SUSE SLES12 Security Update : kernel (SUSE-SU-2019:0439-1)

The SUSE Linux Enterprise 12 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2018-19985: The function hsoprobe read ifnum from the USB device as an u8 and used it without a length check to index an array, resulting in an OOB memory rea...

SUSE SLES12 Security Update : python-numpy (SUSE-SU-2019:0448-1)

This update for python-numpy fixes the following issues : Security issue fixed : CVE-2019-6446: Set allowpickle to false by default to restrict loading untrusted content bsc1122208. With this update we decrease the possibility of allowing remote attackers to execute arbitrary code by misusing...

SUSE SLES12 Security Update : systemd (SUSE-SU-2019:0425-1)

This update for systemd fixes the following issues : Security vulnerability fixed : CVE-2019-6454: Fixed a crash of PID1 by sending specially crafted D-BUS message on the system bus by an unprivileged user bsc1125352 Note that Tenable Network Security has extracted the preceding description block...

SUSE SLED12 / SLES12 Security Update : python-numpy (SUSE-SU-2019:0419-1)

This update for python-numpy fixes the following issue : Security issue fixed : CVE-2019-6446: Set allowpickle to false by default to restrict loading untrusted content bsc1122208. With this update we decrease the possibility of allowing remote attackers to execute arbitrary code by misusing...

SUSE SLES12 Security Update : systemd (SUSE-SU-2019:0424-1)

This update for systemd fixes the following issues : Security vulnerability fixed : CVE-2019-6454: Fixed a crash of PID1 by sending specially crafted D-BUS message on the system bus by an unprivileged user bsc1125352 Note that Tenable Network Security has extracted the preceding description block...

SUSE SLES12 Security Update : nodejs6 (SUSE-SU-2019:0395-1)

This update for nodejs6 to version 6.16.0 fixes the following issues : Security issues fixed : CVE-2018-0734: Fixed a timing vulnerability in the DSA signature generation bsc1113652 CVE-2018-5407: Fixed a hyperthread port content side channel attack aka 'PortSmash' bsc1113534 CVE-2018-12120: Fixe...

SUSE SLES12 Security Update : util-linux (SUSE-SU-2019:0390-1)

This update for util-linux fixes the following issues : The update package also includes non-security fixes. See advisory for details. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically...

SUSE SLES12 Security Update : kernel (SUSE-SU-2019:0356-1)

This update for the Linux Kernel 3.12.74-6064104 fixes one issue. The following security issue was fixed : CVE-2018-16884: A flaw was found in the Linux kernel's NFS41+ subsystem. NFS41+ shares mounted in different network namespaces at the same time could make bcsvcprocess use wrong back-channel...

SUSE SLED12 / SLES12 Security Update : MozillaFirefox (SUSE-SU-2019:0336-1)

This update for MozillaFirefox fixes the following issues : Security issues fixed : - CVE-2018-18500: Fixed a use-after-free parsing HTML5 stream boo1122983. - CVE-2018-18501: Fixed multiple memory safety bugs boo1122983. - CVE-2018-18505: Fixed a privilege escalation through IPC channel messages...

SUSE SLED12 / SLES12 Security Update : curl (SUSE-SU-2019:0339-1)

This update for curl fixes the following issues : Security issues fixed : CVE-2019-3822: Fixed a NTLMv2 type-3 header stack-based buffer overflow bsc1123377. CVE-2019-3823: Fixed an out-of-bounds read in the SMTP end-of-response bsc1123378. CVE-2018-16890: Fixed an out-of-bounds buffer read in NT...

SUSE SLES12 Security Update : php7 (SUSE-SU-2019:0333-1)

This update for php7 fixes the following issues : Security issue fixed : CVE-2019-6977: Fixed a heap-based buffer overflow the GD Graphics Library used in the imagecolormatch function bsc1123354. CVE-2019-6978: Fixed a double free in the gdImagePtr functions bsc1123522. CVE-2018-19935: Fixed a...

SUSE SLES12 Security Update : kernel (SUSE-SU-2019:0326-1)

This update for the Linux Kernel 3.12.61-52128 fixes one issue. The following security issue was fixed : CVE-2018-16884: A flaw was found in the Linux kernel's NFS41+ subsystem. NFS41+ shares mounted in different network namespaces at the same time could make bcsvcprocess use wrong back-channel I...

SUSE SLES12 Security Update : LibVNCServer (SUSE-SU-2019:0313-1)

This update for LibVNCServer fixes the following issues : Security issues fixed : CVE-2018-20749: Fixed a heap out of bounds write vulnerability in rfbserver.c bsc1123828 CVE-2018-20750: Fixed a heap out of bounds write vulnerability in rfbserver.c bsc1123832 CVE-2018-20748: Fixed multiple heap...

SUSE SLED12 / SLES12 Security Update : libunwind (SUSE-SU-2019:0284-1)

This update for libunwind fixes the following issues : Security issues fixed : CVE-2015-3239: Fixed a off-by-one in the dwarftounwregnum function bsc936786 Non-security issues fixed: Fixed a dependency issue with libzmq5 bsc1122012 Fixed build on armv7 bsc976955 Note that Tenable Network Security...

SUSE SLED12 / SLES12 Security Update : curl (SUSE-SU-2019:0249-1)

This update for curl fixes the following issues : Security issues fixed : CVE-2019-3823: Fixed a heap out-of-bounds read in the code handling the end-of-response for SMTP bsc1123378. CVE-2019-3822: Fixed a stack-based buffer overflow in the function creating an outgoing NTLM type-3 message...

SUSE SLED12 / SLES12 Security Update : python3 (SUSE-SU-2019:0243-1)

This update for python3 fixes the following issues : Security issue fixed : CVE-2019-5010: Fixed a denial-of-service vulnerability in the X509 certificate parser bsc1122191 CVE-2018-20406: Fixed a integer overflow via a large LONGBINPUT bsc1120644 Note that Tenable Network Security has extracted...

SUSE SLES12 Security Update : spice (SUSE-SU-2019:0231-1)

This update for spice fixes the following issues : Security issue fixed : CVE-2019-3813: Fixed a out-of-bounds read in the memslotgetvirt function that could lead to denial-of-service or code-execution bsc1122706. Note that Tenable Network Security has extracted the preceding description block...

SUSE SLES12 Security Update : spice (SUSE-SU-2019:0229-1)

This update for spice fixes the following issues : Security issue fixed : CVE-2019-3813: Fixed a out-of-bounds read in the memslotgetvirt function that could lead to denial-of-service or code-execution bsc1122706. Note that Tenable Network Security has extracted the preceding description block...

SUSE SLES12 Security Update : spice (SUSE-SU-2019:0230-1)

This update for spice fixes the following issues : Security issue fixed : CVE-2019-3813: Fixed a out-of-bounds read in the memslotgetvirt function that could lead to denial-of-service or code-execution bsc1122706. Note that Tenable Network Security has extracted the preceding description block...

SUSE SLES12 Security Update : python (SUSE-SU-2019:0223-1) (httpoxy)

This update for python fixes the following issues : Security issues fixed : CVE-2016-0772: smtplib vulnerability opens startTLS stripping attack bsc984751 CVE-2016-5636: heap overflow when importing malformed zip files bsc985177 CVE-2016-5699: incorrect validation of HTTP headers allow header...