Alerts This Week
Warning Icon 1 758
Alerts This Week
Warning Icon 1 758

SUSE Linux: 2024:0317-1 Moderate OpenConnect Security Update

suse
Calendar Grey February 2, 2024
Dist Suse Esm H88
This enhancement addresses various problems associated with OpenConnect, classified as moderately critical, comprising corrections and upgrades.
* bsc#1140772 * bsc#1157446 * bsc#1170452 * bsc#1171862 * bsc#1215669

Summary

## This update for openconnect fixes the following issues: * Update to release 9.12: * Explicitly reject overly long tun device names. * Increase maximum input size from stdin (#579). * Ignore 0.0.0.0 as NBNS address (!446, vpnc-scripts#58). * Fix stray (null) in URL path after Pulse authentication (4023bd95). * Fix config XML parsing mistake that left GlobalProtect ESP non-working in v9.10 (!475). * Fix case sensitivity in GPST header matching (!474). * Update to release 9.10: * Fix external browser authentication with KDE plasma-nm < 5.26. * Always redirect stdout to stderr when spawning external browser. * Increase default queue length to 32 packets. * Fix receiving multiple packets in one TLS frame, and single packets split across multiple TLS frames, for Array.

Topics%20covered

Topics Covered

security advisory network security software update moderate severity SUSE openconnect

References

* bsc#1140772

* bsc#1157446

* bsc#1170452

* bsc#1171862

* bsc#1215669

* jsc#PED-6742

* jsc#PED-7015

Cross-

* CVE-2018-20319

* CVE-2020-12105

* CVE-2020-12823

CVSS scores:

* CVE-2018-20319 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

* CVE-2020-12105 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

* CVE-2020-12105 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

* CVE-2020-12823 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

* CVE-2020-12823 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products:

* Basesystem Module 15-SP5

* openSUSE Leap 15.4

* openSUSE Leap 15.5

* SUSE Linux Enterprise Desktop 15 SP5

* SUSE Linux Enterprise High Performance Computing 15 SP5

* SUSE Linux Enterprise Micro 5.5

Announcement ID: SUSE-SU-2024:0317-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory network security software update moderate severity SUSE openconnect

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here