SUSE-SU-2020:3143-1 Security update for libvirt

This update for libvirt fixes the following issues: - CVE-2020-15708: Added a note to libvirtd.conf about polkit auth in SUSE distros bsc1174955. - CVE-2020-25637: Fixed a double free in qemuAgentGetInterfaces bsc1177155...

OPENSUSE-SU-2020:1819-1 Security update for samba

This update for samba fixes the following issues: Update to samba 4.11.14 - CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records bsc1177613. - CVE-2020-14323: Unprivileged user can crash winbind bsc1173994. - CVE-2020-14318: Missing permissions check in...

OPENSUSE-SU-2020:1791-1 Security update for sane-backends

This update for sane-backends fixes the following issues: sane-backends was updated to 1.0.31 to further improve hardware enablement for scanner devices jscECO-2418 jscSLE-15561 jscSLE-15560 and also fix various security issues: - CVE-2020-12861,CVE-2020-12865: Fixed an out of bounds write...

OPENSUSE-SU-2020:1777-1 Security update for libvirt

This update for libvirt fixes the following issues: - CVE-2020-15708: Added a note to libvirtd.conf about polkit auth in SUSE distros bsc1174955. - CVE-2020-25637: Fixed a double free in qemuAgentGetInterfaces bsc1177155. - qemu: Avoid stale capabilities cache host CPU or kernel command line...

SUSE-SU-2020:14525-1 Security update for samba

This update for samba fixes the following issues: - CVE-2020-14323: Unprivileged user can crash winbind bsc1173994. - CVE-2020-14318: Missing permissions check in SMB1/2/3 ChangeNotify bsc1173902...

SUSE-SU-2020:3082-1 Security update for samba

This update for samba fixes the following issues: - CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records bsc1177613. - CVE-2020-14323: Unprivileged user can crash winbind bsc1173994. - CVE-2020-14318: Missing permissions check in SMB1/2/3 ChangeNotify...

Iranian Advanced Persistent Threat Actors Threaten Election-Related Systems

Summary The Cybersecurity and Infrastructure Security Agency CISA and the Federal Bureau of Investigation FBI are warning that Iranian advanced persistent threat APT actors are likely intent on influencing and interfering with the U.S. elections to sow discord among voters and undermine public...

CVE-2020-14799 vulnerabilities

Vulnerabilities for packages: mysql...

SUSE-SU-2020:2981-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-12351: Fixed a type confusion while processing AMP packets aka 'BleedingTooth' aka 'BadKarma' bsc1177724. - CVE-2020-12352: Fixed an information leak wh...

SUSE-SU-2020:2970-1 Security update for libvirt

This update for libvirt fixes the following issues: - CVE-2020-15708: Added a note to libvirtd.conf about polkit auth in SUSE distros bsc1174955. - CVE-2020-25637: Fixed a double free in qemuAgentGetInterfaces bsc1177155. - qemu: Avoid stale capabilities cache host CPU or kernel command line...

OPENSUSE-SU-2020:1682-1 Security update for the Linux Kernel

The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-12351: A type confusion while processing AMP packets could be used by physical close attackers to crash the kernel or potentially execute code was fixed bsc117772...

SUSE-SU-2020:2914-1 Security update for bind

This update for bind fixes the following issues: BIND was upgraded to version 9.16.6: Note: - bind is now more strict in regards to DNSSEC. If queries are not working, check for DNSSEC issues. For instance, if bind is used in a namserver forwarder chain, the forwarding DNS servers must support...

SUSE-SU-2020:2901-1 Security update for libproxy

This update for libproxy fixes the following issues: - CVE-2020-25219: Rewrote url::recvline to be nonrecursive bsc1176410. - CVE-2020-26154: Fixed a buffer overflow when PAC is enabled bsc1177143...

OPENSUSE-SU-2020:1608-1 Security update for xen

This update for xen fixes the following issues: - CVE-2020-25602: Fixed an issue where there was a crash when handling guest access to MSRMISCENABLE was thrown bsc1176339,XSA-333 - CVE-2020-25598: Added a missing unlock in XENMEMacquireresource error path bsc1176341,XSA-334 - CVE-2020-25604: Fixe...

olcne nginx security update

olcne 1.0.8-2 - Added nginx-image resource in module definitions to ensure nginx image upgrading 1.0.8-1 - support upgrading nginx - Adress CVE-2019-9511 - Adress CVE-2018-16845 - Adress CVE-2017-7529 - support upgrading flannel nginx 1.17.7-2 - Changed nginx home dir to /var/lib/nginx for...

OPENSUSE-SU-2020:1542-1 Security update for chromium

This update for chromium fixes the following issues: Chromium was updated to 85.0.4183.121 boo1176791: - CVE-2020-15960: Out of bounds read in storage - CVE-2020-15961: Insufficient policy enforcement in extensions - CVE-2020-15962: Insufficient policy enforcement in serial - CVE-2020-15963:...

OPENSUSE-SU-2020:1517-1 Security update for jasper

This update for jasper fixes the following issues: - CVE-2016-9398: Improved patch for already fixed issue bsc1010979. - CVE-2016-9399: Fix assert in calcstepsizes bsc1010980. - CVE-2017-5499: Validate component depth bit bsc1020451. - CVE-2017-5503: Check bounds in jasseq2dbindsub bsc1020456. -...

SUSE-SU-2020:2673-1 Security update for samba

This update for samba to version 4.10.17 fixes the following issues: - Fixed net command unable to negotiate SMB2; bsc1174120; - Update to 4.10.17 - CVE-2020-10745: Invalid DNS or NBT queries containing dots use several seconds of CPU each; bso14378; bsc1173160. - CVE-2020-10730: NULL de-referenc...

SUSE-SU-2020:2631-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP1 realtime kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-14314: Fixed a potential negative array index in dosplit bsc1173798. - CVE-2020-14356: Fixed a null pointer dereference in cgroupv2 subsystem...

OPENSUSE-SU-2020:1407-1 Security update for go1.14

This update for go1.14 fixes the following issues: - go1.14 was updated to version 1.14.7 - CVE-2020-16845: dUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs bsc1174977. - go1.14.6 released 2020-07-16 includes fixes to the go command, the compiler, the linker, vet,...