SUSE-EL-9-CLIENT-TOOLS-2024-4019 Security update for SUSE Manager Client Tools

This update fixes the following issues: golang-github-lusitaniae-apacheexporter was updated from version 1.0.1 to 1.0.8: - Security issues fixed: CVE-2023-3978: Fixed security bug in x/net dependency in version 1.0.2 bsc1213933 - Bugs fixed: Require Go 1.20 when building for RedHat derivatives...

SUSE-SU-2024:4011-1 Security update for SUSE Manager Client Tools

This update fixes the following issues: golang-github-lusitaniae-apacheexporter: - Security issues fixed: CVE-2023-3978: Fixed security bug in x/net dependency bsc1213933 - Other changes and issues fixed: Delete unpackaged debug files for RHEL Do not include source files in the package for RHEL 9...

SUSE-SU-2024:4010-1 Security update for SUSE Manager Client Tools

This update fixes the following issues: golang-github-lusitaniae-apacheexporter: - Security issues fixed: CVE-2023-3978: Fixed security bug in x/net dependency bsc1213933 - Other changes and issues fixed: Delete unpackaged debug files for RHEL Do not include source files in the package for RHEL 9...

SUSE-SU-2024:4009-1 Security update for SUSE Manager Server 5.0

This update fixes the following issues: server-attestation-image: - Version 5.0.6 Update for next release server-hub-xmlrpc-api-image: - Version 5.0.8 Update for next release server-image: - Version 5.0.9 Add HANA and cluster formulas to Server image bsc1230536 Use /etc/krb5.conf.d for all kerber...

SUSE-RU-2024:4008-1 Security update for SUSE Manager Server 5.0

This update fixes the following issues: uyuni-storage-setup: - Version 5.0.3-0 Do not create partition on extra storage disk - Version 5.0.2-0 Do not build debuginfo package uyuni-tools: - Security issues fixed: Version 0.1.24-0 + CVE-2024-22037: Use podman secret to store the database credential...

SUSE-SU-2024:4007-1 Security update for SUSE Manager Server 4.3

This update fixes the following issues: release-notes-susemanager: - Update to SUSE Manager 4.3.14 Ubuntu 24.04 support as client Product migration from RHEL and Clones to SUSE Liberty Linux POS image templates now produce compressed images Date format for API endpoints has been changed to ISO-86...

SUSE-SU-2024:4006-1 Security update for SUSE Manager Server 4.3

This update fixes the following issues: cobbler: - Security issues fixed: CVE-2024-47533: Prevent privilege escalation from none to admin bsc1231332 - Other bugs fixed: Increase start timeout for cobblerd unit bsc1219450 Provide syncsinglesystem for DHCP modules to improve performance bsc1219450...

SUSE-SU-2024:3999-1 Security update for apache2

This update for apache2 fixes the following issues: - CVE-2023-45802: Fixed regression with previous fix bsc1233165...

SUSE-SU-2024:3998-1 Security update for glib2

This update for glib2 fixes the following issues: - CVE-2024-52533: Fixed a single byte buffer overflow bsc1233282...

SUSE-SU-2024:3997-1 Security update for python3-wxPython

This update for python3-wxPython fixes the following issues: - CVE-2024-50602: Fixed a denial of service in the vendored libexpat's XMLResumeParser function bsc1232590...

SUSE-SU-2024:3995-1 Security update for ucode-intel

This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20241112 release bsc1233313 - CVE-2024-21853: Faulty finite state machines FSMs in the hardware logic in some 4th and 5th Generation Intel Xeon Processors may allow an authorized user to potentially...

SUSE-SU-2024:3988-1 Security update for buildah

This update for buildah fixes the following issues: - CVE-2024-9676: Fixed github.com/containers/storage: symlink traversal vulnerability in the containers/storage library can cause Denial of Service DoS bsc1231698: - CVE-2024-9675: VUL-0: CVE-2024-9675: buildah,podman: buildah: cache arbitrary...

SUSE-SU-2024:3987-1 Security update for java-1_8_0-openjdk

This update for java-180-openjdk fixes the following issues: Update to version jdk8u432 icedtea-3.33.0: - CVE-2024-21208: Enhance HTTP client bsc1231702. - CVE-2024-21210: Improve handling of vectorization bsc1231711. - CVE-2024-21217: Improve deserialization support bsc1231716. - CVE-2024-21235:...

SUSE-SU-2024:3986-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too bsc1226797. - CVE-2024-41031: mm/filemap: skip to create PMD-sized page...

SUSE-SU-2024:3985-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-48879: efi: fix NULL-deref in init error path bsc1229556. - CVE-2022-48956: ipv6: avoid use-after-free in ip6fragment bsc1231893. - CVE-2022-48957:...

SUSE-SU-2024:3984-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too bsc1226797. - CVE-2024-41031: mm/filemap: skip to create PMD-sized...

SUSE-SU-2024:3983-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-48879: efi: fix NULL-deref in init error path bsc1229556. - CVE-2022-48956: ipv6: avoid use-after-free in ip6fragment bsc1231893. - CVE-2022-48957:...

