This update for axis fixes the following issues: CVE-2023-51441: Fixed SSRF when untrusted input is passed to the service admin HTTP API (bsc#1218605).. # Security update for axis Announcement ID: SUSE-SU-2024:0852-1 Rating: moderate References: * bsc#1218605 Cross-References: * CVE-2023-51441 CVSS scores: * CVE-2023-51441 ( SUSE ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N * CVE-2023-51441 ( NVD ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for axis fixes the following issues: * CVE-2023-51441: Fixed SSRF when untrusted input is passed to the service admin HTTP API (bsc#1218605). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-852=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-852=1 ## Package List: * openSUSE Leap 15.5 (noarch) * axis-1.4-150200.13.9.1 * axis-manual-1.4-150200.13.9.1 * Basesystem Module 15-SP5 (noarch) * axis-1.4-150200.13.9.1 ## References: * https://www.suse.com/security/cve/CVE-2023-51441.html * https://bugzilla.suse.com/show_bug.cgi?id=1218605 . Mitigate SSRF vulnerability within the axis package on openSUSE, bolstering defenses against unauthorized data inputs. Proceed with the installation of suggested updates immediately.. openSUSE Update, Axis Security Fix, SSRF Issue Resolution, Security Patch. . LinuxSecurity.com Team
* bsc#1218605 Cross-References: * CVE-2023-51441 . # Security update for axis Announcement ID: SUSE-SU-2024:0852-1 Rating: moderate References: * bsc#1218605 Cross-References: * CVE-2023-51441 CVSS scores: * CVE-2023-51441 ( SUSE ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N * CVE-2023-51441 ( NVD ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for axis fixes the following issues: * CVE-2023-51441: Fixed SSRF when untrusted input is passed to the service admin HTTP API (bsc#1218605). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-852=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-852=1 ## Package List: * openSUSE Leap 15.5 (noarch) * axis-1.4-150200.13.9.1 * axis-manual-1.4-150200.13.9.1 * Basesystem Module 15-SP5 (noarch) * axis-1.4-150200.13.9.1 ## References: * https://www.suse.com/security/cve/CVE-2023-51441.html * https://bugzilla.suse.com/show_bug.cgi?id=1218605 . Axis has issued a critical update addressing the SSRF vulnerability found in various SUSE offerings; a moderate severity patch is now at your disposal. Take immediate action!. Security Update, SUSE Axis, Linux Patching, Linux Security. . LinuxSecurity.com Team
An issue has been found in axis, a SOAP implementation in Java. The issue is related to a cross-site scripting (XSS) attack in the default servlet/services. . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-2821-1
An update that fixes two vulnerabilities is now available. . SUSE Security Update: Security update for axis ______________________________________________________________________________ Announcement ID: SUSE-SU-2019:1373-2 Rating: moderate References: #1134598 Cross-References: CVE-2012-5784 CVE-2014-3596 Affected Products: SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1 SUSE Linux Enterprise Module for Basesystem 15-SP1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for axis fixes the following issues: Security issue fixed: - CVE-2012-5784, CVE-2014-3596: Fixed missing connection hostname check against X.509 certificate name (bsc#1134598). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1: zypper in -t patch SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2019-1373=1 - SUSE Linux Enterprise Module for Basesystem 15-SP1: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP1-2019-1373=1 Package List: - SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1 (noarch): axis-manual-1.4-5.8.1 - SUSE Linux Enterprise Module for Basesystem 15-SP1 (noarch): axis-1.4-5.8.1 References: https://www.suse.com/security/cve/CVE-2012-5784.html https://www.suse.com/security/cve/CVE-2014-3596.html https://bugzilla.suse.com/1134598 _______________________________________________ sle-security-updates mailing list
