govulncheck-vulndb-0.0.20241119T173509-1.1 on GA media SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2024:14513-1 Final 1 1 2024-11-20T00:00:00Z current 2024-11-20T00:00:00Z 2024-11-20T00:00:00Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z govulncheck-vulndb-0.0.20241119T173509-1.1 on GA media These are all security issues fixed in the govulncheck-vulndb-0.0.20241119T173509-1.1 package on the GA media of openSUSE Tumbleweed. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). openSUSE-Tumbleweed-2024-14513 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CJ6SUNDNOZSHM4PZYYGMBH7233D63JOI/ E-Mail link for openSUSE-SU-2024:14513-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://www.suse.com/security/cve/CVE-2020-8911/ SUSE CVE CVE-2020-8911 page https://www.suse.com/security/cve/CVE-2023-0109/ SUSE CVE CVE-2023-0109 page https://www.suse.com/security/cve/CVE-2024-0793/ SUSE CVE CVE-2024-0793 page https://www.suse.com/security/cve/CVE-2024-24425/ SUSE CVE CVE-2024-24425 page https://www.suse.com/security/cve/CVE-2024-24426/ SUSE CVE CVE-2024-24426 page https://www.suse.com/security/cve/CVE-2024-44625/ SUSE CVE CVE-2024-44625 page https://www.suse.com/security/cve/CVE-2024-52010/ SUSE CVE CVE-2024-52010 page https://www.suse.com/security/cve/CVE-2024-52308/ SUSE CVE CVE-2024-52308 page https://www.suse.com/security/cve/CVE-2024-52522/ SUSE CVE CVE-2024-52522 page https://www.suse.com/security/cve/CVE-2024-9526/ SUSE CVE CVE-2024-9526 page openSUSE Tumbleweed govulncheck-vulndb-0.0.20241119T173509-1.1 govulncheck-vulndb-0.0.20241119T173509-1.1 as a component of openSUSE Tumbleweed A padding oracle vulnerability exists in the AWS S3 Crypto SDK for GoLang versions prior to V2. The SDK allows users to encrypt files with AES-CBC without computing a Message Authentication Code (MAC), which then allows an attacker who has write access to the target's S3 bucket and can observe whether or not an endpoint with access to the key can decrypt a file, they can reconstruct the plaintext with (on average) 128*length (plaintext) queries to the endpoint, by exploiting CBC's ability to manipulate the bytes of the next block and PKCS5 padding errors. It is recommended to update your SDK to V2 or later, and re-encrypt your files. CVE-2020-8911 openSUSE Tumbleweed:govulncheck-vulndb-0.0.20241119T173509-1.1 moderate 2.1 AV:L/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CJ6SUNDNOZSHM4PZYYGMBH7233D63JOI/ https://www.suse.com/security/cve/CVE-2020-8911.html CVE-2020-8911 A stored cross-site scripting (XSS) vulnerability was discovered in usememos/memos version 0.9.1. This vulnerability allows an attacker to upload a JavaScript file containing a malicious script and reference it in an HTML file. When the HTML file is accessed, the malicious script is executed. This can lead to the theft of sensitive information, such as login credentials, from users visiting the affected website. The issue has been fixed in version 0.10.0. CVE-2023-0109 openSUSE Tumbleweed:govulncheck-vulndb-0.0.20241119T173509-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CJ6SUNDNOZSHM4PZYYGMBH7233D63JOI/ https://www.suse.com/security/cve/CVE-2023-0109.html CVE-2023-0109 A flaw was found in kube-controller-manager. This issue occurs when the initial application of a HPA config YAML lacking a .spec.behavior.scaleUp block causes a denial of service due to KCM pods going into restart churn. CVE-2024-0793 openSUSE Tumbleweed:govulncheck-vulndb-0.0.20241119T173509-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CJ6SUNDNOZSHM4PZYYGMBH7233D63JOI/ https://www.suse.com/security/cve/CVE-2024-0793.html CVE-2024-0793 https://bugzilla.suse.com/1219964 SUSE Bug 1219964 Magma v1.8.0 and OAI EPC Federation v1.20 were discovered to contain an out-of-bounds read in the amf_as_establish_req function at /tasks/amf/amf_as.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted NAS packet. CVE-2024-24425 openSUSE Tumbleweed:govulncheck-vulndb-0.0.20241119T173509-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CJ6SUNDNOZSHM4PZYYGMBH7233D63JOI/ https://www.suse.com/security/cve/CVE-2024-24425.html CVE-2024-24425 Reachable assertions in the NGAP_FIND_PROTOCOLIE_BY_ID function of OpenAirInterface Magma v1.8.0 and OAI EPC Federation v1.2.0 allow attackers to cause a Denial of Service (DoS) via a crafted NGAP packet. CVE-2024-24426 openSUSE Tumbleweed:govulncheck-vulndb-0.0.20241119T173509-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CJ6SUNDNOZSHM4PZYYGMBH7233D63JOI/ https://www.suse.com/security/cve/CVE-2024-24426.html CVE-2024-24426 Gogs <=0.13.0 is vulnerable to Directory Traversal via the editFilePost