SUSE SLED12 / SLES12 Security Update : ceph (SUSE-SU-2019:2364-1)

This update for ceph to version 12.2.12-594-g02236657ca fixes the following issues : Security issues fixed : CVE-2018-16889: Fixed missing sanitation of customer encryption keys from log output in v4 auth. bsc1121567 Note that Tenable Network Security has extracted the preceding description block...

SUSE SLED12 / SLES12 Security Update : qemu (SUSE-SU-2019:2353-1)

This update for qemu fixes the following issues : Security issues fixed : CVE-2019-14378: Security fix for heap overflow in ipreass on big packet input bsc1143794. CVE-2019-12155: Security fix for NULL pointer dereference while releasing spice resources bsc1135902. CVE-2019-13164: Security fix fo...

SUSE SLES12 Security Update : libvirt (SUSE-SU-2019:2227-2)

This update for libvirt fixes the following issues : Security issues fixed : CVE-2019-10161: Fixed virDomainSaveImageGetXMLDesc API which could accept a path parameter pointing anywhere on the system and potentially leading to execution of a malicious file with root privileges by libvirtd...

SUSE SLED12 / SLES12 Security Update : webkit2gtk3 (SUSE-SU-2019:2345-1)

This update for webkit2gtk3 fixes the following issues : Updated to version 2.24.4 bsc1148931. Security issues fixed : CVE-2019-8644, CVE-2019-8649, CVE-2019-8658, CVE-2019-8669, CVE-2019-8678, CVE-2019-8680, CVE-2019-8683, CVE-2019-8684, CVE-2019-8688, CVE-2019-8595, CVE-2019-8607, CVE-2019-8615...

SUSE SLED12 / SLES12 Security Update : ghostscript (SUSE-SU-2019:2347-1)

This update for ghostscript fixes the following issues : Security issue fixed : CVE-2019-10216: Fix privilege escalation via specially crafted PostScript file bsc1144621. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE SLES12 Security Update : java-1_7_1-ibm (SUSE-SU-2019:2336-1)

This update for java-171-ibm fixes the following issues : Update to Java 7.1 Service Refresh 4 Fix Pack 50. Security issues fixed : CVE-2019-11771: IBM Security Update July 2019 bsc1147021 CVE-2019-11775: IBM Security Update July 2019 bsc1147021 CVE-2019-4473: IBM Security Update July 2019...

SUSE SLES12 Security Update : qemu (SUSE-SU-2019:2157-1)

This update for qemu fixes the following issues : Security issues fixed : CVE-2019-14378: Security fix for heap overflow in ipreass on big packet input bsc1143794. CVE-2019-12155: Security fix for NULL pointer dereference while releasing spice resources bsc1135902. CVE-2019-13164: Security fix fo...

SUSE SLES12 Security Update : postgresql94 (SUSE-SU-2019:2158-1)

This update for postgresql94 fixes the following issues : Security issue fixed : CVE-2019-10208: Fixed arbitrary SQL execution via suitable SECURITY DEFINER function under the identity of the function owner bsc1145092. Note that Tenable Network Security has extracted the preceding description blo...

SUSE SLED12 / SLES12 Security Update : mariadb, mariadb-connector-c (SUSE-SU-2019:2330-1)

This update for mariadb and mariadb-connector-c fixes the following issues : mariadb : Update to version 10.2.25 bsc1136035 CVE-2019-2628: Fixed a remote denial of service by an privileged attacker bsc1136035. CVE-2019-2627: Fixed another remote denial of service by an privileged attacker...

SUSE SLES12 Security Update : apache2 (SUSE-SU-2019:2329-1) (Internal Data Buffering)

This update for apache2 fixes the following issues : Security issues fixed : CVE-2019-9517: Fixed HTTP/2 implementations that are vulnerable to unconstrained interal data buffering bsc1145575. CVE-2019-10081: Fixed modhttp2 that is vulnerable to memory corruption on early pushes bsc1145742...

SUSE SLES12 Security Update : kernel (SUSE-SU-2019:2299-1)

The SUSE Linux Enterprise 12 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2019-3819: A flaw was fixed in the function hiddebugeventsread in drivers/hid/hid-debug.c file which may have enter an infinite loop with certain parameters...

SUSE SLES12 Security Update : libosinfo (SUSE-SU-2019:2273-1)

This update for libosinfo fixes the following issues : Security issue fixed : CVE-2019-13313: Fixed a information leak where a local user could gather credentials from the osinfo-install-script bsc1140749. Non-security issues fixed: Fixed OS detection for multiple versions of SLE12, SLE15 and...

SUSE SLES12 Security Update : kernel (SUSE-SU-2019:2263-1)

The SUSE Linux Enterprise 12 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2019-1125: Enable Spectre v1 swapgs mitigations bsc1139358. CVE-2018-20855: An issue was discovered in createqpcommon in drivers/infiniband/hw/mlx5/qp.c,...

SUSE SLES12 Security Update : php72 (SUSE-SU-2019:2270-1)

This update for php72 fixes the following issues : Security issues fixed : CVE-2019-11041: Fixed heap buffer over-read in exifscanthumbnail bsc1146360. CVE-2019-11042: Fixed heap buffer over-read in exifprocessusercomment bsc1145095. Note that Tenable Network Security has extracted the preceding...

SUSE SLES12 Security Update : kernel (SUSE-SU-2019:2262-1)

The SUSE Linux Enterprise 12 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2019-1125: Enable Spectre v1 swapgs mitigations bsc1139358. CVE-2018-20855: An issue was discovered in createqpcommon in drivers/infiniband/hw/mlx5/qp.c,...

SUSE SLED12 / SLES12 Security Update : libsolv, libzypp, zypper (SUSE-SU-2019:2265-1)

This update for libsolv, libzypp and zypper fixes the following issues : libsolv was updated to version 0.6.36 and fixes the following issues : Security issues fixed : CVE-2018-20532: Fixed a NULL pointer dereference in testcaseread bsc1120629. CVE-2018-20533: Fixed a NULL pointer dereference in...

SUSE SLED12 / SLES12 Security Update : Recommended update for NetworkManager (SUSE-SU-2019:2258-1)

This update for NetworkManager fixes the following issues : Security issue fixed : Fixed that passwords are not echoed on terminal when asking for them bsc990204. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

SUSE SLED12 / SLES12 Security Update : perl (SUSE-SU-2019:2264-1)

This update for perl fixes the following issues : Security issue fixed : CVE-2018-18311: Fixed integer overflow with oversize environment bsc1114674. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLES12 Security Update : nodejs10 (SUSE-SU-2019:2254-1) (0-Length Headers Leak) (Data Dribble) (Empty Frames Flood) (Internal Data Buffering) (Ping Flood) (Reset Flood) (Resource Loop) (Settings Flood)

This update for nodejs10 to version 10.16.3 fixes the following issues : Security issues fixed : CVE-2019-9511: Fixed HTTP/2 implementations that are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service bsc1146091. CVE-2019-9512...

SUSE SLES12 Security Update : libvirt (SUSE-SU-2019:2227-1)

This update for libvirt fixes the following issues : Security issues fixed : CVE-2019-10161: Fixed virDomainSaveImageGetXMLDesc API which could accept a path parameter pointing anywhere on the system and potentially leading to execution of a malicious file with root privileges by libvirtd...