SUSE SLED12 / SLES12 Security Update : compat-openssl098 (SUSE-SU-2019:2558-1)

This update for compat-openssl098 fixes the following issues : OpenSSL Security Advisory 10 September 2019 CVE-2019-1547: Added ECGROUPsetgenerator side channel attack avoidance bsc1150003. CVE-2019-1563: Fixed Bleichenbacher attack against cms/pkcs7 encryption transported key bsc1150250. Note th...

SUSE SLES12 Security Update : git (SUSE-SU-2018:4088-3)

This update for git fixes the following issue : CVE-2018-17456: Git allowed remote code execution during processing of a recursive 'git clone' of a superproject if a .gitmodules file has a URL field beginning with a '-' character. boo1110949. Note that Tenable Network Security has extracted the...

SUSE SLED12 / SLES12 Security Update : sqlite3 (SUSE-SU-2019:2536-1)

This update for sqlite3 fixes the following issues : Security issue fixed : CVE-2019-16168: Fixed improper validation of sqlitestat1 field that could lead to denial of service bsc1150137. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE...

SUSE SLED12 / SLES12 Security Update : jasper (SUSE-SU-2019:2513-1)

This update for jasper fixes the following issues : Security issues fixed : CVE-2018-19540: Fixed a heap based overflow in jasicctxtdescinput bsc1117508. CVE-2018-19541: Fix heap based overread in jasimagedepalettize bsc1117507. CVE-2018-19542: Fixed a denial of service in jp2decode bsc1117505...

SUSE SLED12 / SLES12 Security Update : bind (SUSE-SU-2019:2502-1)

This update for bind fixes the following issues : Security issues fixed : CVE-2019-6465: Fixed an issue where controls for zone transfers may not be properly applied to Dynamically Loadable Zones bsc1126069. CVE-2019-6471: Fixed a reachable assert in dispatch.c. bsc1138687 CVE-2018-5745: Fixed a...

SUSE SLED12 / SLES12 Security Update : openssl-1_0_0 (SUSE-SU-2019:2504-1)

This update for openssl-100 fixes the following issues : OpenSSL Security Advisory 10 September 2019 CVE-2019-1547: Added ECGROUPsetgenerator side channel attack avoidance. bsc1150003 CVE-2019-1563: Fixed Bleichenbacher attack against cms/pkcs7 encryption transported key bsc1150250 In addition...

SUSE SLED12 / SLES12 Security Update : libgcrypt (SUSE-SU-2019:2510-1)

This update for libgcrypt fixes the following issues : Security issues fixed : CVE-2019-13627: Mitigated ECDSA timing attack. bsc1148987 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automaticall...

SUSE SLED12 / SLES12 Security Update : gpg2 (SUSE-SU-2019:2480-1)

This update for gpg2 fixes the following issues : Security issue fixed : CVE-2019-13050: Fixed denial-of-service attacks via big keys. bsc1141093 Non-security issue fixed: Allow coredumps in X11 desktop sessions bsc1124847. Note that Tenable Network Security has extracted the preceding descriptio...

SUSE SLED12 / SLES12 Security Update : djvulibre (SUSE-SU-2019:2444-1)

This update for djvulibre fixes the following issues : Security issues fixed : CVE-2019-15142: Fixed heap-based buffer over-read bsc1146702. CVE-2019-15143: Fixed resource exhaustion caused by corrupted image files bsc1146569. CVE-2019-15144: Fixed denial-of-service caused by crafted PBM image...

SUSE SLES12 Security Update : dovecot22 (SUSE-SU-2019:2454-1)

This update for dovecot22 fixes the following issues : CVE-2019-11500: Fixed a potential remote code execution in the IMAP and ManageSieve protocol parsers bsc1145559. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenabl...

SUSE SLES12 Security Update : python-Twisted (SUSE-SU-2019:2453-1)

This update for python-Twisted fixes the following issues : Security issue fixed : CVE-2019-12855: Fixed TLS certificate verification to protecting against MITM attacks bsc1138461. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

SUSE SLED12 / SLES12 Security Update : expat (SUSE-SU-2019:2440-1)

This update for expat fixes the following issues : Security issue fixed : CVE-2019-15903: Fixed a heap-based buffer over-read caused by crafted XML documents. bsc1149429 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE SLES12 Security Update : openssl (SUSE-SU-2019:2413-1)

This update for openssl fixes the following issues : OpenSSL Security Advisory 10 September 2019 CVE-2019-1547: Added ECGROUPsetgenerator side channel attack avoidance bsc1150003. CVE-2019-1563: Fixed Bleichenbacher attack against cms/pkcs7 encryption transported key bsc1150250. Note that Tenable...

SUSE SLES12 Security Update : nmap (SUSE-SU-2019:2426-1)

This update for nmap fixes the following issues : Fixed a regression in the version scanner, caused by the fix for CVE-2018-15173. bsc1135350 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLES12 Security Update : openssl (SUSE-SU-2019:2397-1)

This update for openssl fixes the following issues : OpenSSL Security Advisory 10 September 2019 CVE-2019-1547: Added ECGROUPsetgenerator side channel attack avoidance. bsc1150003 CVE-2019-1563: Fixed a Bleichenbacher attack against cms/pkcs7 encryption transported key bsc1150250 Note that Tenabl...

SUSE SLED12 / SLES12 Security Update : ibus (SUSE-SU-2019:2389-1)

This update for ibus fixes the following issues : Security issue fixed : CVE-2019-14822: Fixed a misconfiguration of the DBus server that allowed an unprivileged user to monitor and send method calls to the ibus bus of another user. bsc1150011 Note that Tenable Network Security has extracted the...

SUSE SLES12 Security Update : ibus (SUSE-SU-2019:2388-1)

This update for ibus fixes the following issues : Security issue fixed : CVE-2019-14822: Fixed a misconfiguration of the DBus server that allowed an unprivileged user to monitor and send method calls to the ibus bus of another user. bsc1150011 Note that Tenable Network Security has extracted the...

SUSE SLED12 / SLES12 Security Update : openldap2 (SUSE-SU-2019:2390-1)

This update for openldap2 fixes the following issues : Security issues fixed : CVE-2019-13565: Fixed ssf memory reuse that leads to incorrect authorization of another connection, granting excess connection rights ssf bsc1143194. CVE-2019-13057: Fixed rootDN of a backend that may proxyauth...

SUSE SLES12 Security Update : java-1_8_0-ibm (SUSE-SU-2019:2371-1)

This update for java-180-ibm fixes the following issues : Update to Java 8.0 Service Refresh 5 Fix Pack 40. Security issues fixed : CVE-2019-11771: IBM Security Update July 2019 bsc1147021 CVE-2019-11772: IBM Security Update July 2019 bsc1147021 CVE-2019-11775: IBM Security Update July 2019...

SUSE SLES12 Security Update : curl (SUSE-SU-2019:2339-2)

This update for curl fixes the following issues : Security issue fixed : CVE-2019-5482: Fixed TFTP small blocksize heap buffer overflow bsc1149496. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...