SUSE SLES12 Security Update : xorg-x11-server (SUSE-SU-2020:2399-1)

This update for xorg-x11-server fixes the following issues : CVE-2020-14361: Fix XkbSelectEvents integer underflow bsc1174910 ZDI-CAN-11573. CVE-2020-14362: Fix XRecordRegisterClients Integer underflow bsc1174913 ZDI-CAN-11574. Note that Tenable Network Security has extracted the preceding...

SUSE SLES12 Security Update : libX11 (SUSE-SU-2020:2475-1)

This update for libX11 fixes the following issues : CVE-2020-14363: Fix an integer overflow in initom bsc1175239. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it a...

SUSE SLES12 Security Update : xorg-x11-server (SUSE-SU-2020:2401-1)

This update for xorg-x11-server fixes the following issues : CVE-2020-14361: Fix XkbSelectEvents integer underflow bsc1174910 ZDI-CAN-11573. CVE-2020-14362: Fix XRecordRegisterClients Integer underflow bsc1174913 ZDI-CAN-11574. Note that Tenable Network Security has extracted the preceding...

SUSE SLES12 Security Update : squid (SUSE-SU-2020:2471-1)

This update for squid fixes the following issues : CVE-2020-24606: Fix livelocking in peerDigestHandleReply bsc1175671. CVE-2020-15811: Improve Transfer-Encoding handling bsc1175665. CVE-2020-15810: Enforce token characters for field-name bsc1175664. Note that Tenable Network Security has extract...

SUSE SLES12 Security Update : php74 (SUSE-SU-2020:2404-1)

This update for php74 fixes the following issues : CVE-2020-7068: Use of freed hash key in the pharparsezipfile function bsc1175223. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically...

SUSE SLES12 Security Update : php5 (SUSE-SU-2020:2477-1)

This update for php5 fixes the following issues : CVE-2020-7068: Use of freed hash key in the pharparsezipfile function bsc1175223. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically cle...

SUSE SLES12 Security Update : php7 (SUSE-SU-2020:2403-1)

This update for php7 fixes the following issues : fix CVE-2020-7068 bsc1175223: Use of freed hash key in the pharparsezipfile function Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically...

SUSE SLES12 Security Update : freeradius-server (SUSE-SU-2020:2391-1)

This update for freeradius-server fixes the following issues : CVE-2019-13456: Fixed a side-channel password leak in EAP-pwd bsc1144524. CVE-2019-17185: Fixed a debial of service due to multithreaded BNCTX access bsc1166847. Note that Tenable Network Security has extracted the preceding descripti...

SUSE SLES12 Security Update : openvpn (SUSE-SU-2020:2359-1)

This update for openvpn fixes the following issues : openvpn-2.3.9-Fix-heap-overflow-on-getaddrinfo-result.patch was malformed in a way that caused patch1 to ignore it. bsc959714 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

SUSE SLES12 Security Update : libxslt (SUSE-SU-2020:0920-2)

This update for libxslt fixes the following issue : CVE-2019-18197: Fixed a dangling pointer in xsltCopyText which may have led to information disclosure bsc1154609. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable...

SUSE SLES12 Security Update : xorg-x11-server (SUSE-SU-2020:2331-1)

This update for xorg-x11-server fixes the following issues : CVE-2020-14347: Leak of uninitialized heap memory from the X server to clients on pixmap allocation bsc1174633, ZDI-CAN-11426. CVE-2020-14346: XIChangeHierarchy Integer Underflow Privilege Escalation Vulnerability bsc1174638,...

SUSE SLES12 Security Update : samba (SUSE-SU-2020:2312-1)

This update for samba fixes the following issues : CVE-2020-10745: Fixed an issue which parsing and packing of NBT and DNS packets containing dots could potentially have consumed excessive CPU bsc1173160. Note that Tenable Network Security has extracted the preceding description block directly fr...

SUSE SLES12 Security Update : grub2 (SUSE-SU-2020:2308-1)

This update for grub2 fixes the following issues : CVE-2020-15705: Fail kernel validation without shim protocol bsc1174421. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and...

SUSE SLES12 Security Update : xorg-x11-server (SUSE-SU-2020:2325-1)

This update for xorg-x11-server fixes the following issues : CVE-2020-14347: Leak of uninitialized heap memory from the X server to clients on pixmap allocation bsc1174633, ZDI-CAN-11426. CVE-2020-14346: XIChangeHierarchy Integer Underflow Privilege Escalation Vulnerability bsc1174638,...

SUSE SLES12 Security Update : xorg-x11-server (SUSE-SU-2020:2242-1)

This update for xorg-x11-server fixes the following issues : CVE-2020-14347: Leak of uninitialized heap memory from the X server to clients on pixmap allocation bsc1174633, ZDI-CAN-11426. CVE-2020-14346: XIChangeHierarchy Integer Underflow Privilege Escalation Vulnerability bsc1174638,...

SUSE SLES12 Security Update : grub2 (SUSE-SU-2020:2304-1)

This update for grub2 fixes the following issues : CVE-2020-15705: Fail kernel validation without shim protocol bsc1174421. Add fibre channel device's ofpath support to grub-ofpathname and search hint to speed up root device discovery bsc1172745. Note that Tenable Network Security has extracted t...

SUSE SLES12 Security Update : grub2 (SUSE-SU-2020:2305-1)

This update for grub2 fixes the following issues : CVE-2020-15705: Fail kernel validation without shim protocol bsc1174421. Add fibre channel device's ofpath support to grub-ofpathname and search hint to speed up root device discovery bsc1172745. Note that Tenable Network Security has extracted t...

SUSE SLES12 Security Update : dovecot22 (SUSE-SU-2020:2274-1)

This update for dovecot22 fixes the following issues : CVE-2020-12673: improper implementation of NTLM does not check message buffer size bsc1174922. CVE-2020-12674: improper implementation of RPA mechanism bsc1174923. Note that Tenable Network Security has extracted the preceding description blo...

SUSE SLES12 Security Update : python (SUSE-SU-2020:2275-1)

This update for python fixes the following issues : CVE-2019-20907: Avoid a possible infinite loop caused by specifically crafted tarballs bsc1174091. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted t...

SUSE SLES12 Security Update : perl-PlRPC (SUSE-SU-2020:2238-1)

This update for perl-PlRPC fixes the following issues : Security notice: bsc858243, CVE-2013-7284 - Document security vulnerability on Storable and reply attack Add perl-PlRPC-CVE-2013-7284.patch Note that Tenable Network Security has extracted the preceding description block directly from the SU...