SUSE SLES12 Security Update : openssl (SUSE-SU-2020:3763-1)

This update for openssl fixes the following issues : CVE-2020-1971: Fixed a NULL pointer dereference in EDIPARTYNAME bsc1179491. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean...

SUSE SLES12 Security Update : xen (SUSE-SU-2020:3742-1)

This update for xen fixes the following issues : bsc1178963 - stack corruption from XSA-346 change XSA-355 bsc1177409 - CVE-2020-27674: x86 PV guest INVLPG-like flushes may leave stale TLB entries XSA-286 bsc1177412 - CVE-2020-27672: Race condition in Xen mapping code XSA-345 bsc1177413 -...

SUSE SLES12 Security Update : curl (SUSE-SU-2020:3739-1)

This update for curl fixes the following issues : CVE-2020-8286: Fixed improper OSCP verification in the client side bsc1179593. CVE-2020-8285: Fixed a stack overflow due to FTP wildcard bsc1179399. CVE-2020-8284: Fixed an issue where a malicius FTP server could make curl connect to a different I...

SUSE SLES12 Security Update : openssl-1_1 (SUSE-SU-2020:3740-1)

This update for openssl-11 fixes the following issues : CVE-2020-1971: Fixed a NULL pointer dereference in EDIPARTYNAME bsc1179491. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically cle...

SUSE SLES12 Security Update : libzypp (SUSE-SU-2020:0079-2)

This update for libzypp fixes the following issues : Security issue fixed : CVE-2019-18900: Fixed assert cookie file that was world readable bsc1158763. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted...

SUSE SLES12 Security Update : openssl-1_0_0 (SUSE-SU-2020:3732-1)

This update for openssl-100 fixes the following issues : CVE-2020-1971: Fixed a NULL pointer dereference in EDIPARTYNAME bsc1179491. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically...

SUSE SLES12 Security Update : MozillaFirefox (SUSE-SU-2020:3331-1)

This update for MozillaFirefox fixes the following issues : Firefox Extended Support Release 78.4.1 ESR - Fixed: Security fix MFSA 2020-49 bsc1178588 - CVE-2020-26950 bmo1675905 Write side effects in MCallGetProperty opcode not accounted for Note that Tenable Network Security has extracted the...

SUSE SLES12 Security Update : ucode-intel (SUSE-SU-2020:3279-1)

This update for ucode-intel fixes the following issues : Intel CPU Microcode updated to 20201027 prerelease CVE-2020-8695: Fixed Intel RAPL sidechannel attack SGX bsc1170446 CVE-2020-8698: Fixed Fast Store Forward Predictor INTEL-SA-00381 bsc1173594 New Platforms: | Processor | Stepping | F-M-S/P...

SUSE SLES12 Security Update : python3 (SUSE-SU-2020:2699-1)

This update for python3 fixes the following issues : CVE-2019-20907: Fixed denial of service by avoiding possible infinite loop in specifically crafted tarball bsc1174091. CVE-2020-14422: Fixed an improper computation of hash values in the IPv4Interface and IPv6Interface could have led to denial ...

SUSE SLES12 Security Update : xorg-x11-server (SUSE-SU-2020:3587-1)

This update for xorg-x11-server fixes the following issues : CVE-2020-25712: Fixed a heap-based buffer overflow which could have led to privilege escalation bsc1177596. CVE-2020-14360: Fixed an out of bounds memory accesses on too short request which could lead to denial of service bsc1174908. No...

SUSE SLES12 Security Update : python3 (SUSE-SU-2020:3262-1)

This update for python3 fixes the following issues : bsc1177211 CVE-2020-26116 no longer allowing special characters in the method parameter of HTTPConnection.putrequest in httplib, stopping injection of headers. Note that Tenable Network Security has extracted the preceding description block...

SUSE SLES12 Security Update : xen (SUSE-SU-2020:3612-1)

This update for xen fixes the following issues : bsc1178963 - VUL-0: xen: stack corruption from XSA-346 change XSA-355 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format...

SUSE SLES12 Security Update : xen (SUSE-SU-2020:3050-1)

This update for xen fixes the following issues : bsc1177409 - VUL-0: CVE-2020-27673: xen: x86 PV guest INVLPG-like flushes may leave stale TLB entries XSA-286 bsc1177412 - VUL-0: CVE-2020-27672: xen: Race condition in Xen mapping code XSA-345 bsc1177413 - VUL-0: CVE-2020-27671: xen: undue deferra...

SUSE SLES12 Security Update : libproxy (SUSE-SU-2020:2900-1)

This update for libproxy fixes the following issues : CVE-2020-25219: Rewrote url::recvline to be nonrecursive bsc1176410. CVE-2020-26154: Fixed a buffer overflow when PAC is enabled bsc1177143. Note that Tenable Network Security has extracted the preceding description block directly from the SUS...

SUSE SLES12 Security Update : xen (SUSE-SU-2020:3415-1)

This update for xen fixes the following issues : Security issue fixed : CVE-2020-28368: Fixed the Intel RAPL sidechannel attack, aka PLATYPUS attack, aka XSA-351 bsc1178591. Non-security issue fixed : Adjusted help for --maxiters, default is 5 bsc1177950. Note that Tenable Network Security has...

SUSE SLES12 Security Update : tigervnc (SUSE-SU-2020:2898-1)

This update for tigervnc fixes the following issues : CVE-2020-26117: Server certificates were stored as certiticate authorities, allowing malicious owners of these certificates to impersonate any server after a client had added an exception bsc1176733. Note that Tenable Network Security has...

SUSE SLES12 Security Update : postgresql, postgresql96, postgresql10 / postgresql12 (SUSE-SU-2020:3343-1)

This update changes the internal packaging for postgresql, and so contains all currently maintained postgresql versions across our SUSE Linux Enterprise 12 products. postgresql12 is shipped new in version 12.3 bsc1171924. The server and client packages only on SUSE Linux Enterprise Server 12 SP5,...

SUSE SLES12 Security Update : graphviz (SUSE-SU-2020:3090-1)

This update for graphviz fixes the following issues : CVE-2018-10196: Fixed a null dereference in rebuildvlis bsc1093447. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and...

SUSE SLES12 Security Update : java-1_7_0-openjdk (SUSE-SU-2020:2861-1)

This update for java-170-openjdk fixes the following issues : java-170-openjdk was updated to 2.6.23 July 2020 CPU, bsc1174157 - JDK-8028431, CVE-2020-14579: NullPointerException in - DerValue.equalsDerValue - JDK-8028591, CVE-2020-14578: NegativeArraySizeException in -...

SUSE SLES12 Security Update : SDL (SUSE-SU-2020:3030-1)

This update for SDL fixes the following issues : Secuirty issue fixed : CVE-2019-13616: Fixed heap-based buffer over-read in BlitNtoN in video/SDLblitN.c when called from SDLSoftBlit bsc1141844. Note that Tenable Network Security has extracted the preceding description block directly from the SUS...