SUSE SLES12 Security Update : squid (SUSE-SU-2020:1770-1)

This update for squid fixes the following issues : squid was updated to version 4.12 Security issue fixed : CVE-2020-14059: Fixed an issue where a client could potentially deny the service of a server during TLS Handshake bsc1173304. Other issues addressed : Reverted to slow search for new SMP sh...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:1781-1)

This update for the Linux Kernel 4.4.180-94107 fixes one issue. The following security issue was fixed : CVE-2020-10757: Fixed an issue where remaping hugepage DAX to anon mmap could have caused user PTE access bsc1172437. Note that Tenable Network Security has extracted the preceding description...

SUSE SLES12 Security Update : openldap2 (SUSE-SU-2020:1859-1)

This update for openldap2 fixes the following issues : CVE-2020-8023: Fixed a potential local privilege escalation from ldap to root when OPENLDAPCONFIGBACKEND='ldap' was used bsc1172698. Changed DBCONFIG to root:ldap permissions bsc1172704. Fixed an issue where slapd becomes unresponsive after...

SUSE SLES12 Security Update : openldap2 (SUSE-SU-2020:1855-1)

This update for openldap2 fixes the following issues : CVE-2020-8023: Fixed a potential local privilege escalation from ldap to root when OPENLDAPCONFIGBACKEND='ldap' was used bsc1172698. Changed DBCONFIG to root:ldap permissions bsc1172704. Note that Tenable Network Security has extracted the...

SUSE SLES12 Security Update : mozilla-nspr, mozilla-nss (SUSE-SU-2020:1839-1)

This update for mozilla-nspr, mozilla-nss fixes the following issues : mozilla-nss was updated to version 3.53.1 CVE-2020-12402: Fixed a potential side channel attack during RSA key generation bsc1173032. CVE-2020-12399: Fixed a timing attack on DSA signature generation bsc1171978. CVE-2019-17006...

SUSE SLES12 Security Update : libgxps (SUSE-SU-2020:1687-1)

This update for libgxps fixes the following issues : CVE-2018-10733: Fixed a heap-based buffer over-read issue in ftfontfacehash bsc1092125. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLES12 Security Update : mariadb-100 (SUSE-SU-2020:1798-1)

This update for mariadb-100 fixes the following issues : mariadb-100 was updated to version 10.0.44 bsc1171550 CVE-2020-2752: Fixed an issue which could have resulted in unauthorized ability to cause denial of service. CVE-2020-2812: Fixed an issue which could have resulted in unauthorized abilit...

SUSE SLES12 Security Update : java-1_7_0-openjdk (SUSE-SU-2020:1571-1)

This update for java-170-openjdk to version 7u261 fixes the following issues : CVE-2020-2756: Better mapping of serial ENUMs bsc1169511 CVE-2020-2757: Less Blocking Array Queues bsc1169511 CVE-2020-2773: Better signatures in XML bsc1169511 CVE-2020-2781: Improve TLS session handling bsc1169511...

SUSE SLES12 Security Update : java-11-openjdk (SUSE-SU-2020:1572-1)

This update for java-11-openjdk fixes the following issues : Java was updated to jdk-11.0.7+10 April 2020 CPU, bsc1169511. Security issues fixed : CVE-2020-2754: Fixed an incorrect handling of regular expressions that could have resulted in denial of service bsc1169511. CVE-2020-2755: Fixed an...

SUSE SLES12 Security Update : nodejs10 (SUSE-SU-2020:1575-1)

This update for nodejs10 fixes the following issues : nodejs10 was updated to version 10.21.0 CVE-2020-8174: Fixed multiple memory corruption in napigetvaluestring bsc1172443. CVE-2020-11080: Fixed a potential denial of service when receiving unreasonably large HTTP/2 SETTINGS frames bsc1172442...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:1587-1)

The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-0543: Fixed a side channel attack against special registers which could have resulted in leaking of read values to cores other than the one which...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:1596-1)

The SUSE Linux Enterprise 12 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-0543: Fixed a side channel attack against special registers which could have resulted in leaking of read values to cores other than the one which called...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:1597-1)

The SUSE Linux Enterprise 12 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-0543: Fixed a side channel attack against special registers which could have resulted in leaking of read values to cores other than the one which called...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:1603-1)

The SUSE Linux Enterprise 12 SP4 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-0543: Fixed a side channel attack against special registers which could have resulted in leaking of read values to cores other than the one which...

SUSE SLES12 Security Update : nodejs12 (SUSE-SU-2020:1606-1)

This update for nodejs12 fixes the following issues : nodejs12 was updated to version 12.18.0 CVE-2020-8174: Fixed multiple memory corruption in napigetvaluestring bsc1172443. CVE-2020-8172: Fixed am issue where TLS session reuse could have led to host certificate verification bypass bsc1172441...

SUSE SLES12 Security Update : ruby2.1 (SUSE-SU-2020:1570-1)

This update for ruby2.1 fixes the following issues : Security issues fixed : CVE-2015-9096: Fixed an SMTP command injection via CRLFsequences in a RCPT TO or MAIL FROM command bsc1043983. CVE-2016-7798: Fixed an IV Reuse in GCM Mode bsc1055265. CVE-2017-0898: Fixed a buffer underrun vulnerability...

SUSE SLES12 Security Update : audiofile (SUSE-SU-2020:1619-1)

This update for audiofile fixes the following issues : Security issue fixed : CVE-2018-13440: Return AFFAIL instead of causing NULL pointer dereferences later bsc1100523. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE SLES12 Security Update : MozillaFirefox (SUSE-SU-2020:1563-1)

This update for MozillaFirefox fixes the following issues : Mozilla Firefox was updated to version 68.9.0 Extended Support Release bsc1172402. CVE-2020-12405: Fixed a use-after-free in SharedWorkerService. CVE-2020-12406: Fixed a JavaScript Type confusion with NativeTypes. CVE-2020-12410: Fixed...

SUSE SLES12 Security Update : nodejs6 (SUSE-SU-2020:1623-1)

This update for nodejs6 fixes the following issues : CVE-2020-8174: Fixed multiple memory corruption in napigetvaluestring bsc1172443. CVE-2020-7598: Fixed an issue which could have tricked minimist into adding or modifying properties of Object.prototype bsc1166916. Note that Tenable Network...

SUSE SLES12 Security Update : qemu (SUSE-SU-2020:1526-1)

This update for qemu fixes the following issues : Security issues fixed : CVE-2020-1711: Fixed a potential OOB access in the iSCSI client code bsc1166240. CVE-2019-12068: Fixed a potential DoS in the LSI SCSI controller emulation bsc1146873. CVE-2020-1983: Fixed a use-after-free in the ipreass...