SUSE-SU-2024:3980-1 Security update for xen

This update for xen fixes the following issues: Security issues fixed: - CVE-2024-45818: xen: Deadlock in x86 HVM standard VGA handling bsc1232622 - CVE-2024-45819: xen: libxl leaks data to PVH guests via ACPI tables bsc1232624 - CVE-2024-45817: xen: x86: Deadlock in vlapicerror bsc1230366...

SUSE-SU-2024:3979-1 Security update for xen

This update for xen fixes the following issues: Security issues fixed: - CVE-2024-45818: xen: Deadlock in x86 HVM standard VGA handling bsc1232622 - CVE-2024-45819: xen: libxl leaks data to PVH guests via ACPI tables bsc1232624 Non-security issue fixed: - Xen host hung at boot up with repeated 'X...

SUSE-SU-2024:3977-1 Security update for xen

This update for xen fixes the following issues: - CVE-2024-45818: Fixed deadlock in x86 HVM standard VGA handling XSA-463 bsc1232622. - CVE-2024-45819: Fixed libxl data leaks to PVH guests via ACPI tables XSA-464 bsc1232624. Bug fixes: - Remove usage of net-tools-deprecated from supportconfig...

SUSE-SU-2024:3976-1 Security update for pcp

This update for pcp fixes the following issues: pcp was updated from version 3.11.9 to version 6.2.0 jscPED-8192, jscPED-8389: - Security issues fixed: CVE-2024-45770: Fixed a symlink attack that allows escalating from the pcp to the root user bsc1230552 CVE-2024-45769: Fixed a heap corruption...

SUSE-RU-2024:3971-1 Recommended update for mojo-parent

This update for mojo-parent fixes the following issues: xalan-j2 was updated from version 2.7.2 to 2.7.3: - Security issues fixed: CVE-2022-34169: Fixed integer truncation issue when processing malicious XSLT stylesheets bsc1201684 - Changes and Bugs fixed: Java 8 is now the minimum requirement...

SUSE-SU-2024:3968-1 Security update for expat

This update for expat fixes the following issues: - CVE-2024-50602: Fixed a denial of service via XMLResumeParser bsc1232579...

SUSE-SU-2024:3966-1 Security update for expat

This update for expat fixes the following issues: - CVE-2024-50602: Fixed a denial of service via XMLResumeParser bsc1232579...

SUSE-SU-2024:3964-1 Security update for python-wxPython

This update for python-wxPython fixes the following issues: Security issue fixed: - CVE-2024-50602: Fixed a denial of service in the vendored libexpat's XMLResumeParser function bsc1232590. Non-security issues fixed: - rebuilt for python 3.11 bsc1228252. - add repack script, do not include...

SUSE-SU-2024:3963-1 Security update for java-17-openjdk

This update for java-17-openjdk fixes the following issues: - Update to upstream tag jdk-17.0.13+11 October 2024 CPU Security fixes + JDK-8307383: Enhance DTLS connections + JDK-8290367, JDK-8332643: Update default value and extend the scope of com.sun.jndi.ldap.object.trustSerialData system...

SUSE-SU-2024:3962-1 Security update for apache2

This update for apache2 fixes the following issues: - CVE-2023-45802: HTTP/2 stream memory not reclaimed right away on RST bsc1216423...

SUSE-SU-2024:3961-1 Security update for apache2

This update for apache2 fixes the following issues: - CVE-2023-45802: HTTP/2 stream memory not reclaimed right away on RST bsc1216423...

SUSE-SU-2024:3960-1 Security update for libheif

This update for libheif fixes the following issues: - CVE-2024-41311: Fixed out-of-bounds read and write in ImageOverlay:parse due to decoding a heif file containing an overlay image with forged offsets bsc1231714...

SUSE-SU-2024:3959-1 Security update for python312

This update for python312 fixes the following issues: - CVE-2024-9287: Fixed quoted path names provided when creating a virtual environment bsc1232241. Bug fixes: - Drop .pyc files from docdir for reproducible builds bsc1230906...

SUSE-SU-2024:3958-1 Security update for python311

This update for python311 fixes the following issues: - CVE-2024-9287: Fixed quoted path names provided when creating a virtual environment bsc1232241. Bug fixes: - Drop .pyc files from docdir for reproducible builds bsc1230906...

SUSE-SU-2024:3957-1 Security update for python311

This update for python311 fixes the following issues: - CVE-2024-9287: Fixed quoted path names provided when creating a virtual environment bsc1232241. Bug fixes: - Drop .pyc files from docdir for reproducible builds bsc1230906...

SUSE-SU-2024:3954-1 Security update for java-21-openjdk

This update for java-21-openjdk fixes the following issues: - Update to upstream tag jdk-21.0.5+13 October 2024 CPU Security fixes + JDK-8307383: Enhance DTLS connections + JDK-8311208: Improve CDS Support + JDK-8328286, CVE-2024-21208, bsc1231702: Enhance HTTP client + JDK-8328544, CVE-2024-2121...