function of internal/route/repo/editor.go. CVE-2024-44625 openSUSE Tumbleweed:govulncheck-vulndb-0.0.20241119T173509-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CJ6SUNDNOZSHM4PZYYGMBH7233D63JOI/ https://www.suse.com/security/cve/CVE-2024-44625.html CVE-2024-44625 Zoraxy is a general purpose HTTP reverse proxy and forwarding tool. A command injection vulnerability in the Web SSH feature allows an authenticated attacker to execute arbitrary commands as root on the host. Zoraxy has a Web SSH terminal feature that allows authenticated users to connect to SSH servers from their browsers. In HandleCreateProxySession the request to create an SSH session is handled. An attacker can exploit the username variable to escape from the bash command and inject arbitrary commands into sshCommand. This is possible, because, unlike hostname and port, the username is not validated or sanitized. CVE-2024-52010 openSUSE Tumbleweed:govulncheck-vulndb-0.0.20241119T173509-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CJ6SUNDNOZSHM4PZYYGMBH7233D63JOI/ https://www.suse.com/security/cve/CVE-2024-52010.html CVE-2024-52010 The GitHub CLI version 2.6.1 and earlier are vulnerable to remote code execution through a malicious codespace SSH server when using `gh codespace ssh` or `gh codespace logs` commands. This has been patched in the cli v2.62.0. Developers connect to remote codespaces through an SSH server running within the devcontainer, which is generally provided through the [default devcontainer image]( https://docs.github.com/en/codespaces/setting-up-your-project-for-codespaces/adding-a-dev-container-... https://docs.github.com/en/codespaces/setting-up-your-project-for-codespaces/adding-a-dev-container-configuration/introduction-to-dev-containers#using-the-default-dev-container-configuration) . GitHub CLI [retrieves SSH connection details]( https://github.com/cli/cli/blob/30066b0042d0c5928d959e288144300cb28196c9/internal/codespaces/rpc/inv... https://github.com/cli/cli/blob/30066b0042d0c5928d959e288144300cb28196c9/internal/codespaces/rpc/invoker.go#L230-L244 ), such as remote username, which is used in [executing `ssh` commands]( https://github.com/cli/cli/blob/e356c69a6f0125cfaac782c35acf77314f18908d/pkg/cmd/codespace/ssh.go#L2... https://github.com/cli/cli/blob/e356c69a6f0125cfaac782c35acf77314f18908d/pkg/cmd/codespace/ssh.go#L263 ) for `gh codespace ssh` or `gh codespace logs` commands. This exploit occurs when a malicious third-party devcontainer contains a modified SSH server that injects `ssh` arguments within the SSH connection details. `gh codespace ssh` and `gh codespace logs` commands could execute arbitrary code on the user's workstation if the remote username contains something like `-oProxyCommand="echo hacked" #`. The `-oProxyCommand` flag causes `ssh` to execute the provided command while `#` shell comment causes any other `ssh` arguments to be ignored. In `2.62.0`, the remote username information is being validated before being used. CVE-2024-52308 openSUSE Tumbleweed:govulncheck-vulndb-0.0.20241119T173509-1.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CJ6SUNDNOZSHM4PZYYGMBH7233D63JOI/ https://www.suse.com/security/cve/CVE-2024-52308.html CVE-2024-52308 https://bugzilla.suse.com/1233387 SUSE Bug 1233387 Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Insecure handling of symlinks with --links and --metadata in rclone while copying to local disk allows unprivileged users to indirectly modify ownership and permissions on symlink target files when a superuser or privileged process performs a copy. This vulnerability could enable privilege escalation and unauthorized access to critical system files, compromising system integrity, confidentiality, and availability. This vulnerability is fixed in 1.68.2. CVE-2024-52522 openSUSE Tumbleweed:govulncheck-vulndb-0.0.20241119T173509-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CJ6SUNDNOZSHM4PZYYGMBH7233D63JOI/ https://www.suse.com/security/cve/CVE-2024-52522.html CVE-2024-52522 https://bugzilla.suse.com/1233422 SUSE Bug 1233422 There exists a stored XSS Vulnerability in Kubeflow Pipeline View web UI. The Kubeflow Web UI allows to create new pipelines. When creating a new pipeline, it is possible to add a description. The description field allows html tags, which are not filtered properly. Leading to a stored XSS. We recommend upgrading past commit 930c35f1c543998e60e8d648ce93185c9b5dbe8d CVE-2024-9526 openSUSE Tumbleweed:govulncheck-vulndb-0.0.20241119T173509-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CJ6SUNDNOZSHM4PZYYGMBH7233D63JOI/ https://www.suse.com/security/cve/CVE-2024-9526.html CVE-2024-9526