SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2020:2577-1)

The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. The following security bug was fixed : CVE-2020-14386: Fixed a potential local privilege escalation via memory corruption bsc1176069. Note that Tenable Network Security has extracted the preceding...

SUSE SLED15 / SLES15 Security Update : libjpeg-turbo (SUSE-SU-2020:2569-1)

This update for libjpeg-turbo fixes the following issues : CVE-2020-13790: Fixed a heap-based buffer over-read via a malformed PPM input file bsc1172491. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempte...

SUSE SLED15 / SLES15 Security Update : go1.14 (SUSE-SU-2020:2562-1)

This update for go1.14 fixes the following issues : go1.14 was updated to version 1.14.7 CVE-2020-16845: dUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs bsc1174977. go1.14.6 released 2020-07-16 includes fixes to the go command, the compiler, the linker, vet, and...

SUSE SLES15 Security Update : kernel (SUSE-SU-2020:2487-1)

The SUSE Linux Enterprise 15 SP1 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-10135: Legacy pairing and secure-connections pairing authentication in Bluetooth BR/EDR Core Specification v5.2 and earlier may have allowed an...

SUSE SLED15 / SLES15 Security Update : php7 (SUSE-SU-2020:2456-1)

This update for php7 fixes the following issues : CVE-2020-7068: Use of freed hash key in the pharparsezipfile function bsc1175223. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically cle...

SUSE SLES15 Security Update : squid (SUSE-SU-2020:2442-1)

This update for squid fixes the following issues : squid was updated to version 4.13 : CVE-2020-24606: Fix livelocking in peerDigestHandleReply bsc1175671. CVE-2020-15811: Improve Transfer-Encoding handling bsc1175665. CVE-2020-15810: Enforce token characters for field-name bsc1175664. Note that...

SUSE SLED15 / SLES15 Security Update : curl (SUSE-SU-2020:2445-1)

This update for curl fixes the following issues : An application that performs multiple requests with libcurl's multi API and sets the 'CURLOPTCONNECTONLY' option, might in rare circumstances experience that when subsequently using the setup connect-only transfer, libcurl will pick and use the...

SUSE SLES15 Security Update : xorg-x11-server (SUSE-SU-2020:2398-1)

This update for xorg-x11-server fixes the following issues : CVE-2020-14361: Fix XkbSelectEvents integer underflow bsc1174910 ZDI-CAN-11573. CVE-2020-14362: Fix XRecordRegisterClients Integer underflow bsc1174913 ZDI-CAN-11574. Note that Tenable Network Security has extracted the preceding...

SUSE SLED15 / SLES15 Security Update : curl (SUSE-SU-2020:2446-1)

This update for curl fixes the following issues : An application that performs multiple requests with libcurl's multi API and sets the 'CURLOPTCONNECTONLY' option, might in rare circumstances experience that when subsequently using the setup connect-only transfer, libcurl will pick and use the...

SUSE SLES15 Security Update : java-1_8_0-ibm (SUSE-SU-2020:2453-1)

This update for java-180-ibm fixes the following issues : Update to Java 8.0 Service Refresh 6 Fix Pack 15 bsc1175259, bsc1174157 CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581 CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583 CVE-2019-17639 - Class Libraries : -...

SUSE SLED15 / SLES15 Security Update : xorg-x11-server (SUSE-SU-2020:2481-1)

This update for xorg-x11-server fixes the following issues : CVE-2020-14361: Fix XkbSelectEvents integer underflow bsc1174910 ZDI-CAN-11573. CVE-2020-14362: Fix XRecordRegisterClients Integer underflow bsc1174913 ZDI-CAN-11574. Note that Tenable Network Security has extracted the preceding...

SUSE SLED15 / SLES15 Security Update : php7 (SUSE-SU-2020:2455-1)

This update for php7 fixes the following issues : CVE-2020-7068: Use of freed hash key in the pharparsezipfile function bsc1175223. Do not install outdated README.SUSE bsc1174010. Added tmpfiles.d for php-fpm to provide a base for a socket bsc1173786. Note that Tenable Network Security has...

SUSE SLED15 / SLES15 Security Update : xorg-x11-server (SUSE-SU-2020:2452-1)

This update for xorg-x11-server fixes the following issues : CVE-2020-14361: Fix XkbSelectEvents integer underflow bsc1174910 ZDI-CAN-11573. CVE-2020-14362: Fix XRecordRegisterClients Integer underflow bsc1174913 ZDI-CAN-11574. Note that Tenable Network Security has extracted the preceding...

SUSE SLED15 / SLES15 Security Update : libX11 (SUSE-SU-2020:2474-1)

This update for libX11 fixes the following issues : CVE-2020-14363: Fix an integer overflow in initom bsc1175239. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it a...

SUSE SLED15 / SLES15 Security Update : postgresql10 (SUSE-SU-2020:2355-1)

This update for postgresql10 fixes the following issues : update to 10.14 : - CVE-2020-14349, bsc1175193: Set a secure searchpath in logical replication walsenders and apply workers - CVE-2020-14350, bsc1175194: Make contrib modules' installation scripts more secure. -...

SUSE SLED15 / SLES15 Security Update : libqt5-qtbase (SUSE-SU-2020:2357-1)

This update for libqt5-qtbase fixes the following issues : Fixed a possible crash in certificate parsing. Fixed a DoS in QSslSocket bsc1172726, CVE-2020-13962. Added support for PostgreSQL 12 bsc1173758. Note that Tenable Network Security has extracted the preceding description block directly fro...

SUSE SLED15 / SLES15 Security Update : graphviz (SUSE-SU-2020:2346-1)

This update for graphviz fixes the following issues : CVE-2018-10196: Fixed a null dereference in rebuildvlis bsc1093447. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and...

SUSE SLES15 Security Update : apache2 (SUSE-SU-2020:2344-1)

This update for apache2 fixes the following issues : CVE-2020-9490: Fixed a crash caused by a specially crafted value for the 'Cache-Digest' header in a HTTP/2 request bsc1175071. CVE-2020-11984: Fixed an information disclosure bug in modproxyuwsgi bsc1175074. CVE-2020-11993: When trace/debug was...

SUSE SLED15 / SLES15 Security Update : grub2 (SUSE-SU-2020:2307-1)

This update for grub2 fixes the following issues : CVE-2020-15705: Fail kernel validation without shim protocol bsc1174421. Add fibre channel device's ofpath support to grub-ofpathname and search hint to speed up root device discovery bsc1172745. Note that Tenable Network Security has extracted t...

SUSE SLED15 / SLES15 Security Update : xorg-x11-server (SUSE-SU-2020:2241-1)

This update for xorg-x11-server fixes the following issues : CVE-2020-14347: Leak of uninitialized heap memory from the X server to clients on pixmap allocation bsc1174633, ZDI-CAN-11426. CVE-2020-14346: XIChangeHierarchy Integer Underflow Privilege Escalation Vulnerability bsc1174638,...