SUSE SLES12 Security Update : squid (SUSE-SU-2020:1134-1)

This update for squid to version 4.11 fixes the following issues : CVE-2020-11945: Fixed a potential remote code execution vulnerability when using HTTP Digest Authentication bsc1170313. CVE-2019-12519, CVE-2019-12521: Fixed incorrect buffer handling that can result in cache poisoning, remote...

SUSE SLES12 Security Update : webkit2gtk3 (SUSE-SU-2020:1135-1)

This update for webkit2gtk3 to version 2.28.1 fixes the following issues : Security issues fixed : CVE-2020-10018: Fixed a denial of service because the mdeferredFocusedNodeChange data structure was mishandled bsc1165528. CVE-2020-11793: Fixed a potential arbitrary code execution caused by a...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:1118-1)

The SUSE Linux Enterprise 12 SP5 azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-8834: KVM on Power8 processors had a conflicting use of HSTATEHOSTR1 to store r1 state in kvmppchventry plus in kvmppcsave,restoretm, leading to a...

SUSE SLES12 Security Update : pam_radius (SUSE-SU-2020:1117-1)

This update for pamradius fixes the following issues : CVE-2015-9542: Fixed a buffer overflow in password field bsc1163933. On s390x didn't decrypt passwords correctly bsc1141670. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:1119-1)

The SUSE Linux Enterprise 12 SP4 azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-8834: KVM on Power8 processors had a conflicting use of HSTATEHOSTR1 to store r1 state in kvmppchventry plus in kvmppcsave,restoretm, leading to a...

SUSE SLES12 Security Update : apache2 (SUSE-SU-2020:1111-1)

This update for apache2 fixes the following issues : CVE-2020-1934: modproxyftp may use uninitialized memory when proxying to a malicious FTP server bsc1168404. CVE-2020-1927: modrewrite configurations vulnerable to open redirect bsc1168407. CVE-2020-1938: modproxyajp: Add 'secret' parameter to...

SUSE SLES12 Security Update : file-roller (SUSE-SU-2020:1088-1)

This update for file-roller fixes the following issues : CVE-2019-16680: Fixed a path traversal vulnerability which could have allowed an overwriting of a file during extraction bsc1151585. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE...

SUSE SLES12 Security Update : cups (SUSE-SU-2020:1045-1)

This update for cups fixes the following issues : CVE-2020-3898: Fixed a heap buffer overflow in ppdFindOption bsc1168422. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and...

SUSE SLES12 Security Update : ovmf (SUSE-SU-2020:1065-1)

This update for ovmf fixes the following issues : CVE-2019-14559: Fixed a memory leak in ArpOnFrameRcvdDpc bsc1163927. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format...

SUSE SLES12 Security Update : openssl-1_1 (SUSE-SU-2020:1058-1)

This update for openssl-11 fixes the following issues : CVE-2020-1967: Fixed a denial of service via NULL pointer dereference in SSLcheckchain bsc1169407. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempt...

SUSE SLES12 Security Update : freeradius-server (SUSE-SU-2020:1018-1)

This update for freeradius-server fixes the following issues : CVE-2019-13456: Fixed a side-channel password leak in EAP-pwd bsc1144524. CVE-2019-17185: Fixed a debial of service due to multithreaded BNCTX access bsc1166847. Fixed an issue in TLS-EAP where the OCSP verification, when an...

SUSE SLES12 Security Update : libqt4 (SUSE-SU-2020:1021-1)

This update for libqt4 fixes the following issues : CVE-2018-15518: Fixed a double free in QXmlStreamReader bsc1118595 CVE-2018-19873: Fixed a segmantation fault via a malformed BMP file bsc1118596. CVE-2018-19869: Fixed an improper checking which might lead to a crach via a malformed url referen...

SUSE SLES12 Security Update : freeradius-server (SUSE-SU-2020:1020-1)

This update for freeradius-server fixes the following issues : CVE-2019-13456: Fixed a side-channel password leak in EAP-pwd bsc1144524. CVE-2019-17185: Fixed a debial of service due to multithreaded BNCTX access bsc1166847. Note that Tenable Network Security has extracted the preceding descripti...

SUSE SLES12 Security Update : git (SUSE-SU-2020:0992-1)

This update for git fixes the following issues : Security issue fixed : CVE-2020-5260: With a crafted URL that contains a newline in it, the credential helper machinery can be fooled to give credential information for a wrong host bsc1168930. Non-security issue fixed : git was updated to 2.26.0 f...

SUSE SLES12 Security Update : libssh (SUSE-SU-2020:0968-1)

This update for libssh fixes the following issues : CVE-2020-1730: Fixed a possible denial of service when using AES-CTR bsc1168699. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically...

SUSE SLES12 Security Update : vino (SUSE-SU-2020:0955-1)

This update for vino fixes the following issues : CVE-2019-15681: Fixed a memory leak which could have allowed to a remote attacker to read stack memory bsc1155419. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable h...

SUSE SLES12 Security Update : djvulibre (SUSE-SU-2020:0970-1)

This update for djvulibre fixes the following issues : CVE-2019-18804: Fixed a NULL pointer dereference bsc1156188. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it...

SUSE SLES12 Security Update : ceph (SUSE-SU-2020:0962-1)

This update for ceph fixes the following issues : CVE-2020-1760: Fixed XSS due to RGW GetObject header-splitting bsc1166484. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and...

SUSE SLES12 Security Update : MozillaFirefox (SUSE-SU-2020:0978-1)

This update for MozillaFirefox to version 68.7.0 ESR fixes the following issues : CVE-2020-6821: Uninitialized memory could be read when using the WebGL copyTexSubImage method bsc1168874. CVE-2020-6822: Fixed out of bounds write in GMPDecodeData when processing large images bsc1168874...

SUSE SLES12 Security Update : MozillaFirefox (SUSE-SU-2020:0928-1)

This update for MozillaFirefox fixes the following issues : Mozilla Firefox 68.6.1esr MFSA 2020-11 bsc1168630 - CVE-2020-6819 bmo1620818 Use-after-free while running the nsDocShell destructor - CVE-2020-6820 bmo1626728 Use-after-free when handling a ReadableStream Note that Tenable Network Securi...