SUSE SLES12 Security Update : ImageMagick (SUSE-SU-2020:2750-1)

This update for ImageMagick fixes the following issues : CVE-2017-11527: Fixed a denial of service inReadDPXImage bsc1047054. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and...

SUSE SLES12 Security Update : MozillaFirefox (SUSE-SU-2020:3053-1)

This update for MozillaFirefox fixes the following issues : Firefox Extended Support Release 78.4.0 ESR - Fixed: Various stability, functionality, and security fixes MFSA 2020-46 bsc1177872, bsc1176756 - CVE-2020-15969 Use-after-free in usersctp - CVE-2020-15683 Memory safety bugs fixed in Firefo...

SUSE SLES12 Security Update : xen (SUSE-SU-2020:2786-1)

This update for xen fixes the following issues : CVE-2020-25602: Fixed an issue where there was a crash when handling guest access to MSRMISCENABLE was thrown bsc1176339,XSA-333 CVE-2020-25598: Added a missing unlock in XENMEMacquireresource error path bsc1176341,XSA-334 CVE-2020-25604: Fixed a...

SUSE SLES12 Security Update : spice-gtk (SUSE-SU-2020:3085-1)

This update for spice-gtk fixes the following issues : CVE-2020-14355: Fixed multiple buffer overflow vulnerabilities in QUIC image decoding bsc1177158. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted...

SUSE SLES12 Security Update : libvirt (SUSE-SU-2020:3038-1)

This update for libvirt fixes the following issues : CVE-2020-15708: Added a note to libvirtd.conf about polkit auth in SUSE distros bsc1174955. CVE-2020-25637: Fixed a double free in qemuAgentGetInterfaces bsc1177155. libxl: Fixed lock manager lock ordering bsc1171701. Note that Tenable Network...

SUSE SLES12 Security Update : libvirt (SUSE-SU-2020:3143-1)

This update for libvirt fixes the following issues : CVE-2020-15708: Added a note to libvirtd.conf about polkit auth in SUSE distros bsc1174955. CVE-2020-25637: Fixed a double free in qemuAgentGetInterfaces bsc1177155. Note that Tenable Network Security has extracted the preceding description blo...

SUSE SLES12 Security Update : freetype2 (SUSE-SU-2020:2998-1)

This update for freetype2 fixes the following issues : CVE-2020-15999: fixed a heap buffer overflow found in the handling of embedded PNG bitmaps bsc1177914. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

SUSE SLES12 Security Update : opensc (SUSE-SU-2020:3133-1)

This update for opensc fixes the following issues : Security issue fixed : CVE-2019-6502: Fixed a memory leak in sccontextcreate bsc1122756. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLES12 Security Update : mutt (SUSE-SU-2020:3632-1)

This update for mutt fixes the following issues : Find and display the content of messages properly. bsc1179461 CVE-2020-28896: incomplete connection termination could send credentials over unencrypted connections. bsc1179035 Avoid that message with a million tiny parts can freeze MUA for several...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:3225-1)

This update for the Linux Kernel 4.4.180-94107 fixes several issues. The following security issues were fixed : CVE-2020-0429: In l2tpsessiondelete and related functions of l2tpcore.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege wi...

SUSE SLES12 Security Update : wpa_supplicant (SUSE-SU-2020:3424-1) (KRACK)

This update for wpasupplicant fixes the following issues : wpasupplicant was updated to 2.9 release : - SAE changes - disable use of groups using Brainpool curves - improved protection against side channel attacks https://w1.fi/security/2019-6/ - EAP-pwd changes - disable use of groups using...

SUSE SLES12 Security Update : samba (SUSE-SU-2020:2720-1)

This update for samba fixes the following issues : Update to 4.10.18 ZeroLogon: An elevation of privilege was possible with some non default configurations when an attacker established a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol MS-NR...

SUSE SLES12 Security Update : samba (SUSE-SU-2020:2721-1)

"This update for samba fixes the following issues : ZeroLogon: An elevation of privilege was possible with some configurations when an attacker established a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol MS-NRPC CVE-2020-1472, bsc1176579...

SUSE SLES12 Security Update : samba (SUSE-SU-2020:2724-1)

This update for samba fixes the following issues : ZeroLogon: An elevation of privilege was possible with some configurations when an attacker established a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol MS-NRPC CVE-2020-1472, bsc1176579...

SUSE SLES12 Security Update : aspell (SUSE-SU-2020:2807-1)

This update for aspell fixes the following security issue : CVE-2019-20433: Fixed a buffer over-read when processing strings ending with a single '\0' byte with ucs-2 and ucs-4 encoding bsc1161982. Note that Tenable Network Security has extracted the preceding description block directly from the...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:3326-1)

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bug fixes. The following security bugs were fixed : CVE-2020-25656: Fixed a concurrency use-after-free in vtdokdgkbioctl bnc1177766. CVE-2020-25285: Fixed a race condition between hugetlb sysctl handlers in...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:3501-1)

The SUSE Linux Enterprise 12 SP2 kernel was updated to receive various security and bug fixes. The following security bugs were fixed : CVE-2020-25705: A flaw in the way reply ICMP packets are limited in was found that allowed to quickly scan open UDP ports. This flaw allowed an off-path remote...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:3544-1)

The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bug fixes. The following security bugs were fixed : CVE-2020-25705: A flaw in the way reply ICMP packets are limited in was found that allowed to quickly scan open UDP ports. This flaw allowed an off-path remote...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:3651-1)

This update for the Linux Kernel 4.4.180-94121 fixes several issues. The following security issues were fixed : CVE-2020-25668: Fixed a concurrency use-after-free in confontop bsc1178622. CVE-2020-8694: Fixed an insufficient access control in the Linux kernel driver for some IntelR Processors whi...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:3717-1)

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-15436: Fixed a use after free vulnerability in fs/blockdev.c which could have allowed local users to gain privileges or cause a denial of service...