SUSE SLES15 Security Update : xorg-x11-server (SUSE-SU-2020:2326-1)

This update for xorg-x11-server fixes the following issues : CVE-2020-14347: Leak of uninitialized heap memory from the X server to clients on pixmap allocation bsc1174633, ZDI-CAN-11426. CVE-2020-14346: XIChangeHierarchy Integer Underflow Privilege Escalation Vulnerability bsc1174638,...

SUSE SLED15 / SLES15 Security Update : xorg-x11-server (SUSE-SU-2020:2240-1)

This update for xorg-x11-server fixes the following issues : CVE-2020-14347: Leak of uninitialized heap memory from the X server to clients on pixmap allocation bsc1174633, ZDI-CAN-11426. CVE-2020-14346: XIChangeHierarchy Integer Underflow Privilege Escalation Vulnerability bsc1174638,...

SUSE SLES15 Security Update : grub2 (SUSE-SU-2020:2303-1)

This update for grub2 fixes the following issues : CVE-2020-15705: Fail kernel validation without shim protocol bsc1174421. Add fibre channel device's ofpath support to grub-ofpathname and search hint to speed up root device discovery bsc1172745. Note that Tenable Network Security has extracted t...

SUSE SLED15 / SLES15 Security Update : grub2 (SUSE-SU-2020:2306-1)

This update for grub2 fixes the following issue : CVE-2020-15705: Fail kernel validation without shim protocol bsc1174421. Add fibre channel device's ofpath support to grub-ofpathname and search hint to speed up root device discovery bsc1172745. Note that Tenable Network Security has extracted th...

SUSE SLED15 / SLES15 Security Update : gettext-runtime (SUSE-SU-2020:2296-1)

This update for gettext-runtime fixes the following issues : Fix boo941629-unnessary-rpath-on-standard-path.patch bsc941629 Added msgfmt-double-free.patch to fix a double free error CVE-2018-18751 bsc1113719 Add patch msgfmt-reset-msg-length-after-remove.patch which does reset the length of messa...

SUSE SLED15 / SLES15 Security Update : python3 (SUSE-SU-2020:2277-1)

This update for python3 fixes the following issues : bsc1174091, CVE-2019-20907: avoiding possible infinite loop in specifically crafted tarball. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLED15 / SLES15 Security Update : python (SUSE-SU-2020:2276-1)

This update for python fixes the following issues : CVE-2019-20907: Avoid a possible infinite loop caused by specifically crafted tarballs bsc1174091. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted t...

SUSE SLED15 / SLES15 Security Update : libvirt (SUSE-SU-2020:2269-1)

This update for libvirt fixes the following issues : CVE-2020-14339: Don't leak /dev/mapper/control into QEMU. Use ioctl's to obtain the dependency tree of disks and drop use of libdevmapper. bsc1161883, bsc1174458 Note that Tenable Network Security has extracted the preceding description block...

SUSE SLES15 Security Update : dovecot23 (SUSE-SU-2020:2267-1)

This update for dovecot23 fixes the following issues : CVE-2020-12673: improper implementation of NTLM does not check message buffer size bsc1174922. CVE-2020-12674: improper implementation of RPA mechanism bsc1174923. Note that Tenable Network Security has extracted the preceding description blo...

SUSE SLED15 / SLES15 Security Update : fwupd (SUSE-SU-2020:2258-1)

This update of fwupd fixes the following issue : rebuild with new UEFI signing key bsc1174543 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible...

SUSE SLED15 / SLES15 Security Update : postgresql12 (SUSE-SU-2020:2265-1)

This update for postgresql12 fixes the following issues : update to 12.4 : - CVE-2020-14349, bsc1175193: Set a secure searchpath in logical replication walsenders and apply workers - CVE-2020-14350, bsc1175194: Make contrib modules' installation scripts more secure. -...

SUSE SLES15 Security Update : dovecot23 (SUSE-SU-2020:2266-1)

This update for dovecot23 fixes the following issues : CVE-2020-12673: improper implementation of NTLM does not check message buffer size bsc1174922. CVE-2020-12674: improper implementation of RPA mechanism bsc1174923. Note that Tenable Network Security has extracted the preceding description blo...

SUSE SLES15 Security Update : postgresql10 (SUSE-SU-2020:2264-1)

This update for postgresql10 fixes the following issues : update to 10.14 : - CVE-2020-14349, bsc1175193: Set a secure searchpath in logical replication walsenders and apply workers - CVE-2020-14350, bsc1175194: Make contrib modules' installation scripts more secure. -...

SUSE SLED15 / SLES15 Security Update : postgresql12 (SUSE-SU-2020:2271-1)

This update for postgresql12 fixes the following issues : update to 12.4 : - CVE-2020-14349, bsc1175193: Set a secure searchpath in logical replication walsenders and apply workers - CVE-2020-14350, bsc1175194: Make contrib modules' installation scripts more secure. -...

SUSE SLED15 / SLES15 Security Update : libvirt (SUSE-SU-2020:2237-1)

This update for libvirt fixes the following issues : CVE-2020-14339: Don't leak /dev/mapper/control into QEMU. Use ioctl's to obtain the dependency tree of disks and drop use of libdevmapper. - bsc1161883, bsc1174458 qemu: Setup emulator thread and cpuset.mems before exec - bsc1171946 libxl:...

SUSE SLED15 / SLES15 Security Update : webkit2gtk3 (SUSE-SU-2020:2199-1)

This update for webkit2gtk3 fixes the following issues : Update to version 2.28.4 bsc1174662 : + Fix several crashes and rendering issues. + Security fixes: CVE-2020-9862, CVE-2020-9893, CVE-2020-9894, CVE-2020-9895, CVE-2020-9915, CVE-2020-9925. Note that Tenable Network Security has extracted t...

SUSE SLED15 / SLES15 Security Update : libX11 (SUSE-SU-2020:2197-1)

This update for libX11 fixes the following issues : Fixed XIM client heap overflows CVE-2020-14344, bsc1174628. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as...

SUSE SLED15 / SLES15 Security Update : webkit2gtk3 (SUSE-SU-2020:2198-1)

This update for webkit2gtk3 fixes the following issues : Update to version 2.28.4 bsc1174662 : + Fix several crashes and rendering issues. + Security fixes: CVE-2020-9862, CVE-2020-9893, CVE-2020-9894, CVE-2020-9895, CVE-2020-9915, CVE-2020-9925. Note that Tenable Network Security has extracted t...

SUSE SLED15 / SLES15 Security Update : wireshark (SUSE-SU-2020:2144-1)

This update for wireshark fixes the following issues : Wireshark to 3.2.5 : - CVE-2020-15466: GVCP dissector infinite loop bsc1173606 - CVE-2020-13164: NFS dissector crash bsc1171899 - CVE-2020-11647: The BACapp dissector could crash bsc1169063 Further features, bug fixes and updated protocol...

SUSE SLED15 / SLES15 Security Update : xen (SUSE-SU-2020:2160-1)

This update for xen fixes the following issues : bsc1174543 - secure boot related fixes bsc1172356 - Not able to hot-plug NIC via virt-manager, asks to attach on next reboot while it should be live attached Note that Tenable Network Security has extracted the preceding description block directly...