SUSE SLES12 Security Update : shibboleth-sp (SUSE-SU-2020:0115-1)

This update for shibboleth-sp fixes the following issues : Security issue fixed : CVE-2019-19191: Fixed escalation to root by fixing ownership of log files bsc1157471. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenabl...

SUSE SLED12 / SLES12 Security Update : openssl-1_1 (SUSE-SU-2020:0099-1)

This update for openssl-11 fixes the following issues : Security issue fixed : CVE-2019-1551: Fixed an overflow bug in the x6464 Montgomery squaring procedure used in exponentiation with 512-bit moduli bsc1158809. CVE-2019-1563: Fixed bleichenbacher attack against cms/pkcs7 encryptioon transporte...

SUSE SLED12 / SLES12 Security Update : libzypp (SUSE-SU-2020:0079-1)

This update for libzypp fixes the following issues : Security issue fixed : CVE-2019-18900: Fixed assert cookie file that was world readable bsc1158763. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted...

SUSE SLED12 / SLES12 Security Update : mozilla-nspr, mozilla-nss (SUSE-SU-2020:0088-1)

This update for mozilla-nspr, mozilla-nss fixes the following issues : mozilla-nss was updated to NSS 3.47.1 : Security issues fixed : CVE-2019-17006: Added length checks for cryptographic primitives bsc1159819. CVE-2019-11745: EncryptUpdate should use maxout, not block size bsc1158527...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:0093-1)

The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2019-20095: mwifiextmcmd in drivers/net/wireless/marvell/mwifiex/cfg80211.c had some error-handling cases that did not free allocated hostcmd memory. Th...

SUSE SLES12 Security Update : nodejs10 (SUSE-SU-2020:0063-1)

This update for nodejs10 to version 10.18.0 fixes the following issues : Security issues fixed : CVE-2019-16777, CVE-2019-16776, CVE-2019-16775: Updated npm to 6.13.4, fixing an arbitrary path overwrite and access via 'bin' field bsc1159352. Added support for chacha20-poly1305 for Authenticated...

SUSE SLES12 Security Update : java-1_7_1-ibm (SUSE-SU-2020:0051-1)

This update for java-171-ibm fixes the following issues : Update to 7.1 Service Refresh 4 Fix Pack 55 bsc1158442, bsc1154212 - Security fixes: CVE-2019-2933 CVE-2019-2945 CVE-2019-2962 CVE-2019-2964 CVE-2019-2978 CVE-2019-2983 CVE-2019-2989 CVE-2019-2992 CVE-2019-2999 CVE-2019-2973 CVE-2019-2981...

SUSE SLES12 Security Update : nodejs12 (SUSE-SU-2020:0059-1) (0-Length Headers Leak) (Data Dribble) (Empty Frames Flood) (Internal Data Buffering) (Ping Flood) (Reset Flood) (Resource Loop) (Settings Flood)

This update for nodejs12 fixes the following issues : Update to LTS release 12.13.0 jscSLE-8947. Security issues fixed : CVE-2019-9511: Fixed the HTTP/2 implementation that was vulnerable to window size manipulations bsc1146091. CVE-2019-9512: Fixed the HTTP/2 implementation that was vulnerable t...

SUSE SLES12 Security Update : mariadb (SUSE-SU-2020:0050-1)

This update for mariadb fixes the following issues : Security issue fixed : CVE-2019-2974: Fixed Server Optimizer bsc1154162. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and...

SUSE SLES12 Security Update : java-1_8_0-ibm (SUSE-SU-2020:0024-1)

This update for java-180-ibm fixes the following issues : Update to Java 8.0 Service Refresh 6 bsc1158442, bsc1154212 - Security fixes: CVE-2019-2933 CVE-2019-2945 CVE-2019-2958 CVE-2019-2962 CVE-2019-2964 CVE-2019-2975 CVE-2019-2978 CVE-2019-2983 CVE-2019-2988 CVE-2019-2989 CVE-2019-2992...

SUSE SLED12 / SLES12 Security Update : sysstat (SUSE-SU-2020:0026-1)

This update for sysstat fixes the following issues : Security issue fixed : CVE-2019-19725: Fixed double free in checkfileactlst in sacommon.c bsc1159104. Bug fixes: Enable log information of starting/stoping services. bsc1144923, jscSLE-5958 Note that Tenable Network Security has extracted the...

SUSE SLED12 / SLES12 Security Update : java-1_8_0-openjdk (SUSE-SU-2020:0025-1)

This update for java-180-openjdk fixes the following issues : Update to version jdk8u232 icedtea 3.14.0 October 2019 CPU, bsc1154212 Security issues fixed : CVE-2019-2933: Windows file handling redux CVE-2019-2945: Better socket support CVE-2019-2949: Better Kerberos ccache handling CVE-2019-2958...

SUSE SLED12 / SLES12 Security Update : openssl-1_0_0 (SUSE-SU-2020:0028-1)

This update for openssl-100 fixes the following issues : Security issue fixed : CVE-2019-1551: Fixed an overflow bug in the x6464 Montgomery squaring procedure used in exponentiation with 512-bit moduli bsc1158809. Note that Tenable Network Security has extracted the preceding description block...

SUSE SLED12 / SLES12 Security Update : virglrenderer (SUSE-SU-2020:0016-1)

This update for virglrenderer fixes the following issues : CVE-2019-18388: Fixed a NULL pointer dereference which could have led to denial of service bsc1159479. CVE-2019-18390: Fixed an out of bound read which could have led to denial of service bsc1159478. CVE-2019-18389: Fixed a heap buffer...

SUSE SLES12 Security Update : kernel (SUSE-SU-2019:3389-1)

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2019-16746: There was an issue in net/wireless/nl80211.c where the kernel did not check the length of variable elements in a beacon head, leading to a buffer...

SUSE SLES12 Security Update : slurm (SUSE-SU-2019:3385-1)

This update for slurm fixes the following issues : Security issues fixed : CVE-2019-6438: Fixed SchedMD Slurm that mishandles 32-bit systems bnc1123304. Fix permissions of slurmdbd.conf bsc1155784. Bug fixes: Fix ownership of /var/spool/slurm on new installations and upgrade bsc1158696. Fix...

SUSE SLES12 Security Update : kernel (SUSE-SU-2019:3379-1)

The SUSE Linux Enterprise 12 SP 3 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2019-14895: A heap-based buffer overflow was discovered in the Linux kernel in Marvell WiFi chip driver. The flaw could occur when the station attempts ...

SUSE SLED12 / SLES12 Security Update : mariadb (SUSE-SU-2019:3369-1)

This update for mariadb to version 10.2.29 fixes the following issues : MariaDB was updated to 10.2.29 bsc1156669 Security issues fixed : CVE-2019-2737: Fixed an issue where could lead a remote attacker to cause denial of service CVE-2019-2938: Fixed an issue where could lead a remote attacker to...

SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2019:3371-1)

The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2019-14895: A heap-based buffer overflow was discovered in the Linux kernel in Marvell WiFi chip driver. The flaw could occur when the station attempts a...

SUSE SLED12 / SLES12 Security Update : mariadb-100 (SUSE-SU-2019:3370-1)

This update for mariadb-100 fixes the following issues : Security issue fixed : CVE-2019-2974: Fixed Server Optimizer bsc1154162. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean...