openSUSE Essential And Critical Security Patch Updates - Page 21
Find the information you need for your favorite open source distribution.
Find the information you need for your favorite open source distribution.
This update for python39 fixes the following issues: CVE-2023-6597: Fixed symlink bug in cleanup of tempfile.TemporaryDirectory (bsc#1219666).
This update for postgresql-jdbc fixes the following issues: CVE-2024-1597: Fixed SQL Injection via line comment generation (bsc#1220644).
This update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed fixes the following issues: Update to 550.54.14
This update for python-cryptography fixes the following issues: CVE-2024-26130: Fixed NULL pointer dereference in pkcs12.serialize_key_and_certificates() (bsc#1220210).
This update for wpa_supplicant fixes the following issues: CVE-2023-52160: Bypassing WiFi Authentication (bsc#1219975).
This update for rubygem-rack fixes the following issues: CVE-2024-25126: Fixed a denial-of-service vulnerability in Rack Content-Type parsing (bsc#1220239).
This update for sendmail fixes the following issues: CVE-2023-51765: Fixed new SMTP smuggling attack. (bsc#1218351)
An update that fixes one vulnerability is now available.
This update for nodejs16 fixes the following issues: Security issues fixed:
This update for nodejs16 fixes the following issues: Security issues fixed:
This update for dnsdist fixes the following issues: update to 1.8.0 Implements dnsdist in SLE15 (jsc#PED-3402)
This update for glib2 fixes the following issues: CVE-2021-28153: Fixed an issue where symlink targets would be incorrectly created as empty files (bsc#1183533).
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed:
This update for gcc12 fixes the following issues: CVE-2023-4039: Fixed incorrect stack protector for C99 VLAs on Aarch64 (bsc#1214052).
This update for poppler fixes the following issues: CVE-2022-27337: Fixed a logic error in the Hints::Hints function which can cause denial of service (bsc#1199272).
This update for python311 fixes the following issues: python was updated to version 3.11.4:
This update for gnutls fixes the following issues: CVE-2024-0567: Fixed an incorrect rejection of certificate chains with distributed trust (bsc#1218862).
This update for bind fixes the following issues: CVE-2023-2828: Fixed denial-of-service against recursive resolvers related to cache-cleaning algorithm (bsc#1212544).
This update for openssl-1_0_0 fixes the following issues: CVE-2022-4304: Reworked the fix for the Timing-Oracle in RSA decryption. The previous fix for this timing side channel turned out to cause a severe 2-3x
This update for sccache fixes the following issues: CVE-2023-1521: Fixed possible code injection via LD_PRELOAD to sccache server (bsc#1212407).