SUSE-SU-2024:3950-1 Security update for govulncheck-vulndb

This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20241104T154416 2024-11-04T15:44:16Z. Refs jscPED-11136 Go CVE Numbering Authority IDs added or updated with aliases: GO-2024-3233 CVE-2024-46872 GHSA-762g-9p7f-mrww GO-2024-3234 CVE-2024-47401...

SUSE-SU-2024:3949-1 Security update for apache2

This update for apache2 fixes the following issues: - CVE-2023-45802: HTTP/2 stream memory not reclaimed right away on RST bsc1216423...

SUSE-SU-2024:3948-1 Security update for qemu

This update for qemu fixes the following issues: - CVE-2024-8354: Fixed assertion failure in usbepget bsc1230834. - CVE-2024-8612: Fixed nformation leak in virtio devices bsc1230915. - CVE-2024-7409: Fixed denial of service via improper synchronization in QEMU NBD Server during socket closure...

SUSE-SU-2024:3945-1 Security update for python39

This update for python39 fixes the following issues: - CVE-2024-9287: Fixed quoted path names provided when creating a virtual environment bsc1232241. Bug fixes: - Drop .pyc files from docdir for reproducible builds bsc1230906...

SUSE-SU-2024:3944-1 Security update for python3

This update for python3 fixes the following issues: - CVE-2024-9287: Fixed quoted path names provided when creating a virtual environment bsc1232241. Bug fixes: - Drop .pyc files from docdir for reproducible builds bsc1230906...

SUSE-SU-2024:3943-1 Security update for openssl-3

This update for openssl-3 fixes the following issues: - CVE-2023-50782: Implicit rejection in PKCS1 v1.5 bsc1220262...

SUSE-SU-2024:3942-1 Security update for ghostscript

This update for ghostscript fixes the following issues: - CVE-2024-46951: Fixed arbitrary code execution via unchecked 'Implementation' pointer in 'Pattern' color space bsc1232265. - CVE-2024-46953: Fixed integer overflow when parsing the page format results in path truncation, path traversal, co...

SUSE-SU-2024:3941-1 Security update for ghostscript

This update for ghostscript fixes the following issues: - CVE-2024-46951: Fixed arbitrary code execution via unchecked 'Implementation' pointer in 'Pattern' color space bsc1232265. - CVE-2024-46953: Fixed integer overflow when parsing the page format results in path truncation, path traversal, co...

SUSE-SU-2024:3940-1 Security update for libarchive

This update for libarchive fixes the following issues: - CVE-2024-20697: Fixed Out of bounds Remote Code Execution Vulnerability bsc1225972. - CVE-2024-48958: Fixed out-of-bounds access via a crafted archive file in executefilterdelta function bsc1231624...

SUSE-SU-2024:3939-1 Security update for ruby2.1

This update for ruby2.1 fixes the following issues: - CVE-2024-47220: Fixed HTTP request smuggling in WEBrick bsc1230930...

SUSE-SU-2024:3938-1 Security update for go1.22-openssl

This update for go1.22-openssl fixes the following issues: This update ships go1.22-openssl 1.22.7.1 jscSLE-18320 - Update to version 1.22.7.1 cut from the go1.22-fips-release branch at the revision tagged go1.22.7-1-openssl-fips. Update to Go 1.22.7 229 - go1.22.7 released 2024-09-05 includes...

SUSE-SU-2024:3937-1 Security update for go1.23-openssl

This update for go1.23-openssl fixes the following issues: This update ships go1.23-openssl version 1.23.2.2. jscSLE-18320 - go1.23.2 released 2024-10-01 includes fixes to the compiler, cgo, the runtime, and the maps, os, os/exec, time, and unique packages. go69119 os: double close pidfd if calle...

SUSE-SU-2024:3929-1 Security update for python36

This update for python36 fixes the following issues: Security fixes: - CVE-2024-9287: properly quote path names provided when creating a virtual environment bsc1232241 Other fixes: - Drop .pyc files from docdir for reproducible builds bsc1230906...

SUSE-SU-2024:3926-1 Security update for curl

This update for curl fixes the following issues: - CVE-2024-9681: Fixed HSTS subdomain overwrites parent cache entry bsc1232528...

SUSE-SU-2024:3925-1 Security update for curl

This update for curl fixes the following issues: - CVE-2024-9681: Fixed HSTS subdomain overwrites parent cache entry bsc1232528...

SUSE-SU-2024:3924-1 Security update for python310

This update for python310 fixes the following issues: - CVE-2024-9287: Fixed quoted path names provided when creating a virtual environment bsc1232241. Bug fixes: - Drop .pyc files from docdir for reproducible builds bsc1230906...

SUSE-SU-2024:3923-1 Security update for gradle

This update for gradle fixes the following issues: - CVE-2023-35947: Fixed an issue while unpacking tar archives, where files could be created outside of the unpack location bsc1212931...