SUSE SLED15 / SLES15 Security Update : libqt5-qtbase (SUSE-SU-2020:2742-1)

This update for libqt5-qtbase fixes the following issues : CVE-2020-17507: Fixed a buffer overflow in XBM parser bsc1176315 Fixed various issues discovered by fuzzing : Made handling of XDGRUNTIMEDIR more secure bsc1172515 : Note that Tenable Network Security has extracted the preceding descripti...

SUSE SLES15 Security Update : kernel (SUSE-SU-2020:2631-1)

The SUSE Linux Enterprise 15 SP1 realtime kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-14314: Fixed a potential negative array index in dosplit bsc1173798. CVE-2020-14356: Fixed a NULL pointer dereference in cgroupv2 subsystem whic...

SUSE SLED15 / SLES15 Security Update : gnome-settings-daemon, gnome-shell (SUSE-SU-2020:3132-1)

This update for gnome-settings-daemon, gnome-shell fixes the following issues : gnome-settings-daemon : Add support for recent UCM related changes in ALSA and PulseAudio. jscSLE-16518 Don't warn when a default source or sink is missing and the PulseAudio daemon is restarting. jscSLE-16518 Don't...

SUSE SLED15 / SLES15 Security Update : perl-DBI (SUSE-SU-2020:2646-1)

This update for perl-DBI fixes the following issues : Security issues fixed : CVE-2020-14392: Memory corruption in XS functions when Perl stack is reallocated bsc1176412. CVE-2020-14393: Fixed a buffer overflow on an overlong DBD class name bsc1176409. Note that Tenable Network Security has...

SUSE SLED15 / SLES15 Security Update : openldap2 (SUSE-SU-2020:3313-1)

This update for openldap2 fixes the following issues : CVE-2020-25692: Fixed an unauthenticated remote denial of service due to incorrect validation of modrdn equality rules bsc1178387. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE securit...

SUSE SLED15 / SLES15 Security Update : perl-DBI (SUSE-SU-2020:2827-1)

This update for perl-DBI fixes the following issues : CVE-2019-20919: Fixed a NULL profile dereference in dbiprofile bsc1176764. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean...

SUSE SLED15 / SLES15 Security Update : bind (SUSE-SU-2020:2914-1)

This update for bind fixes the following issues : BIND was upgraded to version 9.16.6 : Note : bind is now more strict in regards to DNSSEC. If queries are not working, check for DNSSEC issues. For instance, if bind is used in a namserver forwarder chain, the forwarding DNS servers must support...

SUSE SLED15 / SLES15 Security Update : MozillaFirefox (SUSE-SU-2020:3022-1)

This update for MozillaFirefox fixes the following issues : Firefox Extended Support Release 78.4.0 ESR - Fixed: Various stability, functionality, and security fixes MFSA 2020-46 bsc1177872, bsc1176756 - CVE-2020-15969 Use-after-free in usersctp - CVE-2020-15683 Memory safety bugs fixed in Firefo...

SUSE SLED15 / SLES15 Security Update : xen (SUSE-SU-2020:2791-1)

This update for xen fixes the following issues : CVE-2020-25602: Fixed an issue where there was a crash when handling guest access to MSRMISCENABLE was thrown bsc1176339,XSA-333 CVE-2020-25598: Added a missing unlock in XENMEMacquireresource error path bsc1176341,XSA-334 CVE-2020-25604: Fixed a...

SUSE SLED15 / SLES15 Security Update : c-ares (SUSE-SU-2020:3478-1)

This update for c-ares fixes the following issues : Version update to 1.17.0 - CVE-2020-8277: Fixed a Denial of Service through DNS request bsc1178882 - For further details see https://c-ares.haxx.se/changelog.html Note that Tenable Network Security has extracted the preceding description block...

SUSE SLED15 / SLES15 Security Update : wireshark (SUSE-SU-2020:3376-1)

This update for wireshark fixes the following issues : wireshark was updated to 3.2.8 : - CVE-2020-26575: Fixed an issue where FBZERO dissector was entering in infinite loop bsc1177406 - CVE-2020-28030: Fixed an issue where GQUIC dissector was crashing bsc1178291 - Infinite memory allocation whil...

SUSE SLED15 / SLES15 Security Update : openldap2 (SUSE-SU-2020:2712-1)

This update for openldap2 fixes the following issues : CVE-2020-8027: openldapupdatemodulespath.sh starts daemons unconditionally and uses fixed paths in /tmp bsc1175568. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE SLED15 / SLES15 Security Update : tigervnc (SUSE-SU-2020:2880-1)

This update for tigervnc fixes the following issues : CVE-2020-26117: Server certificates were stored as certiticate authorities, allowing malicious owners of these certificates to impersonate any server after a client had added an exception bsc1176733 Note that Tenable Network Security has...

SUSE SLES15 Security Update : podman (SUSE-SU-2020:3378-1)

This update for podman fixes the following issues : Security issue fixed : This release resolves CVE-2020-14370, in which environment variables could be leaked between containers created using the Varlink API bsc1176804. Non-security issues fixed : add dependency to timezone package or podman fai...

SUSE SLES15 Security Update : libqt5-qtbase (SUSE-SU-2020:2748-1)

This update for libqt5-qtbase fixes the following issues : CVE-2020-17507: Fixed a buffer overflow in XBM parser bsc1176315 Made handling of XDGRUNTIMEDIR more secure bsc1172515 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

SUSE SLES15 Security Update : nodejs8 (SUSE-SU-2020:2800-1)

This update for nodejs8 fixes the following issues : CVE-2020-8174: Fixed multiple memory corruption in napigetvaluestring bsc1172443. CVE-2020-11080: Fixed a potential denial of service when receiving unreasonably large HTTP/2 SETTINGS frames bsc1172442. CVE-2020-7598: Fixed an issue which could...

SUSE SLED15 / SLES15 Security Update : zeromq (SUSE-SU-2020:3264-1)

This update for zeromq fixes the following issues : CVE-2020-15166: Fixed the possibility of unauthenticated clients causing a denial-of-service bsc1176116. Fixed a heap overflow when receiving malformed ZMTP v1 packets bsc1176256 Fixed a memory leak in client induced by malicious servers without...

SUSE SLED15 / SLES15 Security Update : gdm (SUSE-SU-2020:3333-1)

This update for gdm fixes the following issues : Exit with failure if loading existing users fails bsc1178150 CVE-2020-16125. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and...

SUSE SLED15 / SLES15 Security Update : gnutls (SUSE-SU-2020:2864-1)

This update for gnutls fixes the following issues : Fix heap buffer overflow in handshake with norenegotiation alert sent CVE-2020-24659 bsc1176181 FIPS: Implement ECDH requirements from SP800-56Arev3 bsc1176086 FIPS: Use 2048 bit prime in DH selftest bsc1176086 FIPS: Add TLS KDF selftest...

SUSE SLED15 / SLES15 Security Update : wireshark (SUSE-SU-2020:3166-1)

This update for wireshark fixes the following issues : Update to wireshark 3.2.7 : - CVE-2020-25863: MIME Multipart dissector crash bsc1176908 - CVE-2020-25862: TCP dissector crash bsc1176909 - CVE-2020-25866: BLIP dissector crash bsc1176910 - CVE-2020-17498: Kafka dissector crash bsc1175204 Note...