SUSE SLES12 Security Update : perl-PlRPC (SUSE-SU-2020:2238-1)

This update for perl-PlRPC fixes the following issues : Security notice: bsc858243, CVE-2013-7284 - Document security vulnerability on Storable and reply attack Add perl-PlRPC-CVE-2013-7284.patch Note that Tenable Network Security has extracted the preceding description block directly from the SU...

SUSE SLES12 Security Update : xerces-c (SUSE-SU-2020:2225-1)

This update for xerces-c fixes the following issues : CVE-2017-12627: Processing of external DTD paths could have resulted in a NULL pointer dereference under certain conditions bsc1083630 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE...

SUSE SLES12 Security Update : libvirt (SUSE-SU-2020:2233-1)

This update for libvirt fixes the following issues : CVE-2020-14339: Don't leak /dev/mapper/control into QEMU. Use ioctl's to obtain the dependency tree of disks and drop use of libdevmapper. - bsc1161883, bsc1174458 qemu: Setup emulator thread and cpuset.mems before exec - bsc1171946 libxl:...

SUSE SLES12 Security Update : xen (SUSE-SU-2020:2234-1)

This update for xen fixes the following issues : bsc1174543 - secure boot related fixes bsc1163019 - CVE-2020-8608: Potential OOB access due to unsafe snprintf usages bsc1169392 - CVE-2020-11742: Bad continuation handling in GNTTABOPcopy bsc1168140 - CVE-2020-11740, CVE-2020-11741: Multiple...

SUSE SLES12 Security Update : python36 (SUSE-SU-2020:2216-1)

This update for python36 fixes the following issues : CVE-2019-20907, bsc1174091: avoiding possible infinite loop in specifically crafted tarball. CVE-2020-14422, bsc1173274: where hash collisions in IPv4Interface and IPv6Interface could lead to DOS. Note that Tenable Network Security has extract...

SUSE SLES12 Security Update : dpdk (SUSE-SU-2020:2194-1)

This update for dpdk to version 16.11.9 following issue : CVE-2019-14818: Fixed a memory leak vulnerability caused by a malicious container may lead to to denial of service bsc1156146. CVE-2020-12693: Fixed an authentication bypass via an alternate path or channel boo1172004. rebuilt with new...

SUSE SLES12 Security Update : libX11 (SUSE-SU-2020:2196-1)

This update for libX11 fixes the following issues : Fixed XIM client heap overflows CVE-2020-14344, bsc1174628. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as...

SUSE SLES12 Security Update : xen (SUSE-SU-2020:2166-1)

This update for xen fixes the following issues : bsc1174543 - secure boot related fixes bsc1172356 - Not able to hot-plug NIC via virt-manager, asks to attach on next reboot while it should be live attached Note that Tenable Network Security has extracted the preceding description block directly...

SUSE SLES12 Security Update : xen (SUSE-SU-2020:2171-1)

This update for xen fixes the following issues : bsc1174543 - secure boot related fixes bsc1163019 - CVE-2020-8608: Potential OOB access due to unsafe snprintf usages Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable...

SUSE SLES12 Security Update : xen (SUSE-SU-2020:2141-1)

This update for xen fixes the following issues : bsc1174543 - secure boot related fixes bsc1163019 - CVE-2020-8608: Potential OOB access due to unsafe snprintf usages Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable...

SUSE SLES12 Security Update : libX11 (SUSE-SU-2020:2117-1)

This update for libX11 fixes the following issues : Fixed XIM client heap overflows CVE-2020-14344, bsc1174628 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:2119-1)

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-15780: A lockdown bypass for loading unsigned modules using ACPI table injection was fixed. bsc1173573 CVE-2020-15393: Fixed a memory leak in...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:2122-1)

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-14331: A buffer over write in vgaconscroll was fixed bnc1174205. CVE-2020-10135: Legacy pairing and secure-connections pairing authentication in Bluetoot...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:2134-1)

The SUSE Linux Enterprise 12 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-10135: Legacy pairing and secure-connections pairing authentication in Bluetooth may have allowed an unauthenticated user to complete authentication...

SUSE SLES12 Security Update : MozillaFirefox (SUSE-SU-2020:2100-1)

This update for MozillaFirefox fixes the following issues : Firefox Extended Support Release 78.1.0 ESR - Fixed: Various stability, functionality, and security fixes bsc1174538 - CVE-2020-15652: Potential leak of redirect targets when loading scripts in a worker - CVE-2020-6514: WebRTC data chann...

SUSE SLES12 Security Update : ghostscript (SUSE-SU-2020:2097-1)

This update for ghostscript fixes the following issues : fixed CVE-2020-15900 Memory Corruption SAFER Sandbox Breakout cf. https://bugs.ghostscript.com/showbug.cgi?id=702582 bsc1174415 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

SUSE SLES12 Security Update : samba (SUSE-SU-2020:2066-1)

This update for samba fixes the following issues : CVE-2020-10745: Fixed an issue which parsing and packing of NBT and DNS packets containing dots could potentially have consumed excessive CPU bsc1173160. Note that Tenable Network Security has extracted the preceding description block directly fr...

SUSE SLES12 Security Update : webkit2gtk3 (SUSE-SU-2020:2069-1)

This update for webkit2gtk3 fixes the following issues : Update to version 2.28.3 bsc1173998 : + Enable kinetic scrolling with async scrolling. + Fix web process hangs on large GitHub pages. + Bubblewrap sandbox should not attempt to bind empty paths. + Fix threading issues in the media player. +...

SUSE SLES12 Security Update : grub2 (SUSE-SU-2020:2076-1)

This update for grub2 fixes the following issues : Fix for CVE-2020-10713 bsc1168994 Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311 bsc1173812 Fix for CVE-2020-15706 bsc1174463 Fix for CVE-2020-15707 bsc1174570 Use overflow checking primitives where the arithmetic expressio...

SUSE SLES12 Security Update : grub2 (SUSE-SU-2020:2078-1)

This update for grub2 fixes the following issues : Fix for CVE-2020-10713 bsc1168994 Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311 bsc1173812 Fix for CVE-2020-15706 bsc1174463 Fix for CVE-2020-15707 bsc1174570 Use overflow checking primitives where the arithmetic expressio...