SUSE SLES12 Security Update : git (SUSE-SU-2020:1295-1)

This update for git to 2.26.2 fixes the following issues : Security issue fixed : CVE-2020-11008: Specially crafted URLs may have tricked the credentials helper to providing credential information that is not appropriate for the protocol in use and host being contacted bsc1169936. Non-security...

SUSE SLES12 Security Update : bind (SUSE-SU-2020:1350-1)

This update for bind fixes the following issues : Security issues fixed : CVE-2020-8616: Fixed the insufficient limit on the number of fetches performed when processing referrals bsc1171740. CVE-2020-8617: Fixed a logic error in code which checks TSIG validity bsc1171740. Non-security issue fixed...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:1275-1) (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)

The SUSE Linux Enterprise 12 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-11494: An issue was discovered in slcbump in drivers/net/can/slcan.c, which allowed attackers to read uninitialized canframe data, potentially containing...

SUSE SLES12 Security Update : mailman (SUSE-SU-2020:1301-1)

This update for mailman fixes the following issues : Security issue fixed : CVE-2020-12108: Fixed a content injection bug bsc1171363. CVE-2020-12137: Fixed a XSS vulnerability caused by MIME type confusion bsc1170558. Non-security issue fixed : Fixed rights and ownership on...

SUSE SLES12 Security Update : libvirt (SUSE-SU-2020:1289-1)

This update for libvirt fixes the following issues : Security issue fixed : CVE-2020-10703: Fixed a daemon crash caused by pools without target paths bsc1168683. Non-security issues fixed : apparmor: avoid copying empty profile name bsc1149100. logging: ensure virtlogd rollover takes priority ove...

SUSE SLES12 Security Update : openexr (SUSE-SU-2020:1292-1)

This update for openexr provides the following fix : Security issues fixed : CVE-2020-11764: Fixed an out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp bsc1169574. CVE-2020-11763: Fixed an out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp bsc1169576. CVE-2020-11758: Fixe...

SUSE SLES12 Security Update : libvirt (SUSE-SU-2020:1277-1)

This update for libvirt fixes the following issues : Security issues fixed : CVE-2020-10703: Fixed a daemon crash caused by pools without target paths bsc1168683. CVE-2020-12430: Fixed a memory leak in qemuDomainGetStatsIOThread bsc1170765. Non-security issues fixed : Support setting credit2...

SUSE SLES12 Security Update : python-PyYAML (SUSE-SU-2020:1285-1)

This update for python-PyYAML fixes the following issues : CVE-2020-1747: Fixed an arbitrary code execution when YAML files are parsed by FullLoader bsc1165439. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

SUSE SLES12 Security Update : openldap2 (SUSE-SU-2020:1210-1)

This update for openldap2 fixes the following issues : CVE-2020-12243: Fixed a denial of service related to recursive filters bsc1170771. CVE-2019-13565: Fixed an authentication bypass caused by incorrect authorization of another connection, granting excess connection rights bsc1143194...

SUSE SLES12 Security Update : syslog-ng (SUSE-SU-2020:1221-1)

This update for syslog-ng fixes the following issues : CVE-2020-8019: Fixed a local privilege escalation during package update bsc1169385. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLES12 Security Update : ghostscript (SUSE-SU-2020:1212-1)

This update for ghostscript to version 9.52 fixes the following issues : CVE-2020-12268: Fixed a heap-based buffer overflow in jbig2imagecompose bsc1170603. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:1255-1)

The SUSE Linux Enterprise 12 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-11494: An issue was discovered in slcbump in drivers/net/can/slcan.c, which allowed attackers to read uninitialized canframe data, potentially containing...

SUSE SLES12 Security Update : webkit2gtk3 (SUSE-SU-2020:1211-1)

This update for webkit2gtk3 fixes the following issues : Security issue fixed : CVE-2020-3899: Fixed a memory consumption issue that could have led to remote code execution bsc1170643. Non-security issues fixed : Update to version 2.28.2 bsc1170643 : + Fix excessive CPU usage due to GdkFrameClock...

SUSE SLES12 Security Update : apache2 (SUSE-SU-2020:1272-1)

This update for apache2 fixes the following issues : CVE-2020-1934: modproxyftp may use uninitialized memory when proxying to a malicious FTP server bsc1168404. CVE-2020-1927: modrewrite configurations vulnerable to open redirect bsc1168407. CVE-2020-1938: modproxyajp: Add 'secret' parameter to...

SUSE SLES12 Security Update : squid (SUSE-SU-2020:1227-1)

This update for squid fixes the following issues : CVE-2019-12519, CVE-2019-12521: fixes incorrect buffer handling that can result in cache poisoning, remote execution, and denial of service attacks when processing ESI responses bsc1169659. CVE-2020-11945: fixes a potential remote execution...

SUSE SLES12 Security Update : icu (SUSE-SU-2020:1180-1)

This update for icu fixes the following issues : CVE-2020-10531: Fixed integer overflow in UnicodeString:doAppend bsc1166844. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and...

SUSE SLES12 Security Update : openldap2 (SUSE-SU-2020:1193-1)

This update for openldap2 fixes the following issues : CVE-2020-12243: Fixed a denial of service related to recursive filters bsc1170771. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatical...

SUSE SLES12 Security Update : LibVNCServer (SUSE-SU-2020:1165-1)

This update for LibVNCServer fixes the following issues : CVE-2019-15690: Fixed a heap buffer overflow bsc1160471. CVE-2019-15681: Fixed a memory leak which could have allowed to a remote attacker to read stack memory bsc1155419. CVE-2019-20788: Fixed a integer overflow and heap-based buffer...

SUSE SLES12 Security Update : ceph (SUSE-SU-2020:1158-1)

This update for ceph fixes the following issues : CVE-2020-12059: Fixed a denial of service caused by a specially crafted XML payload on POST requests bsc1170170. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

SUSE SLES12 Security Update : xen (SUSE-SU-2020:1139-1)

This update for xen to version 4.12.2 fixes the following issues : Security issues fixed : CVE-2020-11742: Bad continuation handling in GNTTABOPcopy bsc1169392. CVE-2020-11740, CVE-2020-11741: xen: XSA-313 multiple xenoprof issues bsc1168140. CVE-2020-11739: Missing memory barriers in read-write...