SUSE SLED12 / SLES12 Security Update : Recommended update for NetworkManager (SUSE-SU-2019:2258-1)

This update for NetworkManager fixes the following issues : Security issue fixed : Fixed that passwords are not echoed on terminal when asking for them bsc990204. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

SUSE SLED12 / SLES12 Security Update : perl (SUSE-SU-2019:2264-1)

This update for perl fixes the following issues : Security issue fixed : CVE-2018-18311: Fixed integer overflow with oversize environment bsc1114674. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLES12 Security Update : nodejs10 (SUSE-SU-2019:2254-1) (0-Length Headers Leak) (Data Dribble) (Empty Frames Flood) (Internal Data Buffering) (Ping Flood) (Reset Flood) (Resource Loop) (Settings Flood)

This update for nodejs10 to version 10.16.3 fixes the following issues : Security issues fixed : CVE-2019-9511: Fixed HTTP/2 implementations that are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service bsc1146091. CVE-2019-9512...

SUSE SLES12 Security Update : libvirt (SUSE-SU-2019:2227-1)

This update for libvirt fixes the following issues : Security issues fixed : CVE-2019-10161: Fixed virDomainSaveImageGetXMLDesc API which could accept a path parameter pointing anywhere on the system and potentially leading to execution of a malicious file with root privileges by libvirtd...

SUSE SLES12 Security Update : php7 (SUSE-SU-2019:2243-1)

This update for php7 fixes the following issues : Security issues fixed : CVE-2019-11038: Fixed a information disclosure in gdImageCreateFromXbm bsc1140118. CVE-2019-11041: Fixed heap buffer over-read in exifscanthumbnail bsc1146360. CVE-2019-11042: Fixed heap buffer over-read in...

SUSE SLES12 Security Update : kernel (SUSE-SU-2019:2230-1)

This update for the Linux Kernel 4.4.121-92117 fixes one issue. The following security issue was fixed : CVE-2018-5390: Fixed expensive calls to tcpcollapseofoqueue and tcppruneofoqueue for every incoming packet which could have led to a denial of service bsc1102682. Note that Tenable Network...

SUSE SLES12 Security Update : qemu (SUSE-SU-2019:2221-1)

This update for qemu fixes the following issues : Security issues fixed : CVE-2019-14378: Security fix for heap overflow in ipreass on big packet input bsc1143794. CVE-2019-12155: Security fix for NULL pointer dereference while releasing spice resources bsc1135902. CVE-2019-13164: Security fix fo...

SUSE SLES12 Security Update : postgresql96 (SUSE-SU-2019:2159-1)

This update for postgresql96 fixes the following issues : Security issue fixed : CVE-2019-10208: Fixed arbitrary SQL execution via suitable SECURITY DEFINER function under the identity of the function owner bsc1145092. Note that Tenable Network Security has extracted the preceding description blo...

SUSE SLED12 / SLES12 Security Update : libssh2_org (SUSE-SU-2019:1606-2)

This update for libssh2org fixes the following issues : Fix the previous fix for CVE-2019-3860 bsc1136570, bsc1128481 Out-of-bounds reads with specially crafted SFTP packets Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE SLES12 Security Update : python3 (SUSE-SU-2019:2053-2)

This update for python3 fixes the following issues : CVE-2019-10160: Fixed a regression in urlparse and urlsplit introduced by the fix for CVE-2019-9636 bsc1138459. CVE-2018-14647: Fixed a denial of service vulnerability caused by a crafted XML document bsc1109847. CVE-2018-1000802: Fixed a comma...

SUSE SLED12 / SLES12 Security Update : openjpeg2 (SUSE-SU-2019:2152-1)

This update for openjpeg2 fixes the following issues : Security issue fixed : CVE-2016-1923: Fixed anout of bounds read int opjj2kupdateimagedata and opjtgtreset bsc962522. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE SLES12 Security Update : nodejs6 (SUSE-SU-2019:2181-1)

This update for nodejs6 fixes the following issues : CVE-2019-13173: Fixed a potential file overwrite via hardlink in fstream.DirWriter bsc1140290. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLES12 Security Update : glibc (SUSE-SU-2019:1958-2)

This update for glibc fixes the following issues : Security issues fixed : CVE-2019-9169: Fixed a heap-based buffer over-read via an attempted case-insensitive regular-expression match bsc1127308. CVE-2009-5155: Fixed a denial of service in parseregexp bsc1127223. Non-security issues fixed: Added...

SUSE SLES12 Security Update : glib2 (SUSE-SU-2019:1830-2)

This update for glib2 fixes the following issues : Security issue fixed : CVE-2019-13012: Fixed improper restriction of file permissions when creating directories bsc1139959. Non-security issue fixed: Added explicit requires between libglib2 and libgio2 bsc1140122. Note that Tenable Network...

SUSE SLED12 / SLES12 Security Update : mariadb-100 (SUSE-SU-2019:2118-1)

This update for mariadb-100 to version 10.0.38 fixes the following issues : CVE-2019-2537: Fixed a denial of service vulnerability which can lead to MySQL compromise bsc1136037. CVE-2019-2529: Fixed a denial of service vulnerability by an privileged attacker via a protocol compromise bsc1136037...

SUSE SLED12 / SLES12 Security Update : openexr (SUSE-SU-2019:2014-1)

This update for openexr fixes the following issues : CVE-2017-14988: Fixed a denial of service in Header::readfrom bsc1061305. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean an...

SUSE SLED12 / SLES12 Security Update : evince (SUSE-SU-2019:2080-1)

This update for evince fixes the following issues : Security issues fixed : CVE-2019-11459: Fixed an improper error handling in which could have led to use of uninitialized use of memory bsc1133037. CVE-2019-1010006: Fixed a buffer overflow in backend/tiff/tiff-document.c bsc1141619. Note that...

SUSE SLES12 Security Update : mariadb (SUSE-SU-2019:2048-1)

This update for mariadb fixes the following issues : Update to MariaDB 10.0.38 GA bsc1136037. Security issues fixed : CVE-2019-2537: Denial of service via multiple protocols bsc1136037 CVE-2019-2529: Denial of service via multiple protocols bsc1136037 CVE-2018-3282: Server Storage Engines...

SUSE SLES12 Security Update : python-Twisted (SUSE-SU-2019:2066-1)

This update for python-Twisted fixes the following issue : Security issue fixed : CVE-2019-12387: Fixed an improper sanitization of URIs or HTTP which could have allowed attackers to perfrom CRLF attacks bsc1137825. Note that Tenable Network Security has extracted the preceding description block...

SUSE SLES12 Security Update : nodejs10 (SUSE-SU-2019:2099-1)

This update for nodejs10 to version 10.16.0 fixes the following issues : Security issue fixed : CVE-2019-13173: Fixed a potential file overwrite via hardlink in fstream.DirWriter bsc1140290. Non-security issue fixed: Update to new upstream LTS version 10.16.0, including npm version 6.9.0 and...