SUSE SLED15 / SLES15 Security Update : salt (SUSE-SU-2020:0684-1)

This update for salt fixes the following issues : Avoid possible user escalation upgrading salt-master bsc1157465 CVE-2019-18897 Fix unit tests failures in testbatchasync tests Batch Async: Handle exceptions, properly unregister and close instances after running async batching to avoid CPU...

SUSE SLED15 / SLES15 Security Update : librsvg (SUSE-SU-2020:0629-1)

This update for librsvg to version 2.42.8 fixes the following issues : librsvg was updated to version 2.42.8 fixing the following issues : CVE-2019-20446: Fixed an issue where a crafted SVG file with nested patterns can cause denial of service bsc1162501. NOTE: Librsvg now has limits on the numbe...

SUSE SLED15 / SLES15 Security Update : php7 (SUSE-SU-2020:0622-1)

This update for php7 fixes the following issues : CVE-2020-7062: Fixed a NULL pointer dereference when using file upload functionality under specific circumstances bsc1165280. CVE-2020-7063: Fixed an issue where adding files change the permissions to default bsc1165289. CVE-2020-7059: Fixed an ou...

SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2020:0613-1)

The SUSE Linux Enterprise 15 SP1 real-time kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2019-14615: An information disclosure vulnerability existed due to insufficient control flow in certain data structures for some IntelR Processors...

SUSE SLES15 Security Update : ipmitool (SUSE-SU-2020:0617-1)

This update for ipmitool fixes the following issues : CVE-2020-5208: Fixed multiple remote code executtion vulnerabilities bsc1163026. picmg discover messages are now DEBUG and not INFO messages bsc1085469. Note that Tenable Network Security has extracted the preceding description block directly...

SUSE SLED15 / SLES15 Security Update : cloud-init (SUSE-SU-2020:0585-1)

This update for cloud-init fixes the following security issues : CVE-2020-8631: Replaced the theoretically predictable deterministic RNG with the system RNG bsc1162937. CVE-2020-8632: Increased the default random password length from 9 to 20 bsc1162936. Note that Tenable Network Security has...

SUSE SLES15 Security Update : ovmf (SUSE-SU-2020:0568-1)

This update for ovmf fixes the following issues : Security issues fixed : CVE-2019-14563: Fixed a memory corruption caused by insufficient numeric truncation bsc1163959. CVE-2019-14553: Fixed the TLS certification verification in HTTPS-over-IPv6 boot sequences bsc1153072. CVE-2019-14559: Fixed a...

SUSE SLED15 / SLES15 Security Update : gd (SUSE-SU-2020:0594-1)

This update for gd fixes the following issues : Security issue fixed : CVE-2018-14553: Fixed a NULL pointer dereference in gdImageClone bsc1165471. CVE-2019-11038: Fixed a information disclosure in gdImageCreateFromXbm bsc1140120. Note that Tenable Network Security has extracted the preceding...

SUSE SLED15 / SLES15 Security Update : postgresql10 (SUSE-SU-2020:0589-1)

This update for postgresql10 fixes the following issues : PostgreSQL was updated to version 10.12. Security issue fixed : CVE-2020-1720: Fixed a missing authorization check in the ALTER ... DEPENDS ON extension bsc1163985. Note that Tenable Network Security has extracted the preceding description...

SUSE SLED15 / SLES15 Security Update : permissions (SUSE-SU-2020:0547-1)

This update for permissions fixes the following issues : Security issues fixed : CVE-2019-3687: Fixed a privilege escalation which could allow a local user to read network traffic if wireshark is installed bsc1148788 CVE-2020-8013: Fixed an issue where chkstat set unintended setuid/capabilities f...

SUSE SLED15 / SLES15 Security Update : python (SUSE-SU-2020:0510-1)

This update for python fixes the following issues : Security issues fixed : CVE-2019-9674: Improved the documentation, warning about dangers of zip-bombs bsc1162825. CVE-2020-8492: Fixed a regular expression in urrlib that was prone to denial of service via HTTP bsc1162367. Note that Tenable...

SUSE SLED15 / SLES15 Security Update : mariadb (SUSE-SU-2020:0496-1)

This update for mariadb fixes the following issues : MariaDB was updated to version 10.2.31 GA bsc1162388. Security issues fixed : CVE-2020-2574: Fixed a difficult to exploit vulnerability that allowed an attacker to crash the client bsc1162388. CVE-2019-18901: Fixed an unsafe path handling...

SUSE SLED15 / SLES15 Security Update : ppp (SUSE-SU-2020:0489-1)

This update for ppp fixes the following security issue : CVE-2020-8597: Fixed a buffer overflow in the eaprequest and eapresponse functions bsc1162610. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted ...

SUSE SLES15 Security Update : nodejs8 (SUSE-SU-2020:0454-1)

This update for nodejs8 fixes the following issues : Security issues fixed : CVE-2019-15604: Fixed a remotely triggerable assertion in the TLS server via a crafted certificate string CVE-2019-15604, bsc1163104. CVE-2019-15605: Fixed an HTTP request smuggling vulnerability via malformed...

SUSE SLED15 / SLES15 Security Update : java-1_8_0-ibm (SUSE-SU-2020:0466-1)

This update for java-180-ibm fixes the following issues : Java 8.0 was updated to Service Refresh 6 Fix Pack 5 bsc1162972, bsc1160968 CVE-2020-2583: Unlink Set of LinkedHashSets CVE-2019-4732: Untrusted DLL search path vulnerability CVE-2020-2593: Normalize normalization for all CVE-2020-2604:...

SUSE SLED15 / SLES15 Security Update : python3 (SUSE-SU-2020:0467-1)

This update for python3 fixes the following issues : Security issues fixed : CVE-2019-9674: Improved the documentation to reflect the dangers of zip-bombs bsc1162825. CVE-2020-8492: Fixed a regular expression in urrlib that was prone to denial of service via HTTP bsc1162367. Non-security issue...

SUSE SLED15 / SLES15 Security Update : libexif (SUSE-SU-2020:0458-1)

This update for libexif fixes the following issues : CVE-2019-9278: Fixed an integer overflow bsc1160770. CVE-2018-20030: Fixed a denial of service by endless recursion bsc1120943. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

SUSE SLES15 Security Update : nodejs10 (SUSE-SU-2020:0455-1)

This update for nodejs10 fixes the following issues : nodejs10 was updated to version 10.19.0. Security issues fixed : CVE-2019-15604: Fixed a remotely triggerable assertion in the TLS server via a crafted certificate string CVE-2019-15604, bsc1163104. CVE-2019-15605: Fixed an HTTP request...

SUSE SLED15 / SLES15 Security Update : pdsh, slurm_18_08 (SUSE-SU-2020:0443-1)

This update for pdsh, slurm1808 fixes the following issues : Slurm was included in the 18.08 release, as 'slurm1808' package. The version 18.08.9 contains all recent security fixes, including : CVE-2019-19728: Fixed a privilege escalation with srun, where --uid might have unintended side effects...

SUSE SLED15 / SLES15 Security Update : dpdk (SUSE-SU-2020:0439-1)

This update for dpdk to version 18.11.3 fixes the following issues : Security issue fixed : CVE-2019-14818: Fixed a denial of service by a malicious container via the vhost-user socket bsc1156146. Non-security issue fixed: Added current version to the PMD driver directory to avoid loading previou...