SUSE SLED15 / SLES15 Security Update : permissions (SUSE-SU-2020:2830-1)

This update for permissions fixes the following issues : whitelist WMP bsc1161335, bsc1176625 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible...

SUSE SLED15 / SLES15 Security Update : postgresql12 (SUSE-SU-2020:3463-1)

This update for postgresql12 fixes the following issues : Upgrade to version 12.5 : - CVE-2020-25695, bsc1178666: Block DECLARE CURSOR ... WITH HOLD and firing of deferred triggers within index expressions and materialized view queries. - CVE-2020-25694, bsc1178667: a Fix usage of complex...

SUSE SLED15 / SLES15 Security Update : dash (SUSE-SU-2020:3480-1)

This update for dash fixes the following issues : Fixed an issue where code was executed even if noexec '-n' was specified bsc1178978. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically...

SUSE SLED15 / SLES15 Security Update : spice-vdagent (SUSE-SU-2020:3268-1)

This update for spice-vdagent fixes the following issues : Security issues fixed : CVE-2020-25650: Fixed a memory DoS via arbitrary entries in activexfers hash table bsc1177780. CVE-2020-25651: Fixed a possible file transfer DoS and information leak via activexfers hash map bsc1177781...

SUSE SLES15 Security Update : java-1_8_0-openjdk (SUSE-SU-2020:3591-1)

This update for java-180-openjdk fixes the following issues : Update to version jdk8u275 icedtea 3.17.1 - JDK-8214440, bsc1179441: Fix StartTLS functionality that was broken in openjdk272. bsc1179441 - JDK-8223940: Private key not supported by chosen signature algorithm - JDK-8236512: PKCS11...

SUSE SLES15 Security Update : openldap2 (SUSE-SU-2020:2712-2)

This update for openldap2 fixes the following issues : CVE-2020-8027: openldapupdatemodulespath.sh starts daemons unconditionally and uses fixed paths in /tmp bsc1175568. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE SLED15 / SLES15 Security Update : qemu (SUSE-SU-2020:2877-1)

This update for qemu fixes the following issues : CVE-2020-14364: Fixed an OOB access while processing USB packets bsc1175441,bsc1176494. CVE-2020-16092: Fixed a denial of service in packet processing of various emulated NICs bsc1174641. CVE-2020-15863: Fixed a buffer overflow in the XGMAC device...

SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2020:3164-1)

This update for ImageMagick fixes the following issues : CVE-2020-27560: Fixed potential denial of service in OptimizeLayerFrames function in MagickCore/layer.c bsc1178067. Fixed greyish image produced by incorrect colorspace bsc1106272. Note that Tenable Network Security has extracted the...

SUSE SLED15 / SLES15 Security Update : krb5 (SUSE-SU-2020:3377-1)

This update for krb5 fixes the following security issue : CVE-2020-28196: Fixed an unbounded recursion via an ASN.1-encoded Kerberos message bsc1178512. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted...

SUSE SLES15 Security Update : krb5 (SUSE-SU-2020:3375-1)

This update for krb5 fixes the following security issue : CVE-2020-28196: Fixed an unbounded recursion via an ASN.1-encoded Kerberos message bsc1178512. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted...

SUSE SLES15 Security Update : xorg-x11-server (SUSE-SU-2020:3589-1)

This update for xorg-x11-server fixes the following issues : CVE-2020-25712: Fixed a heap-based buffer overflow which could have led to privilege escalation bsc1177596. CVE-2020-14360: Fixed an out of bounds memory accesses on too short request which could lead to denial of service bsc1174908. No...

SUSE SLES15 Security Update : slurm (SUSE-SU-2020:3506-1)

This update for slurm fixes the following issues : Updated to 20.02.6 : - CVE-2020-27745: PMIx - fix potential buffer overflows from use of unpackmem bsc1178890. - CVE-2020-27746: X11 forwarding - fix potential leak of the magic cookie when sent as an argument to the xauth command bsc1178891. -...

SUSE SLED15 / SLES15 Security Update : mariadb (SUSE-SU-2020:3500-1)

This update for mariadb and mariadb-connector-c fixes the following issues : Update mariadb to 10.2.36 GA bsc1177472, bsc1178428 fixing for the following security vulnerabilities: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776, CVE-2020-14789 CVE-2020-15180 Update mariadb-connector-c to 3.1.11...

SUSE SLED15 / SLES15 Security Update : perl-DBI (SUSE-SU-2020:2645-1)

This update for perl-DBI fixes the following issues : Security issues fixed : CVE-2020-14392: Memory corruption in XS functions when Perl stack is reallocated bsc1176412. CVE-2020-14393: Fixed a buffer overflow on an overlong DBD class name bsc1176409. Note that Tenable Network Security has...

SUSE SLES15 Security Update : conmon, fuse-overlayfs, libcontainers-common, podman (SUSE-SU-2020:2731-1)

This update for conmon, fuse-overlayfs, libcontainers-common, podman fixes the following issues : podman was updated to v2.0.6 bsc1175821 install missing systemd units for the new Rest API bsc1175957 and a few man-pages that where missing before Drop varlink API related bits in favor of the new A...

SUSE SLED15 / SLES15 Security Update : postgresql10 (SUSE-SU-2020:3476-1)

This update for postgresql10 fixes the following issues : Upgrade to version 10.15 : - CVE-2020-25695, bsc1178666: Block DECLARE CURSOR ... WITH HOLD and firing of deferred triggers within index expressions and materialized view queries. - CVE-2020-25694, bsc1178667: a Fix usage of complex...

SUSE SLED15 / SLES15 Security Update : MozillaFirefox (SUSE-SU-2020:3311-1)

This update for MozillaFirefox fixes the following issues : Firefox Extended Support Release 78.4.1 ESR - Fixed: Security fix MFSA 2020-49 bsc1178588 - CVE-2020-26950 bmo1675905 Write side effects in MCallGetProperty opcode not accounted for Note that Tenable Network Security has extracted the...

SUSE SLES15 Security Update : kernel (SUSE-SU-2020:3522-1)

The SUSE Linux Enterprise 15 SP2 realtime kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-25705: A flaw in the way reply ICMP packets are limited in was found that allowed to quickly scan open UDP ports. This flaw allowed an off-path...

SUSE SLES15 Security Update : Salt (SUSE-SU-2020:3244-1)

This update fixes the following issues : salt : Avoid regression on 'salt-master': set passphrase for salt-ssh keys to empty string bsc1178485 Properly validate eauth credentials and tokens on SSH calls made by Salt API bsc1178319, bsc1178362, bsc1178361, CVE-2020-25592, CVE-2020-17490,...

SUSE SLED15 / SLES15 Security Update : LibVNCServer (SUSE-SU-2020:3515-1)

This update for LibVNCServer fixes the following issues : CVE-2020-25708 bsc1178682, libvncserver/rfbserver.c has a divide by zero which could result in DoS Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...