SUSE SLES12 Security Update : openssh (SUSE-SU-2021:0022-1)

This update for openssh fixes the following issues : CVE-2020-14145: Fixed a potential information leak during host key exchange bsc1173513. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLES12 Security Update : java-1_7_1-ibm (SUSE-SU-2021:0019-1)

This update for java-171-ibm fixes the following issues : Update to Java 7.1 Service Refresh 4 Fix Pack 75 bsc1180063, bsc1177943 CVE-2020-14792 CVE-2020-14797 CVE-2020-14782 CVE-2020-14781 CVE-2020-14779 CVE-2020-14798 CVE-2020-14796 CVE-2020-14803 - Class Libraries : - Z/OS specific C function...

SUSE SLES12 Security Update : flac (SUSE-SU-2021:0017-1)

This update for flac fixes the following issues : CVE-2020-0499: Fixed an out-of-bounds access bsc1180099. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much ...

SUSE SLES12 Security Update : dovecot22 (SUSE-SU-2021:0018-1)

This update for dovecot22 fixes the following issues : CVE-2020-24386: Fixed an issue with IMAP hibernation that allowed users to access other users' emails bsc1180405. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenab...

SUSE SLES12 Security Update : xen (SUSE-SU-2020:3945-1)

This update for xen fixes the following issues : CVE-2020-29480: Fixed an issue which could have allowed leak of non-sensitive data to administrator guests bsc117949 XSA-115. CVE-2020-29481: Fixed an issue which could have allowd to new domains to inherit existing node permissions bsc1179498...

SUSE SLES12 Security Update : cyrus-sasl (SUSE-SU-2020:3939-1)

This update for cyrus-sasl fixes the following issues : CVE-2019-19906: Fixed an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet bsc1159635. Note that Tenable Network Security has extracted the preceding description block directly fr...

SUSE SLES12 Security Update : openexr (SUSE-SU-2020:3931-1)

This update for openexr fixes the following issues : Security issues fixed : CVE-2020-16587: Fixed a heap-based buffer overflow in chunkOffsetReconstruction in ImfMultiPartInputFile.cpp bsc1179879. CVE-2020-16588: Fixed a NULL pointer deference in generatePreview bsc1179879. CVE-2020-16589: Fixed...

SUSE SLES12 Security Update : xen (SUSE-SU-2020:3913-1)

This update for xen fixes the following issues : CVE-2020-29480: Fixed an issue which could have allowed leak of non-sensitive data to administrator guests bsc117949 XSA-115. CVE-2020-29481: Fixed an issue which could have allowd to new domains to inherit existing node permissions bsc1179498...

SUSE SLES12 Security Update : clamav (SUSE-SU-2020:3918-1)

This update for clamav fixes the following issues : clamav was updated to 0.103.0 to implement jscECO-3010 and bsc1118459. clamd can now reload the signature database without blocking scanning. This multi-threaded database reload improvement was made possible thanks to a community effort. -...

SUSE SLES12 Security Update : MozillaFirefox (SUSE-SU-2020:3903-1)

This update for MozillaFirefox fixes the following issues : Firefox Extended Support Release 78.6.0 ESR - Fixed: Various stability, functionality, and security fixes MFSA 2020-55 bsc1180039 - CVE-2020-16042 bmo1679003 Operations on a BigInt could have caused uninitialized memory to be exposed -...

SUSE SLES12 Security Update : xen (SUSE-SU-2020:3914-1)

This update for xen fixes the following issues : CVE-2020-29480: Fixed an issue which could have allowed leak of non-sensitive data to administrator guests bsc117949 XSA-115. CVE-2020-29481: Fixed an issue which could have allowd to new domains to inherit existing node permissions bsc1179498...

SUSE SLES12 Security Update : PackageKit (SUSE-SU-2020:3909-1)

This update for PackageKit fixes the following issues : CVE-2020-16121: Fixed an information disclosure in InstallFiles, GetFilesLocal and GetDetailsLocal bsc1176930. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable...

SUSE SLES12 Security Update : slurm_20_02 (SUSE-SU-2020:3892-1)

This update for slurm2002 fixes the following issues : Security issues fixed : CVE-2020-27745: Fixed a potential buffer overflow from use of unpackmem bsc1178890. CVE-2020-27746: Fixed a potential leak of the magic cookie when sent as an argument to the xauth command bsc1178891. Non-security issu...

SUSE SLES12 Security Update : ovmf (SUSE-SU-2020:3883-1)

This update for ovmf fixes the following issues : CVE-2019-14584: Fixed a null dereference in AuthenticodeVerify bsc1177789. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and...

SUSE SLES12 Security Update : xen (SUSE-SU-2020:3880-1)

This update for xen fixes the following issues : CVE-2020-29480: Fixed an issue which could have allowed leak of non-sensitive data to administrator guests bsc117949 XSA-115. CVE-2020-29481: Fixed an issue which could have allowd to new domains to inherit existing node permissions bsc1179498...

SUSE SLES12 Security Update : slurm_18_08 (SUSE-SU-2020:3863-1)

This update for slurm1808 fixes the following issues : Security issues fixed : CVE-2020-27745: Fixed a potential buffer overflow from use of unpackmem bsc1178890. CVE-2020-27746: Fixed a potential leak of the magic cookie when sent as an argument to the xauth command bsc1178891. Note that Tenable...

SUSE SLES12 Security Update : python36 (SUSE-SU-2020:3865-1)

This update for python36 fixes the following issues : CVE-2019-18348: Fixed a CRLF injection via the host part of the url passed to urlopen bsc1155094 CVE-2019-20916: Fixed a directory traversal in downloadhttpurl bsc1176262. CVE-2020-27619: Fixed an issue where the CJK codec tests call eval on...

SUSE SLES12 Security Update : spice (SUSE-SU-2020:3842-1)

This update for spice fixes the following issues : CVE-2018-10873: Fixed a potential heap corruption when demarshalling bsc1104448 CVE-2018-10893: Fixed a buffer overflow on image lz checks bsc1101295 Note that Tenable Network Security has extracted the preceding description block directly from t...

SUSE SLES12 Security Update : openssh (SUSE-SU-2020:3844-1)

This update for openssh fixes the following issues : CVE-2020-14145: Fixed an observable discrepancy leading to an information leak in the algorithm negotiation bsc1173513. Fixed an issue where AuthorizedKeysCommand produced a lot of output bsc1161684. Fixed an issue where oracle cluster with...

SUSE SLES12 Security Update : python (SUSE-SU-2020:3765-1)

This update for python fixes the following issues : Fixed a directory traversal in downloadhttpurl bsc1176262 CVE-2019-20916 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and...