SUSE SLES12 Security Update : slurm_18_08 (SUSE-SU-2020:2600-1)

This update for slurm1808 fixes the following issues : Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693 This fixes and issue where authentication could be bypassed via an alternate path or channel when message Aggregation was enabled. A race condition allowed a user to...

SUSE SLES12 Security Update : slurm (SUSE-SU-2020:2601-1)

This update for slurm fixes the following issues : Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693 This fixes and issue where authentication could be bypassed via an alternate path or channel when message Aggregation was enabled. A race condition allowed a user to...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:2576-1)

The SUSE Linux Enterprise 12 SP2 kernel was updated to to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-14314: Fixed a potential negative array index in dosplit bsc1173798. CVE-2020-14331: Fixed a missing check in vgacon scrollback handling bsc1174205...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:2578-1)

The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to 3.12.31 to receive various security and bugfixes. The following security bug was fixed : CVE-2020-14386: Fixed a potential local privilege escalation via memory corruption bsc1176069. The update package also includes non-security fixes...

SUSE SLES12 Security Update : libjpeg-turbo (SUSE-SU-2020:2570-1)

This update for libjpeg-turbo fixes the following issues : CVE-2020-13790: Fixed a heap-based buffer over-read via a malformed PPM input file bsc1172491. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempte...

SUSE SLES12 Security Update : squid (SUSE-SU-2020:2443-1)

This update for squid fixes the following issues: squid was updated to version 4.13 : CVE-2020-24606: Fix livelocking in peerDigestHandleReply bsc1175671. CVE-2020-15811: Improve Transfer-Encoding handling bsc1175665. CVE-2020-15810: Enforce token characters for field-name bsc1175664. Note that...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:2574-1)

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-1749: Use ip6dstlookupflow instead of ip6dstlookup bsc1165629. CVE-2020-14314: Fixed a potential negative array index in dosplit bsc1173798...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:2498-1)

This update for the Linux Kernel 4.4.180-94113 fixes several issues. The following security issues were fixed : CVE-2020-14331: Fixed a buffer over-write in vgaconscroll bsc1174247. CVE-2019-16746: Fixed a buffer overflow in net/wireless/nl80211.c bsc1173659. CVE-2019-9458: Fixed a use-after-free...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:2499-1)

This update for the Linux Kernel 4.4.180-94116 fixes several issues. The following security issues were fixed : CVE-2020-14331: Fixed a buffer over-write in vgaconscroll bsc1174247. CVE-2019-16746: Fixed a buffer overflow in net/wireless/nl80211.c bsc1173659. CVE-2020-11668: Fixed a memory...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:2502-1)

This update for the Linux Kernel 4.4.180-94127 fixes several issues. The following security issues were fixed : CVE-2020-14331: Fixed a buffer over-write in vgaconscroll bsc1174247. CVE-2019-16746: Fixed a buffer overflow in net/wireless/nl80211.c bsc1173659. CVE-2020-11668: Fixed a memory...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:2491-1)

This update for the Linux Kernel 4.4.121-92120 fixes several issues. The following security issues were fixed : CVE-2020-14331: Fixed a buffer over-write in vgaconscroll bsc1174247. CVE-2019-0155: Fixed a privilege escalation in the i915 graphics driver bsc1173663. CVE-2019-16746: Fixed a buffer...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:2492-1)

This update for the Linux Kernel 4.4.121-92125 fixes several issues. The following security issues were fixed : CVE-2020-14331: Fixed a buffer over-write in vgaconscroll bsc1174247. CVE-2019-16746: Fixed a buffer overflow in net/wireless/nl80211.c bsc1173659. CVE-2019-9458: Fixed a use-after-free...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:2497-1)

This update for the Linux Kernel 4.4.180-94107 fixes several issues. The following security issues were fixed : CVE-2020-14331: Fixed a buffer over-write in vgaconscroll bsc1174247. CVE-2019-0155: Fixed a privilege escalation in the i915 graphics driver bsc1173663. CVE-2019-16746: Fixed a buffer...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:2540-1) (Spectre)

The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-1749: Use ip6dstlookupflow instead of ip6dstlookup bsc1165629. CVE-2020-14314: Fixed a potential negative array index in dosplit bsc1173798...

SUSE SLES12 Security Update : java-1_8_0-ibm (SUSE-SU-2020:2461-1)

This update for java-180-ibm fixes the following issues : Update to Java 8.0 Service Refresh 6 Fix Pack 15 bsc1175259, bsc1174157 CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581 CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583 CVE-2019-17639 - Class Libraries : -...

SUSE SLES12 Security Update : curl (SUSE-SU-2020:2444-1)

This update for curl fixes the following issues : An application that performs multiple requests with libcurl's multi API and sets the 'CURLOPTCONNECTONLY' option, might in rare circumstances experience that when subsequently using the setup connect-only transfer, libcurl will pick and use the...

SUSE SLES12 Security Update : java-1_7_1-ibm (SUSE-SU-2020:2482-1)

This update for java-171-ibm fixes the following issues : Update to Java 7.1 Service Refresh 4 Fix Pack 70 bsc1175259, bsc1174157 CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583 CVE-2019-17639 - Class Libraries : - UPDATE TIMEZONE INFORMATION TO TZDATA202...

SUSE SLES12 Security Update : xorg-x11-server (SUSE-SU-2020:2401-1)

This update for xorg-x11-server fixes the following issues : CVE-2020-14361: Fix XkbSelectEvents integer underflow bsc1174910 ZDI-CAN-11573. CVE-2020-14362: Fix XRecordRegisterClients Integer underflow bsc1174913 ZDI-CAN-11574. Note that Tenable Network Security has extracted the preceding...

SUSE SLES12 Security Update : squid (SUSE-SU-2020:2471-1)

This update for squid fixes the following issues : CVE-2020-24606: Fix livelocking in peerDigestHandleReply bsc1175671. CVE-2020-15811: Improve Transfer-Encoding handling bsc1175665. CVE-2020-15810: Enforce token characters for field-name bsc1175664. Note that Tenable Network Security has extract...

SUSE SLES12 Security Update : php74 (SUSE-SU-2020:2404-1)

This update for php74 fixes the following issues : CVE-2020-7068: Use of freed hash key in the pharparsezipfile function bsc1175223. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically...