SUSE-SU-2019:0134-1 Security update for freerdp

This update for freerdp fixes the following issues: Security issues fixed: - CVE-2018-0886: Fix a remote code execution vulnerability CredSSP bsc1085416, bsc1087240, bsc1104918 - CVE-2018-8789: Fix several denial of service vulnerabilities in the in the NTLM Authentication module bsc1117965 -...

SUSE-SU-2019:0119-1 Security update for mariadb

This update for mariadb to version 10.2.19 fixes the following issues: bsc1116686 Security issues fixed: - CVE-2016-9843: Big-endian out-of-bounds pointer bsc1013882 - CVE-2018-3282, CVE-2018-3174, CVE-2018-3143, CVE-2018-3156, CVE-2018-3251, CVE-2018-3185, CVE-2018-3277, CVE-2018-3162,...

CVE-2019-2528 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2019-2495 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2019-2494 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2019-2486 vulnerabilities

Vulnerabilities for packages: mysql...

SUSE-SU-2019:0095-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP3 Azure kernel was updated to 4.4.162 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-18281: The mremap syscall performs TLB flushes after dropping pagetable locks. If a syscall such as ftruncate removes entries from the...

CVE-2018-20699 vulnerabilities

Vulnerabilities for packages: beats, beats-fips...

SUSE-SU-2019:0060-1 Security update for LibVNCServer

This update for LibVNCServer fixes the following issues: Security issues fixed: - CVE-2018-15126: Fixed use-after-free in file transfer extension bsc1120114 - CVE-2018-6307: Fixed use-after-free in file transfer extension server code bsc1120115 - CVE-2018-20020: Fixed heap out-of-bound write insi...

SUSE-SU-2019:0057-1 Security update for java-1_8_0-openjdk

This update for java-180-openjdk to version 8u191 fixes the following issues: Security issues fixed: - CVE-2018-3136: Manifest better support bsc1112142 - CVE-2018-3139: Better HTTP Redirection bsc1112143 - CVE-2018-3149: Enhance JNDI lookups bsc1112144 - CVE-2018-3169: Improve field accesses...

Microsoft Patch Tuesday — January 2019 Security Updates Released

Microsoft has issued its first Patch Tuesday for this year to address 49 CVE-listed security vulnerabilities in its Windows operating systems and other products, 7 of which are rated critical, 40 important and 2 moderate in severity. Just one of the security vulnerabilities patched by the tech...

CVE-2018-19361 vulnerabilities

Vulnerabilities for packages: hive...

CVE-2018-14720 vulnerabilities

Vulnerabilities for packages: hive...

CVE-2018-19360 vulnerabilities

Vulnerabilities for packages: hive...

SUSE-SU-2018:4298-1 Security update for wireshark

This update for wireshark fixes the following issues: Update to Wireshark 2.4.11 bsc1117740. Security issues fixed: - CVE-2018-19625: The Wireshark dissection engine could crash wnpa-sec-2018-51 - CVE-2018-19626: The DCOM dissector could crash wnpa-sec-2018-52 - CVE-2018-19623: The LBMPDM dissect...

SUSE-SU-2018:4128-1 Security update for openvswitch

This update for openvswitch to version 2.7.6 fixes the following issues: These security issues were fixed: - CVE-2018-17205: Prevent OVS crash when reverting old flows in bundle commit bsc1104467. - CVE-2018-17206: Avoid buffer overread in BUNDLE action decoding bsc1104467. - CVE-2018-17204:When...

SUSE-SU-2018:3882-2 Security update for exiv2

This update for exiv2 fixes the following issues: - CVE-2017-11591: A floating point exception in the Exiv2::ValueType function could lead to a remote denial of service attack via crafted input. bsc1050257 - CVE-2017-14864: An invalid memory address dereference was discovered in Exiv2::getULong i...

SUSE-SU-2018:4087-1 Security update for ghostscript

This update for ghostscript to version 9.26 fixes the following issues: Security issues fixed: - CVE-2018-19475: Fixed bypass of an intended access restriction in psi/zdevice2.c bsc1117327 - CVE-2018-19476: Fixed bypass of an intended access restriction in psi/zicc.c bsc1117313 - CVE-2018-19477:...

SUSE-SU-2018:3640-2 Security update for libarchive

This update for libarchive fixes the following issues: - CVE-2016-10209: The archivewstringappendfrommbs function in archivestring.c allowed remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted archive file. bsc1032089 - CVE-2016-10349: The...

SUSE-SU-2018:3869-1 Security update for the Linux RT Kernel

The SUSE Linux Enterprise 11 SP4 RT kernel was updated to 3.0.101-rt130-69.39 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-18281: An issue was discovered in the Linux kernel, the mremap syscall performs TLB flushes after dropping pagetable locks. If...