SUSE SLES12 Security Update : ntp (SUSE-SU-2019:0775-1)

This update for ntp fixes the following issues : Security issue fixed : CVE-2019-8936: Fixed a NULL pointer exception which could allow an authenticated attcker to cause segmentation fault to ntpd bsc1128525. Other issues addressed: Fixed several bugs in the BANCOMM reclock driver. Fixed...

SUSE SLED12 / SLES12 Security Update : w3m (SUSE-SU-2019:0776-1)

This update for w3m fixes several issues. These security issues were fixed : CVE-2018-6196: Prevent infinite recursion in HTMLlineproc0 caused by the feedtableblocktag function which did not prevent a negative indent value bsc1077559 CVE-2018-6197: Prevent NULL pointer dereference in...

SUSE SLES12 Security Update : ovmf (SUSE-SU-2019:0766-1)

This update for ovmf fixes the following issues : Security issues fixed : CVE-2019-0160: Fixed multiple buffer overflows in UDF-related codes in MdeModulePkg\Universal\Disk\PartitionDxe\Udf.c and MdeModulePkg\Universal\Disk\UdfDxe bsc1130267. CVE-2018-12181: Fixed a stack-based buffer overflow in...

SUSE SLES12 Security Update : kernel (SUSE-SU-2019:0767-1)

The SUSE Linux Enterprise Server 12 SP4 Azure kernel was updated to fix various issues. The following security bugs were fixed : CVE-2019-2024: A use-after-free when disconnecting a source was fixed which could lead to crashes. bnc1129179. CVE-2019-9213: expanddownwards in mm/mmap.c lacked a chec...

SUSE SLED12 / SLES12 Security Update : gd (SUSE-SU-2019:0747-1)

This update for gd fixes the following issues : Security issues fixed : CVE-2019-6977: Fixed a heap-based buffer overflow the GD Graphics Library used in the imagecolormatch function bsc1123361. CVE-2019-6978: Fixed a double free in the gdImagePtr functions bsc1123522. Note that Tenable Network...

SUSE SLES12 Security Update : ovmf (SUSE-SU-2019:0738-1)

This update for ovmf fixes the following issue : Security issue fixed : CVE-2018-12181: Fixed a stack-based buffer overflow in the HII database when a corrupted Bitmap was used bsc1128503. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE...

SUSE SLED12 / SLES12 Security Update : ucode-intel (SUSE-SU-2019:0736-1)

This update for ucode-intel fixes the following issues : Updated to the 20190312 bundle release bsc1129231 New Platforms : AML-Y22 H0 6-8e-9/10 0000009e Core Gen8 Mobile WHL-U W0 6-8e-b/d0 000000a4 Core Gen8 Mobile WHL-U V0 6-8e-d/94 000000b2 Core Gen8 Mobile CFL-S P0 6-9e-c/22 000000a2 Core Gen9...

SUSE SLES12 Security Update : kernel (SUSE-SU-2019:0722-1)

This update for the Linux Kernel 4.4.121-9295 fixes several issues. The following security issues were fixed : CVE-2019-9213: Expanddownwards in mm/mmap.c lacked a check for the mmap minimum address, which made it easier for attackers to exploit kernel NULL pointer dereferences on non-SMAP...

SUSE SLES12 Security Update : kernel (SUSE-SU-2019:0709-1)

This update for the Linux Kernel 4.4.121-9298 fixes several issues. The following security issues were fixed : CVE-2019-9213: Expanddownwards in mm/mmap.c lacked a check for the mmap minimum address, which made it easier for attackers to exploit kernel NULL pointer dereferences on non-SMAP...

SUSE SLES12 Security Update : kernel (SUSE-SU-2019:0683-1)

This update for the Linux Kernel 4.4.121-9273 fixes several issues. The following security issues were fixed : CVE-2019-9213: Expanddownwards in mm/mmap.c lacked a check for the mmap minimum address, which made it easier for attackers to exploit kernel NULL pointer dereferences on non-SMAP...

