SUSE SLES12 Security Update : kernel (SUSE-SU-2020:0868-1)

This update for the Linux Kernel 3.12.74-6064124 fixes several issues. The following security issues were fixed : CVE-2020-1749: Fixed an issue in the networking protocols in encrypted IPsec tunnel bsc1165631 CVE-2019-5108: Fixed an issue where by triggering AP to send IAPP location updates for...

SUSE SLES12 Security Update : libpng12 (SUSE-SU-2020:0911-1)

This update for libpng12 fixes the following issues : Security issue fixed : CVE-2017-12652: Fixed an Input Validation Error related to the length of chunks bsc1141493. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenab...

SUSE SLES12 Security Update : exiv2 (SUSE-SU-2020:0860-1)

This update for exiv2 fixes the following issues : CVE-2018-17581: Fixed an excessive stack consumption in CiffDirectory:readDirectory which might have led to denial of service bsc1110282. CVE-2019-13110: Fixed an integer overflow and an out of bounds read in CiffDirectory:readDirectory which mig...

SUSE SLES12 Security Update : libxslt (SUSE-SU-2020:0920-1)

This update for libxslt fixes the following issue : CVE-2019-18197: Fixed a dangling pointer in xsltCopyText which may have led to information disclosure bsc1154609. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable...

SUSE SLES12 Security Update : python3 (SUSE-SU-2020:0854-1)

This update for python3 fixes the following issue : CVE-2019-18348: Fixed a CRLF injection via the host part of the url passed to urlopen. Now an InvalidURL exception is raised bsc1155094. CVE-2019-9674: Improved the documentation to reflect the dangers of zip-bombs bsc1162825. CVE-2020-8492: Fix...

SUSE SLES12 Security Update : mgetty (SUSE-SU-2020:0853-1)

This update for mgetty fixes the following issues : CVE-2019-1010190: Fixed a denial of service which could be caused by a local attacker in putwhitespan bsc1142770. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable...

SUSE SLES12 Security Update : glibc (SUSE-SU-2020:0832-1)

This update for glibc fixes the following issues : CVE-2020-1752: Fixed a use after free in glob which could have allowed a local attacker to create a specially crafted path that, when processed by the glob function, could potentially have led to arbitrary code execution bsc1167631. CVE-2020-1751...

SUSE SLES12 Security Update : memcached (SUSE-SU-2020:0843-1)

This update for memcached fixes the following issues : Security issue fixed : CVE-2019-11596: Fixed a NULL pointer dereference in processlrucommand bsc1133817. CVE-2019-15026: Fixed a stack-based buffer over-read bsc1149110. Note that Tenable Network Security has extracted the preceding descripti...

SUSE SLES12 Security Update : spamassassin (SUSE-SU-2020:0810-1)

This update for spamassassin fixes the following issues : CVE-2018-11805: Fixed an issue with delimiter handling in rule files related to isregexpvalid bsc1118987. CVE-2020-1930: Fixed an issue with rule configuration .cf files which can be configured to run system commands bsc1162197...

SUSE SLES12 Security Update : python-cffi, python-cryptography, python-xattr (SUSE-SU-2020:0790-1)

This update for python-cffi, python-cryptography and python-xattr fixes the following issues : Security issue fixed : CVE-2018-10903: Fixed GCM tag forgery via truncated tag in finalizewithtag API bsc1101820. Non-security issues fixed : python-cffi was updated to 1.11.2 bsc1138748, jscECO-1256,...

SUSE SLES12 Security Update : python-cffi, python-cryptography (SUSE-SU-2020:0792-1)

This update for python-cffi, python-cryptography fixes the following issues : Security issue fixed : CVE-2018-10903: Fixed GCM tag forgery via truncated tag in finalizewithtag API bsc1101820. Non-security issues fixed : python-cffi was updated to 1.11.2 bsc1138748, jscECO-1256, jscPM-1598: fixed ...

SUSE SLES12 Security Update : python36 (SUSE-SU-2020:0750-1)

This update for python36 fixes the following issues : CVE-2019-18348: Fixed a CRLF injection via the host part of the url passed to urlopen. Now an InvalidURL exception is raised bsc1155094. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE...

SUSE SLES12 Security Update : MozillaFirefox (SUSE-SU-2020:0717-1)

This update for MozillaFirefox fixes the following issues : Mozilla Firefox was updated to 68.6.0 ESR MFSA 2020-09 bsc1132665 bsc1166238 CVE-2020-6805: Fixed a use-after-free when removing data about origins CVE-2020-6806: Fixed improper protections against state confusion CVE-2020-6807: Fixed a...

SUSE SLED12 / SLES12 Security Update : postgresql10 (SUSE-SU-2020:0715-1)

This update for postgresql10 fixes the following issues : PostgreSQL was updated to version 10.12. Security issue fixed : CVE-2020-1720: Fixed a missing authorization check in the ALTER ... DEPENDS ON extension bsc1163985. Note that Tenable Network Security has extracted the preceding description...

SUSE SLES12 Security Update : ovmf (SUSE-SU-2020:0699-1)

This update for ovmf fixes the following issues : Security issues fixed : CVE-2019-14563: Fixed a memory corruption caused by insufficient numeric truncation bsc1163959. CVE-2019-14553: Fixed the TLS certification verification in HTTPS-over-IPv6 boot sequences bsc1153072. CVE-2019-14559: Fixed a...

SUSE SLES12 Security Update : apache2-mod_auth_openidc (SUSE-SU-2020:0706-1)

This update for apache2-modauthopenidc fixes the following issues : CVE-2019-20479: Fixed an open redirect issue in URLs with slash and backslash bsc1164459. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

SUSE SLES12 Security Update : php5 (SUSE-SU-2020:0658-1)

This update for php5 fixes the following issues : CVE-2020-7062: Fixed a NULL pointer dereference when using file upload functionality under specific circumstances bsc1165280. CVE-2020-7063: Fixed an issue where adding files change the permissions to default bsc1165289. Note that Tenable Network...

SUSE SLES12 Security Update : squid (SUSE-SU-2020:0661-1)

This update for squid fixes the following issues : CVE-2019-12528: Fixed an information disclosure flaw in the FTP gateway bsc1162689. CVE-2019-12526: Fixed potential remote code execution during URN processing bsc1156326. CVE-2019-12523,CVE-2019-18676: Fixed multiple improper validations in URI...

SUSE SLES12 Security Update : php72 (SUSE-SU-2020:0647-1)

This update for php72 fixes the following issues : CVE-2020-7062: Fixed a NULL pointer dereference when using file upload functionality under specific circumstances bsc1165280. CVE-2020-7063: Fixed an issue where adding files change the permissions to default bsc1165289. Note that Tenable Network...

SUSE SLED12 / SLES12 Security Update : java-1_7_0-openjdk (SUSE-SU-2020:0628-1)

This update for java-170-openjdk fixes the following issues : Update java-170-openjdk to version jdk7u251 January 2020 CPU, bsc1160968 : CVE-2020-2583: Unlink Set of LinkedHashSets CVE-2020-2590: Improve Kerberos interop capabilities CVE-2020-2593: Normalize normalization for all CVE-2020-2601:...