 - CVE-2024-2199: Fixe...

SUSE-SU-2024:3078-1 Security update for libqt5-qtquick3d

This update for libqt5-qtquick3d fixes the following issues: - CVE-2024-40724: Fixed heap-based buffer overflow in the PLY importer class in assimp bsc1228199 Other fixes: - Fix progressive anti-aliasing, which doesn't work if any object in the scene used a PrincipledMaterial - Skip processing...

SUSE-SU-2024:3021-1 Security update for the Linux Kernel (Live Patch 48 for SLE 12 SP5)

This update for the Linux Kernel 4.12.14-122176 fixes one issue. The following security issue was fixed: - CVE-2021-47378: Fixed use-after-free by destroying cm id before destroying qp bsc1225202...

SUSE-SU-2024:2983-1 Security update for qemu

This update for qemu fixes the following issues: - CVE-2024-4467: Fixed denial of service and file read/write via qemu-img info command bsc1227322 - CVE-2024-7409: Fixed denial of service via improper synchronization in QEMU NBD Server during socket closure bsc1229007 nbd/server: Close stray...

SUSE-SU-2024:2975-1 Security update for libqt5-qt3d

This update for libqt5-qt3d fixes the following issues: - CVE-2024-40724: Fixed heap-based buffer overflow in the PLY importer class in assimp bsc1228204 Other fixes: - Check for a nullptr returned from the shader manager - Fill image with transparency by default to avoid having junk if it's not...

SUSE-SU-2024:2930-1 Security update for curl

This update for curl fixes the following issues: - CVE-2024-7264: Fixed out-of-bounds read in ASN.1 date parser GTime2str bsc1228535...

SUSE-SU-2024:2927-1 Security update for openssl-1_1

This update for openssl-11 fixes the following issues: - CVE-2024-5535: Fixed a buffer overread in function SSLselectnextproto with an empty supported client protocols buffer bsc1227138 Other fixes: - Build with no-afalgeng bsc1226463...

SUSE-SU-2024:2910-1 Security update for 389-ds

This update for 389-ds fixes the following issues: Security issues fixed: - CVE-2024-3657: Fixed potential denial of service via specially crafted kerberos AS-REQ request bsc1225512 - CVE-2024-5953: Fixed a denial of service caused by malformed userPassword hashes bsc1226277 - CVE-2024-2199: Fixe...

SUSE-SU-2024:2909-1 Security update for openssl-1_1

This update for openssl-11 fixes the following issues: - CVE-2024-5535: Fixed a buffer overread in function SSLselectnextproto with an empty supported client protocols buffer bsc1227138...

SUSE-SU-2024:2876-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 128.1.0 ESR MFSA 2024-35, bsc1228648 - CVE-2024-7518: Fullscreen notification dialog can be obscured by document - CVE-2024-7519: Out of bounds memory access in graphics shared memory handling -...

SUSE-SU-2024:2868-1 Security update for bind

This update for bind fixes the following issues: Security issues fixed: - It is possible to craft excessively large numbers of resource record types for a given owner name, which has the effect of slowing down database processing. This has been addressed by only allowing a maximum of 100 records ...

SUSE-SU-2024:2859-1 Security update for kubernetes1.24

This update for kubernetes1.24 fixes the following issues: - CVE-2021-25743: Fixed sanitization of raw data of escape, meta or control sequences before output it to terminal bsc1194400...

SUSE-SU-2024:2824-1 Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024108 fixes several issues. The following security issues were fixed: - CVE-2024-27398: Fixed use-after-free bug caused by scosocktimeout bsc1225013. - CVE-2024-35950: drm/client: Fully protect modes with dev-modeconfig.mutex bsc1225310. -...

SUSE-SU-2024:2814-1 Security update for ffmpeg

This update for ffmpeg fixes the following issues: - CVE-2024-32230: Fixed buffer overflow due to negative-size-param bug at libavcodec/mpegvideoenc.c in loadinputpicture bsc1227296...

SUSE-SU-2024:2808-1 Security update for shadow

This update for shadow fixes the following issues: - Fixed not copying of skel files bsc1228770...

SUSE-SU-2024:2793-1 Security update for the Linux Kernel (Live Patch 37 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-15030059138 fixes several issues. The following security issues were fixed: - CVE-2024-27398: Fixed use-after-free bug caused by scosocktimeout bsc1225013. - CVE-2024-35950: drm/client: Fully protect modes with dev-modeconfig.mutex bsc1225310...

SUSE-SU-2024:2273-1 Security update for podman

This update for podman fixes the following issues: - CVE-2024-6104: Fixed a potential leak of sensitive information on HTTP log file bsc1227052...

SUSE-SU-2024:2760-1 Security update for the Linux Kernel (Live Patch 43 for SLE 15 SP2)

This update for the Linux Kernel 5.3.18-15020024172 fixes several issues. The following security issues were fixed: - CVE-2024-27398: Fixed use-after-free bug caused by scosocktimeout bsc1225013. - CVE-2024-35950: drm/client: Fully protect modes with dev-modeconfig.mutex bsc1225310...

SUSE-SU-2024:2758-1 Security update for the Linux Kernel (Live Patch 47 for SLE 15 SP2)

This update for the Linux Kernel 5.3.18-15020024188 fixes several issues. The following security issues were fixed: - CVE-2024-27398: Fixed use-after-free bug caused by scosocktimeout bsc1225013. - CVE-2024-35950: drm/client: Fully protect modes with dev-modeconfig.mutex bsc1225310. -...

SUSE-SU-2024:2750-1 Security update for the Linux Kernel RT (Live Patch 5 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-1505001318 fixes several issues. The following security issues were fixed: - CVE-2024-27398: Fixed use-after-free bug caused by scosocktimeout bsc1225013. - CVE-2024-35950: drm/client: Fully protect modes with dev-modeconfig.mutex bsc1225310...

SUSE-SU-2024:2734-1 Security update for the Linux Kernel RT (Live Patch 3 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-1505001311 fixes several issues. The following security issues were fixed: - CVE-2024-27398: Fixed use-after-free bug caused by scosocktimeout bsc1225013. - CVE-2024-35950: drm/client: Fully protect modes with dev-modeconfig.mutex bsc1225310...

SUSE-SU-2024:2732-1 Security update for python-Twisted

This update for python-Twisted fixes the following issues: - CVE-2024-41671: Fixed an information disclosure due to HTTP requests processed out-of-order bsc1228549 - CVE-2024-41810: Fixed reflected XSS via HTML injection in redirect response bsc1228552...