Security update for freeradius-server (important)

openSUSE Security Update: Security update for freeradius-server Announcement ID: openSUSE-SU-2019:1346-1 Rating: important References: 1132549 1132664 Cross-References: CVE-2019-11234 CVE-2019-11235 Affected Products: openSUSE Leap 15.0 An update that fixes two vulnerabilities is now available...

SUSE SLED15 / SLES15 Security Update : go1.10 (SUSE-SU-2019:1149-1)

This update for go1.10 fixes the following issues : Security issues fixed : CVE-2019-6486: A CPU denial of service vulnerability affecting P-521 and P-384 elliptic curves was fixed. Other fixes: go1.10.8 released 2019/01/23 security release fixes CVE-2019-6486. Enable build for %arm bsc1125768,...

SUSE-SU-2019:1149-1 Security update for go1.10

This update for go1.10 fixes the following issues: Security issues fixed: - CVE-2019-6486: A CPU denial of service vulnerability affecting P-521 and P-384 elliptic curves was fixed. Other fixes: - go1.10.8 released 2019/01/23 security release fixes CVE-2019-6486. - Enable build for %arm bsc112576...

Integer Overflow

Wireshark, previously known as Ethereal, is a network protocol analyzer, which is used to capture and browse the traffic running on a computer network. Several denial of service flaws were found in Wireshark. Wireshark could crash or stop responding if it read a malformed packet off a network, or...

Use-After-Free

Wireshark, previously known as Ethereal, is a network protocol analyzer, which is used to capture and browse the traffic running on a computer network. Several denial of service flaws were found in Wireshark. Wireshark could crash or stop responding if it read a malformed packet off a network, or...

Buffer Underflow

Wireshark, previously known as Ethereal, is a network protocol analyzer, which is used to capture and browse the traffic running on a computer network. Several denial of service flaws were found in Wireshark. Wireshark could crash or stop responding if it read a malformed packet off a network, or...

Out-of-bounds Read

Wireshark, previously known as Ethereal, is a network protocol analyzer, which is used to capture and browse the traffic running on a computer network. Several denial of service flaws were found in Wireshark. Wireshark could crash or stop responding if it read a malformed packet off a network, or...

Stack-Based Buffer Overflow

Wireshark, previously known as Ethereal, is a network protocol analyzer, which is used to capture and browse the traffic running on a computer network. Several denial of service flaws were found in Wireshark. Wireshark could crash or stop responding if it read a malformed packet off a network, or...

SUSE SLES12 Security Update : openssl (SUSE-SU-2019:1124-1)

This update for openssl fixes the following issues : Security issues fixed : Mitigation for cache side channel attacks: The 9 Lives of Bleichenbacher's CAT bsc1117951 Reject invalid eliptic curve point coordinates bsc1131291 Note that Tenable Network Security has extracted the preceding descripti...

SUSE-SU-2019:1124-1 Security update for openssl

This update for openssl fixes the following issues: Security issues fixed: - Mitigation for cache side channel attacks: The 9 Lives of Bleichenbacher's CAT bsc1117951 - Reject invalid eliptic curve point coordinates bsc1131291...

SUSE SLED15 / SLES15 Security Update : freeradius-server (SUSE-SU-2019:1086-1)

This update for freeradius-server fixes the following issues : Security issues fixed : CVE-2019-11235: Fixed an authentication bypass related to the EAP-PWD Commit frame and insufficent validation of elliptic curve points bsc1132549. CVE-2019-11234: Fixed an authentication bypass caused by...

SUSE-SU-2018:3864-2 Security update for openssl

This update for openssl fixes the following issues: Security issues fixed: - CVE-2018-0734: Fixed timing vulnerability in DSA signature generation bsc1113652. - CVE-2018-5407: Fixed elliptic curve scalar multiplication timing attack defenses bsc1113534. - CVE-2018-0737: Corrected the current erro...

SUSE-SU-2019:1039-1 Security update for freeradius-server

This update for freeradius-server fixes the following issues: Security issues fixed: - CVE-2019-11235: Fixed an authentication bypass related to the EAP-PWD Commit frame and insufficent validation of elliptic curve points bsc1132549. - CVE-2019-11234: Fixed an authentication bypass caused by...

openSUSE Security Update : go1.11 (openSUSE-2019-1164)

This update for go1.11 to version 1.11.5 fixes the following issues : Security issue fixed : - CVE-2019-6486: Fixed a CPU Denial-of-Service vulnerability affecting crypto/ellpitic related to P-521 and P-384 bsc1123013 go29903. Other bug fixes and changes made : - Fix erroneous trailing backslash ...

openSUSE Security Update : openssl-1_0_0 (openSUSE-2019-985)

This update for openssl-100 fixes the following issues : Security issues fixed : - CVE-2018-0734: Fixed timing vulnerability in DSA signature generation bsc1113652. - CVE-2018-5407: Added elliptic curve scalar multiplication timing attack defenses that fixes 'PortSmash' bsc1113534. Non-security...

Medium: golang

Issue Overview: Go mishandles P-521 and P-384 elliptic curves, which allows attackers to cause a denial of service CPU consumption or possibly conduct ECDH private key recovery attacks. CVE-2019-6486 Affected Packages: golang Issue Correction: Run yum update golang or yum update --advisory...

openSUSE Security Update : kernel-firmware (openSUSE-2019-275)

This update for kernel-firmware fixes the following issues: Security issue fixed : - CVE-2018-5383: Fixed an implementation issue in Bluetooth where the eliptic curve parameters were not sufficiently validated during Diffie-Hellman key exchange bsc1104301. This update was imported from the...

openSUSE: Security Advisory for kernel-firmware (openSUSE-SU-2019:0275-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2019-8413

On Xiaomi MIX 2 devices with the 4.4.78 kernel, a NULL pointer dereference in the ioctl interface of the device file /dev/elliptic1 or /dev/elliptic0 causes a system crash via IOCTL 0x4008c575 aka decimal 1074316661...

MGASA-2019-0066 Updated golang packages fix security vulnerability

Remote code execution in go get, when executed with the -u flag CVE-2018-16873. An arbitrary filesystem write in go get, which could lead to code execution CVE-2018-16874. Denial of Service in the crypto/x509 package during certificate chain validation CVE-2018-16875. Go before 1.11.5 mishandles...