SUSE SLED12 / SLES12 Security Update : ghostscript (SUSE-SU-2019:0719-1)

This update for ghostscript fixes the following issue : Security issue fixed : CVE-2019-3838: Fixed a vulnerability which made forceput operator in DefineResource to be still accessible which could allow access to file system outside of the constraints of -dSAFER bsc1129186. Note that Tenable...

SUSE SLED12 / SLES12 Security Update : wireshark (SUSE-SU-2019:0688-1)

This update for wireshark to version 2.4.13 fixes the following issues : Security issues fixed : CVE-2019-9214: Avoided a dereference of a null coversation which could make RPCAP dissector crash bsc1127367. CVE-2019-9209: Fixed a buffer overflow in time values which could make ASN.1 BER and relat...

SUSE SLED12 / SLES12 Security Update : libssh2_org (SUSE-SU-2019:0655-1)

This update for libssh2org fixes the following issues : Security issues fixed : CVE-2019-3861: Fixed Out-of-bounds reads with specially crafted SSH packets bsc1128490. CVE-2019-3862: Fixed Out-of-bounds memory comparison with specially crafted message channel request packet bsc1128492...

SUSE SLES12 Security Update : kernel (SUSE-SU-2019:0672-1)

This update for the Linux Kernel 3.12.74-6064104 fixes several issues. The following security issues were fixed : CVE-2019-9213: Expanddownwards in mm/mmap.c lacked a check for the mmap minimum address, which made it easier for attackers to exploit kernel NULL pointer dereferences on non-SMAP...

SUSE SLES12 Security Update : nodejs4 (SUSE-SU-2019:0658-1)

This update for nodejs4 fixes the following issues : Security issues fixed : CVE-2019-5739: Fixed a potentially attack vector which could lead to Denial of Service when HTTP connection are kept active bsc1127533. CVE-2019-5737: Fixed a potentially attack vector which could lead to Denial of Servi...

SUSE SLED12 / SLES12 Security Update : openwsman (SUSE-SU-2019:0656-1)

This update for openwsman fixes the following issues : Security issues fixed : CVE-2019-3816: Fixed a vulnerability in openwsmand deamon which could lead to arbitary file disclosure bsc1122623. CVE-2019-3833: Fixed a vulnerability in processconnection which could allow an attacker to trigger an...

SUSE SLES12 Security Update : nodejs10 (SUSE-SU-2019:0636-1)

This update for nodejs10 to version 10.1.2 fixes the following issue : Security issue fixed : CVE-2019-5737: Fixed a potentially attack vector which could lead to Denial of Service when HTTP connection are kept active bsc1127532. Note that Tenable Network Security has extracted the preceding...

SUSE SLES12 Security Update : kernel (SUSE-SU-2019:0645-1)

This update for the Linux Kernel 3.12.61-52125 fixes several issues. The following security issues were fixed : CVE-2019-9213: Expanddownwards in mm/mmap.c lacked a check for the mmap minimum address, which made it easier for attackers to exploit kernel NULL pointer dereferences on non-SMAP...

SUSE SLED12 / SLES12 Security Update : lftp (SUSE-SU-2019:0642-1)

This update for lftp fixes the following issues : Security issue fixed : CVE-2018-10916: Fixed an improper file name sanitization which could lead to loss of integrity of the local system bsc1103367. Other issue addressed: The SSH login handling code detects password prompts more reliably...

SUSE SLES12 Security Update : java-1_8_0-ibm (SUSE-SU-2019:0617-1)

This update for java-180-ibm to version 8.0.5.30 fixes the following issues : Security issues fixed : CVE-2019-2422: Fixed a memory disclosure in FileChannelImpl bsc1122293. CVE-2018-11212: Fixed an issue in allocsarray function in jmemmgr.c bsc1122299. CVE-2018-1890: Fixed a local privilege...