SUSE SLES15 Security Update : squid (SUSE-SU-2020:1769-1)

This update for squid fixes the following issues : squid was updated to version 4.12 Security issue fixed : CVE-2020-14059: Fixed an issue where a client could potentially deny the service of a server during TLS Handshake bsc1173304. Other issues addressed : Reverted to slow search for new SMP sh...

SUSE SLED15 / SLES15 Security Update : mozilla-nss (SUSE-SU-2020:1850-1)

This update for mozilla-nss fixes the following issues : mozilla-nss was updated to version 3.53.1 CVE-2020-12402: Fixed a potential side channel attack during RSA key generation bsc1173032 Fixed various FIPS issues in libfreebl3 which were causing segfaults in the test suite of chrony bsc1168669...

SUSE SLED15 / SLES15 Security Update : nasm (SUSE-SU-2020:1843-1)

This update for nasm fixes the following issues : nasm was updated to version 2.14.02. This allows building of Mozilla Firefox 78ESR and also contains lots of bugfixes, security fixes and improvements. Fix crash due to multiple errors or warnings during the code generation pass if a list file is...

SUSE SLED15 / SLES15 Security Update : permissions (SUSE-SU-2020:1860-1)

This update for permissions fixes the following issues : Removed conflicting entries which might expose pcp to security issues bsc1171883 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatical...

SUSE SLED15 / SLES15 Security Update : librsvg (SUSE-SU-2020:0629-2)

This update for librsvg to version 2.42.8 fixes the following issues : librsvg was updated to version 2.42.8 fixing the following issues : CVE-2019-20446: Fixed an issue where a crafted SVG file with nested patterns can cause denial of service bsc1162501. NOTE: Librsvg now has limits on the numbe...

SUSE SLES15 Security Update : permissions (SUSE-SU-2020:1858-1)

This update for permissions fixes the following issues : Removed conflicting entries which might expose pcp to security issues bsc1171883 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatical...

SUSE SLED15 / SLES15 Security Update : curl (SUSE-SU-2020:1773-1)

This update for curl fixes the following issues : CVE-2020-8177: Fixed an issue where curl could have been tricked by a malicious server to overwrite a local file when using the -J option bsc1173027. Note that Tenable Network Security has extracted the preceding description block directly from th...

SUSE SLED15 / SLES15 Security Update : perl (SUSE-SU-2020:1682-1)

This update for perl fixes the following issues : CVE-2020-10543: Fixed a heap buffer overflow in regular expression compiler which could have allowed overwriting of allocated memory with attacker's data bsc1171863. CVE-2020-10878: Fixed multiple integer overflows which could have allowed the...

SUSE SLED15 / SLES15 Security Update : perl (SUSE-SU-2020:1682-2)

This update for perl fixes the following issues : CVE-2020-10543: Fixed a heap buffer overflow in regular expression compiler which could have allowed overwriting of allocated memory with attacker's data bsc1171863. CVE-2020-10878: Fixed multiple integer overflows which could have allowed the...

SUSE SLES15 Security Update : slurm_20_02 (SUSE-SU-2020:1554-1)

This update for slurm2002 to version 20.02.3 fixes the following issues : Security issue fixed : CVE-2020-12693: Fixed an authentication bypass via an alternate path or channel bsc1172004. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE...

SUSE SLED15 / SLES15 Security Update : libcroco (SUSE-SU-2020:1535-1)

This update for libcroco fixes the following issues : Security issues fixed : CVE-2017-8834: Fixed denial of service memory allocation error via a crafted CSS file bsc1043898. CVE-2017-8871: Fixed denial of service infinite loop and CPU consumption via a crafted CSS file bsc1043899. Note that...

SUSE SLED15 / SLES15 Security Update : MozillaFirefox (SUSE-SU-2020:1556-1)

This update for MozillaFirefox fixes the following issues : Mozilla Firefox was updated to version 68.9.0 Extended Support Release bsc1172402. CVE-2020-12405: Fixed a use-after-free in SharedWorkerService. CVE-2020-12406: Fixed a JavaScript Type confusion with NativeTypes. CVE-2020-12410: Fixed...

SUSE SLED15 / SLES15 Security Update : ucode-intel (SUSE-SU-2020:1589-1)

This update for ucode-intel fixes the following issues : Updated Intel CPU Microcode to 20200602 prerelease bsc1172466 This update contains security mitigations for : CVE-2020-0543: Fixed a side channel attack against special registers which could have resulted in leaking of read values to cores...

SUSE SLED15 / SLES15 Security Update : file-roller (SUSE-SU-2020:1557-1)

This update for file-roller fixes the following issues : CVE-2020-11736: Fixed a directory traversal vulnerability due to improper checking whether a file's parent is an external symlink bsc1169428. CVE-2019-16680: Fixed a path traversal vulnerability which could have allowed an overwriting of a...

SUSE SLED15 / SLES15 Security Update : rubygem-bundler (SUSE-SU-2020:1582-1)

This update for rubygem-bundler fixes the following issue : CVE-2019-3881: Fixed insecure permissions on a directory in /tmp/ that allowed malicious code execution bsc1143436. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE SLED15 / SLES15 Security Update : xen (SUSE-SU-2020:1609-1)

This update for xen to version 4.12.3 fixes the following issues : CVE-2020-0543: Fixed a side channel attack against special registers which could have resulted in leaking of read values to cores other than the one which called it. This attack is known as Special Register Buffer Data Sampling...

SUSE SLES15 Security Update : nodejs8 (SUSE-SU-2020:1576-1)

This update for nodejs8 fixes the following issues : CVE-2020-8174: Fixed multiple memory corruption in napigetvaluestring bsc1172443. CVE-2020-11080: Fixed a potential denial of service when receiving unreasonably large HTTP/2 SETTINGS frames bsc1172442. CVE-2020-7598: Fixed an issue which could...

SUSE SLED15 / SLES15 Security Update : vim (SUSE-SU-2020:1551-1)

This update for vim fixes the following issues : CVE-2019-20807: Fixed an issue where escaping from the restrictive mode of vim was possible using interfaces bsc1172225. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE SLED15 / SLES15 Security Update : libexif (SUSE-SU-2020:1553-1)

This update for libexif to 0.6.22 fixes the following issues : Security issues fixed : CVE-2016-6328: Fixed an integer overflow in parsing MNOTE entry data of the input file bsc1055857. CVE-2017-7544: Fixed an out-of-bounds heap read vulnerability in exifdatasavedataentry function in...

SUSE SLES15 Security Update : qemu (SUSE-SU-2020:1523-1)

This update for qemu fixes the following issues : Security issues fixed : CVE-2020-1983: Fixed a use-after-free in the ipreass function of slirp bsc1170940. CVE-2019-20382: Fixed a potential DoS due to a memory leak in VNC disconnect bsc1165776. CVE-2020-1711: Fixed a potential OOB access in the...