SUSE-SU-2019:0320-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP3 Realtime kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-19407: The vcpuscanioapic function in arch/x86/kvm/x86.c allowed local users to cause a denial of service NULL pointer dereference and BUG via...

SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2019:0224-1)

The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. This update brings following features : Support for Enhanced-IBRS on new Intel CPUs fate326564 The following security bugs were fixed: CVE-2018-9568: In skclonelock of sock.c, there is a possible memory...

Security update for pdns-recursor (moderate)

openSUSE Security Update: Security update for pdns-recursor Announcement ID: openSUSE-SU-2019:0131-1 Rating: moderate References: 1121887 1121889 Cross-References: CVE-2019-3806 CVE-2019-3807 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 An update that fixes two vulnerabilities...

SUSE-SU-2019:0224-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. This update brings following features: - Support for Enhanced-IBRS on new Intel CPUs fate326564 The following security bugs were fixed: - CVE-2018-9568: In skclonelock of sock.c, there is a possible memory...

SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2019:0196-1)

The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2018-9568: In skclonelock of sock.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no...

SUSE-SU-2019:0150-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 kernel for Azure was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-9568: In skclonelock of sock.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with...

SUSE-SU-2019:0148-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP3 kernel for Azure was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-19407: The vcpuscanioapic function in arch/x86/kvm/x86.c allowed local users to cause a denial of service NULL pointer dereference and BUG via...

Linux 3 a serious vulnerability systemd, may lead to data breaches-vulnerability warning-the black bar safety net

! Recently, security researchers announced a Linux system systemd in three serious vulnerabilities, namely CVE-2018-16864, CVE-2018-16865, and CVE-2018-16866。 Attackers exploiting these vulnerabilities may obtain a target machine's root access, and even may lead to information disclosure. Systemd...

SUSE-SU-2019:0095-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP3 Azure kernel was updated to 4.4.162 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-18281: The mremap syscall performs TLB flushes after dropping pagetable locks. If a syscall such as ftruncate removes entries from the...

Security update for irssi (important)

openSUSE Security Update: Security update for irssi Announcement ID: openSUSE-SU-2019:0048-1 Rating: important References: 1121396 Cross-References: CVE-2019-5882 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 openSUSE Backports SLE-15 SUSE Package Hub for SUSE Linux Enterprise 12 An...

systemd-journald Memory Corruption / Information Leak Vulnerability

This is a thorough analysis of how Qualys approached exploiting three vulnerabilities in systemd-journald. Although they have not released formal exploits yet, they detail in here is useful in understanding the flaws. Qualys Security Advisory System Down: A systemd-journald exploit...

OpenSSH CVE-2019-6109 Man in the Middle Security Bypass Vulnerability

Description OpenSSH is prone to a security-bypass vulnerability. Successfully exploiting this issue may allow attackers to bypass certain security restrictions and perform unauthorized actions by conducting a man-in-the-middle attack. This may lead to other attacks. OpenSSH 7.9 version is...

SUSE SLED15 / SLES15 Security Update : Initial update for kernel-azure (SUSE-SU-2018:1952-1)

This update is the initial delivery of the Azure flavor of the Linux Kernel, which contains enhancements and optimizations for running the SUSE Linux Enterprise kernel in the Azure cloud. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE...

SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2018:3159-1)

The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2018-17182: The vmacacheflushall function in mm/vmacache.c mishandled sequence number overflows. An attacker can trigger a use-after-free and possibly gain...

SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2018:2380-1) (Foreshadow)

The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2018-3620: Local attackers on baremetal systems could use speculative code patterns on hyperthreaded processors to read data present in the L1 Datacache used by...

SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2018:3589-1)

The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2018-18445: A faulty computation of numeric bounds in the BPF verifier permits out-of-bounds memory accesses because adjustscalarminmaxvals in kernel/bpf/verifier...

SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2018:2539-1)

The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2018-15572: The spectrev2selectmitigation function in arch/x86/kernel/cpu/bugs.c did not always fill RSB upon a context switch, which made it easier for attacke...

Micro Focus SUSE Linux Enterprise libqt5-qtbase Memory Misreference Vulnerability

Micro Focus SUSE Linux Enterprise is a suite of enterprise Linux operating systems from Micro Focus in the UK. libqt5-qtbase is one of the libraries used to work with strings, XML, and more. A memory misreference vulnerability exists in QXmlStreamReader for libqt5-qtbase in Micro Focus SUSE Linux...

Micro Focus SUSE Linux Enterprise libqt5-qtbase Denial of Service Vulnerability

Micro Focus SUSE Linux Enterprise is a suite of enterprise Linux operating systems from Micro Focus in the UK. libqt5-qtbase is one of the libraries used to work with strings, XML, and more. A denial of service vulnerability exists in QBmpHandler in libqt5-qtbase in Micro Focus SUSE Linux...

SUSE-SU-2018:4069-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-19824: A local user could exploit a use-after-free in the ALSA driver by supplying a malicious USB Sound device with zero interfaces that is mishandled ...