An update that fixes two vulnerabilities is now available.. openSUSE Security Update: Security update for axis ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1526-1 Rating: moderate References: #1134598 Cross-References: CVE-2012-5784 CVE-2014-3596 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for axis fixes the following issues: Security issue fixed: - CVE-2012-5784, CVE-2014-3596: Fixed missing connection hostname check against X.509 certificate name (bsc#1134598). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1526=1 Package List: - openSUSE Leap 42.3 (noarch): axis-1.4-300.1 axis-javadoc-1.4-300.1 axis-manual-1.4-300.1 References: https://www.suse.com/security/cve/CVE-2012-5784.html https://www.suse.com/security/cve/CVE-2014-3596.html https://bugzilla.suse.com/1134598 -- . Remedies for intermediate vulnerabilities in axis, openSUSE 42.3. The evaluation comprised patch guidelines and security enhancements.. openSUSE Security, Axis Update, Patch Instructions, Moderate Rating, Security Issues. . LinuxSecurity.com Team
An update that fixes two vulnerabilities is now available.. openSUSE Security Update: Security update for axis ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1497-1 Rating: moderate References: #1134598 Cross-References: CVE-2012-5784 CVE-2014-3596 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for axis fixes the following issues: Security issue fixed: - CVE-2012-5784, CVE-2014-3596: Fixed missing connection hostname check against X.509 certificate name (bsc#1134598). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1497=1 Package List: - openSUSE Leap 15.0 (noarch): axis-1.4-lp150.9.1 axis-manual-1.4-lp150.9.1 References: https://www.suse.com/security/cve/CVE-2012-5784.html https://www.suse.com/security/cve/CVE-2014-3596.html https://bugzilla.suse.com/1134598 -- . Fedora releases new patches to tackle important vulnerabilities ensuring robust authentication measures. Discover further insights within!. openSUSE Update, Axis Security Patch, Moderate Vulnerability Fix, OpenSUSE Security Advisory. . LinuxSecurity.com Team
An update that fixes two vulnerabilities is now available. . SUSE Security Update: Security update for axis ______________________________________________________________________________ Announcement ID: SUSE-SU-2019:1382-1 Rating: moderate References: #1134598 Cross-References: CVE-2012-5784 CVE-2014-3596 Affected Products: SUSE Linux Enterprise Server 12-SP4 SUSE Linux Enterprise Server 12-SP3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for axis fixes the following issues: Security issue fixed: - CVE-2012-5784, CVE-2014-3596: Fixed missing connection hostname check against X.509 certificate name (bsc#1134598). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 12-SP4: zypper in -t patch SUSE-SLE-SERVER-12-SP4-2019-1382=1 - SUSE Linux Enterprise Server 12-SP3: zypper in -t patch SUSE-SLE-SERVER-12-SP3-2019-1382=1 Package List: - SUSE Linux Enterprise Server 12-SP4 (noarch): axis-1.4-290.6.1 - SUSE Linux Enterprise Server 12-SP3 (noarch): axis-1.4-290.6.1 References: https://www.suse.com/security/cve/CVE-2012-5784.html https://www.suse.com/security/cve/CVE-2014-3596.html https://bugzilla.suse.com/1134598 _______________________________________________ sle-security-updates mailing list
An update that fixes two vulnerabilities is now available. . SUSE Security Update: Security update for axis ______________________________________________________________________________ Announcement ID: SUSE-SU-2019:1373-1 Rating: moderate References: #1134598 Cross-References: CVE-2012-5784 CVE-2014-3596 Affected Products: SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SUSE Linux Enterprise Module for Basesystem 15 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for axis fixes the following issues: Security issue fixed: - CVE-2012-5784, CVE-2014-3596: Fixed missing connection hostname check against X.509 certificate name (bsc#1134598). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Module for Open Buildservice Development Tools 15: zypper in -t patch SUSE-SLE-Module-Development-Tools-OBS-15-2019-1373=1 - SUSE Linux Enterprise Module for Basesystem 15: zypper in -t patch SUSE-SLE-Module-Basesystem-15-2019-1373=1 Package List: - SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 (noarch): axis-manual-1.4-5.8.1 - SUSE Linux Enterprise Module for Basesystem 15 (noarch): axis-1.4-5.8.1 References: https://www.suse.com/security/cve/CVE-2012-5784.html https://www.suse.com/security/cve/CVE-2014-3596.html https://bugzilla.suse.com/1134598 _______________________________________________ sle-security-updates mailing list
Get the latest Linux and open source security news straight to your inbox.