SUSE SLES12 Security Update : libX11 (SUSE-SU-2020:2475-2)

This update for libX11 fixes the following issues : CVE-2020-14363: Fix an integer overflow in initom bsc1175239. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it a...

SUSE SLES12 Security Update : compat-openssl098 (SUSE-SU-2020:2634-1)

This update for compat-openssl098 fixes the following issues : CVE-2020-1968: Introduced hardening against the Raccoon attack by always generating fresh DH keys and never reuse them across multiple TLS connections bsc1176331. Note that Tenable Network Security has extracted the preceding...

SUSE SLES12 Security Update : xen (SUSE-SU-2020:2786-1)

This update for xen fixes the following issues : CVE-2020-25602: Fixed an issue where there was a crash when handling guest access to MSRMISCENABLE was thrown bsc1176339,XSA-333 CVE-2020-25598: Added a missing unlock in XENMEMacquireresource error path bsc1176341,XSA-334 CVE-2020-25604: Fixed a...

SUSE SLES12 Security Update : libvirt (SUSE-SU-2020:3038-1)

This update for libvirt fixes the following issues : CVE-2020-15708: Added a note to libvirtd.conf about polkit auth in SUSE distros bsc1174955. CVE-2020-25637: Fixed a double free in qemuAgentGetInterfaces bsc1177155. libxl: Fixed lock manager lock ordering bsc1171701. Note that Tenable Network...

SUSE SLES12 Security Update : spice-gtk (SUSE-SU-2020:3085-1)

This update for spice-gtk fixes the following issues : CVE-2020-14355: Fixed multiple buffer overflow vulnerabilities in QUIC image decoding bsc1177158. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted...

SUSE SLES12 Security Update : freetype2 (SUSE-SU-2020:2998-1)

This update for freetype2 fixes the following issues : CVE-2020-15999: fixed a heap buffer overflow found in the handling of embedded PNG bitmaps bsc1177914. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:3225-1)

This update for the Linux Kernel 4.4.180-94107 fixes several issues. The following security issues were fixed : CVE-2020-0429: In l2tpsessiondelete and related functions of l2tpcore.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege wi...

SUSE SLES12 Security Update : shim (SUSE-SU-2020:2627-1)

This update for shim fixes the following issues : Update to the unified shim binary from SUSE Linux Enterprise 15-SP1 bsc1168994 This update addresses the 'BootHole' security issue master CVE CVE-2020-10713, by disallowing binaries signed by the previous SUSE UEFI signing key from booting. This...

SUSE SLES12 Security Update : libvirt (SUSE-SU-2020:3143-1)

This update for libvirt fixes the following issues : CVE-2020-15708: Added a note to libvirtd.conf about polkit auth in SUSE distros bsc1174955. CVE-2020-25637: Fixed a double free in qemuAgentGetInterfaces bsc1177155. Note that Tenable Network Security has extracted the preceding description blo...

SUSE SLES12 Security Update : raptor (SUSE-SU-2020:3351-1)

This update for raptor fixes the following issues : Fixed a heap overflow vulnerability bsc1178593, CVE-2017-18926. Update raptor to version 2.0.15 - Made several fixes to Turtle / N-Triples family of parsers and serializers - Added utility functions for re-entrant sorting of objects and sequence...

SUSE SLES12 Security Update : MozillaFirefox (SUSE-SU-2020:2759-1)

This update for MozillaFirefox fixes the following issues : -Firefox was updated to 78.3.0 ESR bsc1176756, MFSA 2020-43 - CVE-2020-15677: Download origin spoofing via redirect - CVE-2020-15676: Fixed an XSS when pasting attacker-controlled data into a contenteditable element - CVE-2020-15678: Whe...

SUSE SLES12 Security Update : php74 (SUSE-SU-2020:2896-1)

This update for php74 fixes the following issues : CVE-2020-7069: Fixed an issue when AES-CCM mode was used with opensslencrypt function with 12 bytes IV, only first 7 bytes of the IV was used bsc1177351. CVE-2020-7070: Fixed an issue where percent-encoded cookies could have been used to overwrit...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:3501-1)

The SUSE Linux Enterprise 12 SP2 kernel was updated to receive various security and bug fixes. The following security bugs were fixed : CVE-2020-25705: A flaw in the way reply ICMP packets are limited in was found that allowed to quickly scan open UDP ports. This flaw allowed an off-path remote...

SUSE SLES12 Security Update : ovmf (SUSE-SU-2020:2714-1)

This update for ovmf fixes the following issues : CVE-2019-14562: Fixed an overflow in DxeImageVerificationHandler bsc1175476. Use openSUSE CA for the opensuse flavor bsc1175674 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

SUSE SLES12 Security Update : libqt5-qtimageformats (SUSE-SU-2020:2923-1)

This update for libqt5-qtimageformats fixes the following issues : Security issues fixed : CVE-2018-19871: Fixed CPU exhaustion in QTgaFile bsc1118598 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted t...

SUSE SLES12 Security Update : opensc (SUSE-SU-2020:3133-1)

This update for opensc fixes the following issues : Security issue fixed : CVE-2019-6502: Fixed a memory leak in sccontextcreate bsc1122756. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLES12 Security Update : wavpack (SUSE-SU-2020:2727-1)

This update for wavpack fixes the following issues : Security issues fixed : CVE-2018-19840: Fixed a denial-of-service in the WavpackPackInit function from packutils.c bsc1120930 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

SUSE SLES12 Security Update : xen (SUSE-SU-2020:3088-1)

This update for xen fixes the following issues : bsc1177409 - VUL-0: CVE-2020-27673: xen: x86 PV guest INVLPG-like flushes may leave stale TLB entries XSA-286 bsc1177412 - VUL-0: CVE-2020-27672: xen: Race condition in Xen mapping code XSA-345 bsc1177413 - VUL-0: CVE-2020-27671: xen: undue deferra...

SUSE SLES12 Security Update : postgresql10 (SUSE-SU-2020:3464-1)

This update for postgresql10 fixes the following issues : Upgrade to version 10.15 : - CVE-2020-25695, bsc1178666: Block DECLARE CURSOR ... WITH HOLD and firing of deferred triggers within index expressions and materialized view queries. - CVE-2020-25694, bsc1178667: a Fix usage of complex...

SUSE SLES12 Security Update : samba (SUSE-SU-2020:3082-1)

This update for samba fixes the following issues : CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records bsc1177613. CVE-2020-14323: Unprivileged user can crash winbind bsc1173994. CVE-2020-14318: Missing permissions check in SMB1/2/3 ChangeNotify bsc1173902...