SUSE SLED12 / SLES12 Security Update : ipmitool (SUSE-SU-2020:0630-1)

This update for ipmitool fixes the following issues : CVE-2020-5208: Fixed multiple remote code executtion vulnerabilities bsc1163026. picmg discover messages are now DEBUG and not INFO messages bsc1085469. Note that Tenable Network Security has extracted the preceding description block directly...

SUSE SLED12 / SLES12 Security Update : gd (SUSE-SU-2020:0623-1)

This update for gd fixes the following issues : CVE-2017-7890: Fixed a buffer over-read into uninitialized memory bsc1050241. CVE-2018-14553: Fixed a NULL pointer dereference in gdImageClone bsc1165471. CVE-2019-11038: Fixed a information disclosure in gdImageCreateFromXbm bsc1140120. Note that...

SUSE SLES12 Security Update : librsvg (SUSE-SU-2020:0604-1)

This update for librsvg to version 2.40.21 fixes the following issues : librsvg was updated to version 2.40.21 fixing the following issues : CVE-2019-20446: Fixed an issue where a crafted SVG file with nested patterns can cause denial of service bsc1162501. NOTE: Librsvg now has limits on the...

SUSE SLES12 Security Update : python-aws-sam-translator, python-boto3, python-botocore, python-cfn-lint, python-jsonschema, python-nose2, python-parameterized, python-pathlib2, python-pytest-cov, python-requests, python-s3transfer (SUSE-SU-2020:0555-1)

This update for python-aws-sam-translator, python-boto3, python-botocore, python-cfn-lint, python-jsonschema, python-nose2, python-parameterized, python-pathlib2, python-pytest-cov, python-requests, python-s3transfer, python-jsonpatch, python-jsonpointer, python-scandir, python-PyYAML fixes the...

SUSE SLES12 Security Update : compat-openssl098 (SUSE-SU-2020:0576-1)

This update for compat-openssl098 fixes the following issues : Add missing commits for fixes of the 'The 9 Lives of Bleichenbacher's CAT' attack bsc1117951 Fixed missing BNcopy bsc1160163 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE...

SUSE SLES12 Security Update : postgresql96 (SUSE-SU-2020:0586-1)

This update for postgresql96 fixes the following issues : PostgreSQL was updated to version 9.6.17. Security issue fixed : CVE-2020-1720: Fixed a missing authorization check in the ALTER ... DEPENDS ON extension bsc1163985. Note that Tenable Network Security has extracted the preceding descriptio...

SUSE SLES12 Security Update : python36 (SUSE-SU-2020:0557-1)

This update for python36 fixes the following issues : Security issues fixed : CVE-2019-9674: Improved the documentation to reflect the dangers of zip-bombs bsc1162825. CVE-2020-8492: Fixed a regular expression in urrlib that was prone to denial of service via HTTP bsc1162367. Non-security issue...

SUSE SLES12 Security Update : libpng16 (SUSE-SU-2019:3060-2)

This update for libpng16 fixes the following issues : Security issues fixed : CVE-2019-7317: Fixed a use-after-free vulnerability, triggered when pngimagefree was called under pngsafeexecute bsc1124211. CVE-2017-12652: Fixed an Input Validation Error related to the length of chunks bsc1141493. No...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:0559-1)

The SUSE Linux Enterprise 12 SP4 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-2732: Fixed an issue affecting Intel CPUs where an L2 guest may trick the L0 hypervisor into accessing sensitive L1 resources bsc1163971...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:0580-1)

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2019-14615: An information disclosure vulnerability existed due to insufficient control flow in certain data structures for some IntelR Processors bnc1160195...

SUSE SLES12 Security Update : java-1_8_0-ibm (SUSE-SU-2020:0528-1)

This update for java-180-ibm fixes the following issues : Java 8.0 was updated to Service Refresh 6 Fix Pack 5 bsc1162972, bsc1160968 CVE-2020-2583: Unlink Set of LinkedHashSets CVE-2019-4732: Untrusted DLL search path vulnerability CVE-2020-2593: Normalize normalization for all CVE-2020-2604:...

SUSE SLES12 Security Update : permissions (SUSE-SU-2020:0545-1)

This update for permissions fixes the following issues : Security issues fixed : CVE-2020-8013: Fixed an issue where chkstat set unintended setuid/capabilities for mrsh and wodim bsc1163922. Non-security issues fixed: Fixed a regression where chkstat broke when /proc was not available bsc1160764,...

SUSE SLES12 Security Update : php5 (SUSE-SU-2020:0522-1)

This update for php5 fixes the following issues : Security issues fixed : CVE-2019-11041: Fixed heap buffer over-read in exifscanthumbnail bsc1146360. CVE-2019-11042: Fixed heap buffer over-read in exifprocessusercomment bsc1145095. CVE-2019-11043: Fixed possible remote code execution via...

SUSE SLES12 Security Update : mariadb-100 (SUSE-SU-2020:0523-1)

This update for mariadb-100 fixes the following issues : MariaDB was updated to version 10.0.40-3 bsc1162388. Security issue fixed : CVE-2020-2574: Fixed a difficult to exploit vulnerability that allowed an attacker to crash the client bsc1162388. Note that Tenable Network Security has extracted...

SUSE SLES12 Security Update : openssl (SUSE-SU-2020:0516-1)

This update for openssl fixes the following issues : Add missing commits fixing the security issue called 'The 9 Lives of Bleichenbacher's CAT'. bsc1117951 Fix a memory leak problem in function 'BNcopy'. bsc1160163 Note that Tenable Network Security has extracted the preceding description block...

SUSE SLES12 Security Update : rsyslog (SUSE-SU-2020:0512-1)

This update for rsyslog fixes the following issues : Security issues fixed : CVE-2019-17041: Fixed a heap overflow in the parser for AIX log messages bsc1153451. CVE-2019-17042: Fixed a heap overflow in the parser for Cisco log messages bsc1153459. Non-security issues fixed: Handle multiline...

SUSE SLES12 Security Update : mariadb (SUSE-SU-2020:0505-1)

This update for mariadb fixes the following issues : MariaDB was updated to version 10.2.31 GA bsc1162388. Security issues fixed : CVE-2020-2574: Fixed a difficult to exploit vulnerability that allowed an attacker to crash the client bsc1162388. CVE-2019-18901: Fixed an unsafe path handling...

SUSE SLES12 Security Update : squid (SUSE-SU-2020:0487-1)

This update for squid to version 4.10 fixes the following issues : Security issues fixed : CVE-2019-12528: Fixed an information disclosure flaw in the FTP gateway bsc1162689. CVE-2020-8449: Fixed a buffer overflow when squid is acting as reverse-proxy bsc1162687. CVE-2020-8450: Fixed a buffer...

SUSE SLES12 Security Update : nodejs6 (SUSE-SU-2020:0488-1)

This update for nodejs6 fixes the following issues : Security issues fixed : CVE-2019-15604: Fixed a remotely triggerable assertion in the TLS server via a crafted certificate string CVE-2019-15604, bsc1163104. CVE-2019-15605: Fixed an HTTP request smuggling vulnerability via malformed...

SUSE SLED12 / SLES12 Security Update : ppp (SUSE-SU-2020:0490-1)

This update for ppp fixes the following security issue : CVE-2020-8597: Fixed a buffer overflow in the eaprequest and eapresponse functions bsc1162610. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted ...