SUSE SLED12 / SLES12 Security Update : permissions (SUSE-SU-2019:3183-1)

This update for permissions fixes the following issues : Security issues fixed : CVE-2019-3688: Changed wrong ownership in /usr/sbin/pinger to root:squid which could have allowed a squid user to gain persistence by changing the binary bsc1093414. CVE-2019-3690: Fixed a privilege escalation throug...

SUSE SLED12 / SLES12 Security Update : libarchive (SUSE-SU-2019:3092-1)

This update for libarchive fixes the following issues : Security issues fixed : CVE-2018-1000877: Fixed a double free vulnerability in RAR decoder bsc1120653. CVE-2018-1000878: Fixed a Use-After-Free vulnerability in RAR decoder bsc1120654. CVE-2019-1000019: Fixed an Out-Of-Bounds Read...

SUSE SLES12 Security Update : java-11-openjdk (SUSE-SU-2019:3083-1)

This update for java-11-openjdk fixes the following issues : Security issues fixed October 2019 CPU bsc1154212 : CVE-2019-2933: Windows file handling redux CVE-2019-2945: Better socket support CVE-2019-2949: Better Kerberos ccache handling CVE-2019-2958: Build Better Processes CVE-2019-2964: Bett...

SUSE SLED12 / SLES12 Security Update : ncurses (SUSE-SU-2019:3094-1)

This update for ncurses fixes the following issues : Security issue fixed : CVE-2018-10754: Fixed a denial of service caused by a NULL pointer Dereference in the ncparseentry bsc1131830. CVE-2019-17594: Fixed a heap-based buffer over-read in ncfindentry function in tinfo/comphash.c bsc1154036...

SUSE SLED12 / SLES12 Security Update : libxml2 (SUSE-SU-2019:3085-1)

This update for libxml2 doesn't fix any additional security issues, but correct the rpm changelog to reflect all CVEs that have been fixed over the past. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempte...

SUSE SLES12 Security Update : ucode-intel (SUSE-SU-2019:3091-1)

This update for ucode-intel to version fixes the following issues : Updated to 20191115 official security release bsc1157004 and bsc1155988 Includes security fixes for : - CVE-2019-11135: Added feature allowing to disable TSX RTM bsc1139073 - CVE-2019-11139: A CPU microcode only fix for Voltage...

SUSE SLES12 Security Update : squid (SUSE-SU-2019:3067-1)

This update for squid to version 4.9 fixes the following issues : Security issues fixed : CVE-2019-13345: Fixed multiple cross-site scripting vulnerabilities in cachemgr.cgi bsc1140738. CVE-2019-12526: Fixed potential remote code execution during URN processing bsc1156326...

SUSE SLES12 Security Update : slurm (SUSE-SU-2019:3080-1)

This update for slurm fixes the following issues : Security issue fixed : CVE-2019-6438: Fixed a heap overflow on 32-bit systems in xmalloc bsc1123304. CVE-2019-12838: Fixed an SQL injection bsc1140709. Note that Tenable Network Security has extracted the preceding description block directly from...

SUSE SLED12 / SLES12 Security Update : clamav (SUSE-SU-2019:3066-1)

This update for clamav fixes the following issues : Security issue fixed : CVE-2019-12625: Fixed a ZIP bomb issue by adding detection and heuristics for zips with overlapping files bsc1144504. CVE-2019-12900: Fixed an out-of-bounds write in decompress.c with many selectors bsc1149458. Non-securit...

SUSE SLES12 Security Update : mailman (SUSE-SU-2019:3076-1)

This update for mailman fixes the following issues : CVE-2019-3693: Fixed a local privilege escalation from wwwrun to root bsc1154328. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically...

SUSE SLED12 / SLES12 Security Update : sqlite3 (SUSE-SU-2019:3050-1)

This update for sqlite3 fixes the following issues : CVE-2017-2518: Fixed a use-after-free vulnerability which could have led to buffer overflow via a crafted SQL statement bsc1155787. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

SUSE SLED12 / SLES12 Security Update : cups (SUSE-SU-2019:3057-1)

This update for cups fixes the following issues : CVE-2019-8675: Fixed a stack-based buffer overflow in libcups's asn1gettype functionbsc1146358. CVE-2019-8696: Fixed a stack-based buffer overflow in libcups's asn1getpacked function bsc1146359. Note that Tenable Network Security has extracted the...

SUSE SLED12 / SLES12 Security Update : libpng16 (SUSE-SU-2019:3060-1)

This update for libpng16 fixes the following issues : Security issues fixed : CVE-2019-7317: Fixed a use-after-free vulnerability, triggered when pngimagefree was called under pngsafeexecute bsc1124211. CVE-2017-12652: Fixed an Input Validation Error related to the length of chunks bsc1141493. No...

SUSE SLED12 / SLES12 Security Update : tiff (SUSE-SU-2019:3058-1)

This update for tiff fixes the following issues : Security issues fixed : CVE-2019-14973: Fixed an improper check which was depended on the compiler which could have led to integer overflow bsc1146608. CVE-2016-5102: Fixed a buffer overflow in readgifimage bsc983268 CVE-2018-17000: Fixed a NULL...

SUSE SLED12 / SLES12 Security Update : cpio (SUSE-SU-2019:3064-1)

This update for cpio fixes the following issues : CVE-2019-14866: Fixed an improper validation of the values written in the header of a TAR file through the tooct function which could have led to unexpected TAR generation bsc1155199. Note that Tenable Network Security has extracted the preceding...

SUSE SLES12 Security Update : dpdk (SUSE-SU-2019:3032-1)

This update for dpdk to version 17.11.7 fixes the following issues : CVE-2019-14818: Fixed a memory leak vulnerability caused by a malicious container may lead to to denial of service bsc1156146. Note that Tenable Network Security has extracted the preceding description block directly from the SU...

SUSE SLED12 / SLES12 Security Update : aspell (SUSE-SU-2019:3034-1)

This update for aspell fixes the following issues : CVE-2019-17544: Fixed a stack-based buffer over-read in acommon:unescape in common/getdata.cpp via an isolated backslash bsc1153892. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

SUSE SLED12 / SLES12 Security Update : ucode-intel (SUSE-SU-2019:2988-1)

This update for ucode-intel fixes the following issues : Updated to 20191112 official security release bsc1155988 Includes security fixes for : - CVE-2019-11135: Added feature allowing to disable TSX RTM bsc1139073 - CVE-2019-11139: A CPU microcode only fix for Voltage modulation issues bsc114103...

SUSE SLES12 Security Update : kernel (SUSE-SU-2019:2984-1)

The SUSE Linux Enterprise 12 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2018-12207: Untrusted virtual machines on Intel CPUs could exploit a race condition in the Instruction Fetch Unit of the Intel CPU to cause a Machine Exceptio...

SUSE SLED12 / SLES12 Security Update : ghostscript (SUSE-SU-2019:2983-1)

This update for ghostscript fixes the following issue : CVE-2019-14869: Fixed a possible dSAFER escape which could have allowed an attacker to gain high privileges by a specially crafted Postscript code bsc1156275. Note that Tenable Network Security has extracted the preceding description block...