SUSE SLED15 / SLES15 Security Update : texlive-filesystem (SUSE-SU-2020:1580-1)

This update for texlive-filesystem fixes the following issues : Security issues fixed : CVE-2020-8016: Fixed a race condition in the spec file bsc1159740. CVE-2020-8017: Fixed a race condition on a cron job bsc1158910. Note that Tenable Network Security has extracted the preceding description blo...

SUSE SLES15 Security Update : java-1_8_0-openjdk (SUSE-SU-2020:1569-1)

This update for java-180-openjdk to version jdk8u252 fixes the following issues : CVE-2020-2754: Forward references to Nashorn bsc1169511 CVE-2020-2755: Improve Nashorn matching bsc1169511 CVE-2020-2756: Better mapping of serial ENUMs bsc1169511 CVE-2020-2757: Less Blocking Array Queues bsc116951...

SUSE SLED15 / SLES15 Security Update : libxml2 (SUSE-SU-2020:1532-1)

This update for libxml2 fixes the following issues : CVE-2019-19956: Reverted the upstream fix for this memory leak because it introduced other, more severe vulnerabilities bsc1172021. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

SUSE SLED15 / SLES15 Security Update : gnutls (SUSE-SU-2020:1584-1)

This update for gnutls fixes the following issues : CVE-2020-13777: Fixed an insecure session ticket key construction which could have made the TLS server to not bind the session ticket encryption key with a value supplied by the application until the initial key rotation, allowing an attacker to...

SUSE SLED15 / SLES15 Security Update : qemu (SUSE-SU-2020:1502-1)

This update for qemu fixes the following issues : Security issue fixed : CVE-2020-1983: Fixed a use-after-free in the ipreass function of slirp bsc1170940. Non-security issues fixed : Fixed an issue where limiting the memory bandwidth was not possible bsc1167816. Fixed the issue that s390x could...

SUSE SLED15 / SLES15 Security Update : mariadb-connector-c (SUSE-SU-2020:1423-1)

This update for mariadb-connector-c fixes the following issues : Security issue fixed : CVE-2020-13249: Fixed an improper validation of OK packets received from clients bsc1171550. Non-security issues fixed : Update to release 3.1.8 bsc1171550 - CONC-304: Rename the static library to libmariadb.a...

SUSE SLES15 Security Update : freetds (SUSE-SU-2020:1417-1)

This update for freetds to 1.1.36 fixes the following issues : Security issue fixed : CVE-2019-13508: Fixed a heap overflow that could have been caused by malicious servers sending UDT types over protocol version 5.0 bsc1141132. Non-security issues fixed : Enabled Kerberos support Version update ...

SUSE SLES15 Security Update : dovecot23 (SUSE-SU-2020:1379-1)

This update for dovecot23 fixes the following issues : Security issues fixed : CVE-2020-10957: Fixed a crash caused by malformed NOOP commands bsc1171457. CVE-2020-10958: Fixed a use-after-free when receiving too many newlines bsc1171458. CVE-2020-10967: Fixed a crash in the lmtp and submission...

SUSE SLED15 / SLES15 Security Update : jasper (SUSE-SU-2020:1420-1)

This update for jasper fixes the following issues : CVE-2018-9154: Fixed a potential denial of service in jpcdecprocesssot bsc1092115. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically...

SUSE SLED15 / SLES15 Security Update : libmspack (SUSE-SU-2020:1493-1)

This update for libmspack fixes the following issues : Security issue fixed : CVE-2019-1010305: Fixed a buffer overflow triggered by a crafted chm file which could have led to information disclosure bsc1141680. Other issue addressed : Enable build-time tests bsc1130489 Note that Tenable Network...

SUSE SLED15 / SLES15 Security Update : java-11-openjdk (SUSE-SU-2020:1511-1)

This update for java-11-openjdk fixes the following issues : Java was updated to jdk-11.0.7+10 April 2020 CPU, bsc1169511. Security issues fixed : CVE-2020-2754: Fixed an incorrect handling of regular expressions that could have resulted in denial of service bsc1169511. CVE-2020-2755: Fixed an...

SUSE SLED15 / SLES15 Security Update : zstd (SUSE-SU-2020:1396-1)

This update for zstd fixes the following issues : Fix for build error caused by wrong static libraries. bsc1133297 Correction in spec file marking the license as documentation. bsc1082318 Add new package for SLE-15. jscECO-1886 Note that Tenable Network Security has extracted the preceding...

SUSE SLED15 / SLES15 Security Update : libxslt (SUSE-SU-2020:1409-1)

This update for libxslt fixes the following issues : Security issues fixed : CVE-2019-13118: Fixed a read of uninitialized stack data bsc1140101. CVE-2019-13117: Fixed a uninitialized read which allowed to discern whether a byte on the stack contains certain special characters bsc1140095...

SUSE SLES15 Security Update : memcached (SUSE-SU-2020:1381-1)

This update for memcached fixes the following issues : Security issue fixed : CVE-2019-11596: Fixed a NULL pointer dereference in processlrucommand bsc1133817. CVE-2019-15026: Fixed a stack-based buffer over-read bsc1149110. Note that Tenable Network Security has extracted the preceding descripti...

SUSE SLES15 Security Update : dovecot23 (SUSE-SU-2020:1380-1)

This update for dovecot23 to 2.3.10 fixes the following issues : Security issues fixed : CVE-2020-10957: Fixed a crash caused by malformed NOOP commands bsc1171457. CVE-2020-10958: Fixed a use-after-free when receiving too many newlines bsc1171458. CVE-2020-10967: Fixed a crash in the lmtp and...

SUSE SLED15 / SLES15 Security Update : sysstat (SUSE-SU-2020:1419-1)

This update for sysstat fixes the following issues : CVE-2019-19725: Fixed double free in checkfileactlst in sacommon.c bsc1159104. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically cle...

SUSE SLED15 / SLES15 Security Update : file (SUSE-SU-2020:1294-1)

This update for file fixes the following issues : Security issues fixed : CVE-2019-18218: Fixed a heap-based buffer overflow in cdfreadpropertyinfo bsc1154661. Non-security issue fixed : Fixed broken '--help' output bsc1169512. Note that Tenable Network Security has extracted the preceding...

SUSE SLED15 / SLES15 Security Update : libxml2 (SUSE-SU-2020:1299-1)

This update for libxml2 fixes the following issues : CVE-2019-20388: Fixed a memory leak in xmlSchemaPreRun bsc1161521. CVE-2019-19956: Fixed a memory leak bsc1159928. CVE-2020-7595: Fixed an infinite loop in an EOF situation bsc1161517. Note that Tenable Network Security has extracted the...

SUSE SLED15 / SLES15 Security Update : openexr (SUSE-SU-2020:1293-1)

This update for openexr provides the following fix : Security issues fixed : CVE-2020-11765: Fixed an off-by-one error in use of the ImfXdr.h read function by DwaCompressor:Classifier:Classifier bsc1169575. CVE-2020-11764: Fixed an out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp...

SUSE SLED15 / SLES15 Security Update : rpmlint (SUSE-SU-2020:1338-1)

This update for rpmlint fixes the following issues : whitelist certmonger bsc1169365, bsc1129452 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possibl...