SUSE SLED15 / SLES15 Security Update : jasper (SUSE-SU-2020:1420-2)

This update for jasper fixes the following issues : CVE-2018-9154: Fixed a potential denial of service in jpcdecprocesssot bsc1092115. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically...

SUSE SLED15 / SLES15 Security Update : libxml2 (SUSE-SU-2020:1532-2)

This update for libxml2 fixes the following issues : CVE-2019-19956: Reverted the upstream fix for this memory leak because it introduced other, more severe vulnerabilities bsc1172021. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

SUSE SLED15 / SLES15 Security Update : mercurial (SUSE-SU-2020:1709-2)

This update for mercurial fixes the following issues : Security issue fixed : CVE-2019-3902: Fixed incorrect patch-checking with symlinks and subrepos bsc1133035. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

SUSE SLED15 / SLES15 Security Update : xrdp (SUSE-SU-2020:1933-1)

This update for xrdp fixes the following issues : Security fixes bsc1173580, CVE-2020-4044 : + Add patches : - xrdp-cve-2020-4044-fix-0.patch - xrdp-cve-2020-4044-fix-1.patch + Rebase SLE patch : - xrdp-fate318398-change-expired-password.patch Note that Tenable Network Security has extracted the...

SUSE SLES15 Security Update : slirp4netns (SUSE-SU-2020:1915-1)

This update for slirp4netns fixes the following issues : Update to 0.4.7 bsc1172380 - libslirp: update to v4.3.1 Fix CVE-2020-10756 - Fix configfromoptions to correctly enable ipv6 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

SUSE SLES15 Security Update : containerd, docker, docker-runc, golang-github-docker-libnetwork (SUSE-SU-2020:1657-2)

This update for containerd, docker, docker-runc, golang-github-docker-libnetwork fixes the following issues : Docker was updated to 19.03.11-ce runc was updated to version 1.0.0-rc10 containerd was updated to version 1.2.13 CVE-2020-13401: Fixed an issue where an attacker with CAPNETRAW capabilit...

SUSE SLED15 / SLES15 Security Update : openexr (SUSE-SU-2020:1931-1)

This update for openexr fixes the following issues : CVE-2020-15304: Fixed a NULL pointer dereference in TiledInputFile:TiledInputFile bsc1173466. CVE-2020-15305: Fixed a use-after-free in DeepScanLineInputFile:DeepScanLineInputFile bsc1173467. CVE-2020-15306: Fixed a heap buffer overflow in...

SUSE SLED15 / SLES15 Security Update : graphviz (SUSE-SU-2019:1267-3)

This update for graphviz fixes the following issues : Security issue fixed : CVE-2019-11023: Fixed a denial of service vulnerability, which was caused by a NULL pointer dereference in agroot bsc1132091. Note that Tenable Network Security has extracted the preceding description block directly from...

SUSE SLES15 Security Update : java-1_8_0-openjdk (SUSE-SU-2020:1569-2)

This update for java-180-openjdk to version jdk8u252 fixes the following issues : CVE-2020-2754: Forward references to Nashorn bsc1169511 CVE-2020-2755: Improve Nashorn matching bsc1169511 CVE-2020-2756: Better mapping of serial ENUMs bsc1169511 CVE-2020-2757: Less Blocking Array Queues bsc116951...

SUSE SLED15 / SLES15 Security Update : xen (SUSE-SU-2020:1902-1)

This update for xen fixes the following issues : CVE-2020-15563: Fixed inverted code paths in x86 dirty VRAM tracking bsc1173377. CVE-2020-15565: Fixed insufficient cache write-back under VT-d bsc1173378. CVE-2020-15566: Fixed incorrect error handling in event channel port allocation bsc1173376...

SUSE SLED15 / SLES15 Security Update : samba (SUSE-SU-2020:1913-1)

This update for samba fixes the following issues : CVE-2020-10745: Fixed an issue which parsing and packing of NBT and DNS packets containing dots could potentially have consumed excessive CPU bsc1173160. CVE-2020-14303: Fixed an endless loop when receiving at AD DC empty UDP packets bsc1173359...

SUSE SLED15 / SLES15 Security Update : MozillaFirefox (SUSE-SU-2020:1898-1)

This update for MozillaFirefox to version 78.0.1 ESR fixes the following issues : Security issues fixed : CVE-2020-12415: AppCache manifest poisoning due to url encoded character processing bsc1173576. CVE-2020-12416: Use-after-free in WebRTC VideoBroadcaster bsc1173576. CVE-2020-12417: Memory...

SUSE SLED15 / SLES15 Security Update : xen (SUSE-SU-2020:1889-1)

This update for xen fixes the following issues : CVE-2020-15563: Fixed inverted code paths in x86 dirty VRAM tracking bsc1173377. CVE-2020-15565: Fixed insufficient cache write-back under VT-d bsc1173378. CVE-2020-15566: Fixed incorrect error handling in event channel port allocation bsc1173376...

SUSE SLED15 / SLES15 Security Update : icu (SUSE-SU-2020:0819-2)

This update for icu fixes the following issues : CVE-2020-10531: Fixed a potential integer overflow in UnicodeString:doAppend bsc1166844. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatical...

SUSE SLED15 / SLES15 Security Update : ceph (SUSE-SU-2020:1747-1)

This update for ceph fixes the following issues : CVE-2020-10753: Fixed an HTTP header injection via CORS ExposeHeader tag bsc1171921. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically...

SUSE SLED15 / SLES15 Security Update : opencv (SUSE-SU-2019:3192-2)

This update for opencv fixes the following issues : Security issues fixed : CVE-2019-14491: Fixed an out of bounds read in the function cv:predictOrdered, leading to DOS bsc1144352. CVE-2019-14492: Fixed an out of bounds read/write in the function HaarEvaluator:OptFeature:calc, which leads to...

SUSE SLED15 / SLES15 Security Update : freetds (SUSE-SU-2020:1417-2)

This update for freetds to 1.1.36 fixes the following issues : Security issue fixed : CVE-2019-13508: Fixed a heap overflow that could have been caused by malicious servers sending UDT types over protocol version 5.0 bsc1141132. Non-security issues fixed : Enabled Kerberos support Version update ...

SUSE SLED15 / SLES15 Security Update : djvulibre (SUSE-SU-2019:3033-2)

This update for djvulibre fixes the following issues : Security issue fixed : CVE-2019-18804: Fixed a NULL pointer dereference bsc1156188. Other issue addressed: Fixed a crash when mmx was enabled bsc1154401 Note that Tenable Network Security has extracted the preceding description block directly...

SUSE SLES15 Security Update : java-1_8_0-ibm (SUSE-SU-2020:1684-1)

This update for java-180-ibm fixes the following issues : java-180-ibm was updated to Java 8.0 Service Refresh 6 Fix Pack 10 bsc1172277,bsc1169511,bsc1160968 CVE-2020-2654: Fixed an issue which could have resulted in unauthorized ability to cause a partial denial of service CVE-2020-2754: Forward...

SUSE SLES15 Security Update : containerd, docker, docker-runc, golang-github-docker-libnetwork (SUSE-SU-2020:1657-1)

This update for containerd, docker, docker-runc, golang-github-docker-libnetwork fixes the following issues : Docker was updated to 19.03.11-ce runc was updated to version 1.0.0-rc10 containerd was updated to version 1.2.13 CVE-2020-13401: Fixed an issue where an attacker with CAPNETRAW capabilit...