SUSE SLED15 / SLES15 Security Update : fwupd (SUSE-SU-2020:1681-1)

This update for fwupd fixes the following issues : CVE-2020-10759: Fixed a potential PGP signature bypass, which could have led to installation of unsigned firmware bsc1172643 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE SLED15 / SLES15 Security Update : nmap (SUSE-SU-2019:2425-2)

This update for nmap fixes the following issues : Security issue fixed : CVE-2017-18594: Fixed a denial of service condition due to a double free when an SSH connection fails. bsc1148742 Non-security issue fixed : Fixed a regression in the version scanner caused, by the fix for CVE-2018-15173...

SUSE SLED15 / SLES15 Security Update : libvpx (SUSE-SU-2020:1297-2)

This update for libvpx fixes the following issues : CVE-2020-0034: Fixed an out-of-bounds read on truncated key frames bsc1166066. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clea...

SUSE SLES15 Security Update : unbound (SUSE-SU-2020:1819-1)

This update for unbound fixes the following issues : CVE-2020-12662: Fixed an issue where unbound could have been tricked into amplifying an incoming query into a large number of queries directed to a target bsc1171889. CVE-2020-12663: Fixed an issue where malformed answers from upstream name...

SUSE SLED15 / SLES15 Security Update : unbound (SUSE-SU-2020:1772-1)

This update for unbound fixes the following issues : CVE-2020-12662: Fixed an issue where unbound could have been tricked into amplifying an incoming query into a large number of queries directed to a target bsc1171889. CVE-2020-12663: Fixed an issue where malformed answers from upstream name...

SUSE SLED15 / SLES15 Security Update : php7 (SUSE-SU-2020:1661-2)

This update for php7 fixes the following issues : Security issue fixed : CVE-2019-11048: Improved the handling of overly long filenames or field names in HTTP file uploads bsc1171999. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

SUSE SLED15 / SLES15 Security Update : SDL2 (SUSE-SU-2019:2463-2)

This update for SDL2 fixes the following issues : Security issues fixed : CVE-2019-13616: Fixed heap-based buffer over-read in BlitNtoN in video/SDLblitN.c bsc1141844. CVE-2019-13626: Fixed integer overflow in IMAADPCMdecode in audio/SDLwave.c bsc1142031. Note that Tenable Network Security has...

SUSE SLED15 / SLES15 Security Update : LibVNCServer (SUSE-SU-2020:1873-1)

This update for LibVNCServer fixes the following issues : CVE-2017-18922: Fixed an issue which could have allowed to an attacker to pre-auth overwrite a function pointer which subsequently used leading to potential remote code execution bsc1173477. Note that Tenable Network Security has extracted...

SUSE SLED15 / SLES15 Security Update : gstreamer-plugins-base (SUSE-SU-2020:1300-2)

This update for gstreamer-plugins-base fixes the following issue : Security issue fixed : CVE-2019-9928: Fixed a heap-based overflow in the rtsp connection parser bsc1133375. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE SLED15 / SLES15 Security Update : openldap2 (SUSE-SU-2020:1856-1)

This update for openldap2 fixes the following issues : CVE-2020-8023: Fixed a potential local privilege escalation from ldap to root when OPENLDAPCONFIGBACKEND='ldap' was used bsc1172698. Changed DBCONFIG to root:ldap permissions bsc1172704. Note that Tenable Network Security has extracted the...

SUSE SLED15 / SLES15 Security Update : zstd (SUSE-SU-2020:1396-2)

This update for zstd fixes the following issues : Fix for build error caused by wrong static libraries. bsc1133297 Correction in spec file marking the license as documentation. bsc1082318 Add new package for SLE-15. jscECO-1886 Note that Tenable Network Security has extracted the preceding...

SUSE SLES15 Security Update : php7 (SUSE-SU-2020:1661-1)

This update for php7 fixes the following issues : Security issue fixed : CVE-2019-11048: Improved the handling of overly long filenames or field names in HTTP file uploads bsc1171999. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

SUSE SLED15 / SLES15 Security Update : libjpeg-turbo (SUSE-SU-2019:2971-2)

This update for libjpeg-turbo fixes the following issues : CVE-2019-2201: Several integer overflow issues and subsequent segfaults occurred in libjpeg-turbo, when attempting to compress or decompress gigapixel images. bsc1156402 Note that Tenable Network Security has extracted the preceding...

SUSE SLED15 / SLES15 Security Update : ffmpeg (SUSE-SU-2019:3184-2)

This update for ffmpeg fixes the following issues : Security issues fixed: CVE-2019-17542: Fixed a heap-buffer overflow in vqadecodechunk due to an out-of-array access bsc1154064. CVE-2019-12730: Fixed an uninitialized use of variables due to an improper check bsc1137526. CVE-2019-9718: Fixed a...

SUSE SLES15 Security Update : mariadb (SUSE-SU-2020:1711-1)

This update for mariadb to version 10.2.32 fixes the following issues : mariadb was updated to version 10.2.32 bsc1171550 CVE-2020-2752: Fixed an issue which could have resulted in unauthorized ability to cause denial of service. CVE-2020-2812: Fixed an issue which could have resulted in...

SUSE SLES15 Security Update : kernel (SUSE-SU-2020:1663-1)

The SUSE Linux Enterprise 15 kernel was updated receive various security and bugfixes. The following security bugs were fixed : CVE-2020-0543: Fixed a side channel attack against special registers which could have resulted in leaking of read values to cores other than the one which called it. Thi...

SUSE SLED15 / SLES15 Security Update : curl (SUSE-SU-2020:1733-1)

This update for curl fixes the following issues : CVE-2020-8177: Fixed an issue where curl could have been tricked by a malicious server to overwrite a local file when using the -J option bsc1173027. CVE-2020-8169: Fixed an issue where could have led to partial password leak over DNS on HTTP...

SUSE SLED15 / SLES15 Security Update : mozilla-nspr, mozilla-nss (SUSE-SU-2020:1677-1)

This update for mozilla-nspr, mozilla-nss fixes the following issues : mozilla-nss was updated to version 3.53 CVE-2020-12399: Fixed a timing attack on DSA signature generation bsc1171978. CVE-2019-17006: Added length checks for cryptographic primitives bsc1159819. Release notes :...

SUSE SLED15 / SLES15 Security Update : Mesa (SUSE-SU-2020:0111-2)

This update for Mesa fixes the following issues : Security issue fixed : CVE-2019-5068: Fixed exploitable shared memory permissions vulnerability bsc1156015. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

SUSE SLED15 / SLES15 Security Update : perl (SUSE-SU-2020:1682-1)

This update for perl fixes the following issues : CVE-2020-10543: Fixed a heap buffer overflow in regular expression compiler which could have allowed overwriting of allocated memory with attacker's data bsc1171863. CVE-2020-10878: Fixed multiple integer overflows which could have allowed the...