SUSE SLED15 / SLES15 Security Update : ipmitool (SUSE-SU-2020:0405-1)

This update for ipmitool fixes the following security issue : CVE-2020-5208: Fixed several buffer overflows bsc1163026. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and forma...

SUSE SLED15 / SLES15 Security Update : sudo (SUSE-SU-2020:0408-1)

This update for sudo fixes the following issues : Security issue fixed : CVE-2019-18634: Fixed a buffer overflow in the passphrase prompt that could occur when pwfeedback was enabled in /etc/sudoers bsc1162202. Non-security issue fixed: Fixed an issue where sudo -l would ask for a password even...

SUSE SLED15 / SLES15 Security Update : MozillaFirefox (SUSE-SU-2020:0383-1)

This update for MozillaFirefox fixes the following issues : Firefox Extended Support Release 68.5.0 ESR - Fixed: Various stability and security fixes Mozilla Firefox ESR68.5 MFSA 2020-06 bsc1163368 - CVE-2020-6796 bmo1610426 Missing bounds check on shared memory read in the parent process -...

SUSE SLED15 / SLES15 Security Update : rubygem-rack (SUSE-SU-2020:0359-1)

This update for rubygem-rack to version 2.0.8 fixes the following issues : CVE-2018-16471: Fixed a cross-site scripting XSS flaw via the scheme method on Rack::Request bsc1116600. CVE-2019-16782: Fixed a possible information leak and session hijack vulnerability bsc1159548. Note that Tenable...

SUSE SLED15 / SLES15 Security Update : wicked (SUSE-SU-2020:0370-1)

This update for wicked fixes the following issues : CVE-2019-18903: Fixed a use-after-free when receiving invalid DHCP6 IAPD option bsc1160904. CVE-2020-7217: Fixed a memory leak in DHCP4 fsm when processing packets for other client ids bsc1160906. Note that Tenable Network Security has extracted...

SUSE SLED15 / SLES15 Security Update : pcp (SUSE-SU-2020:0357-1)

This update for pcp fixes the following issues : Security issue fixed : CVE-2019-3696: Fixed a local privilege escalation in migratetempdirs bsc1153921. CVE-2019-3695: Fixed a local privilege escalation of the pcp user during package update bsc1152763. Non-security issue fixed : Fixed an dependen...

SUSE SLED15 / SLES15 Security Update : pcp (SUSE-SU-2020:0355-1)

This update for pcp fixes the following issues : Security issue fixed : CVE-2019-3695: Fixed a local privilege escalation of the pcp user during package update bsc1152763. Non-security issue fixed : Fixed an dependency issue with pcp2csv bsc1129991. Note that Tenable Network Security has extracte...

SUSE SLED15 / SLES15 Security Update : docker-runc (SUSE-SU-2020:0375-1)

This update for docker-runc fixes the following issues : CVE-2019-19921: Fixed a volume mount race condition with shared mounts bsc1160452. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLED15 / SLES15 Security Update : libqt5-qtbase (SUSE-SU-2020:0346-1)

This update for libqt5-qtbase fixes the following issues : Security issue fixed : CVE-2020-0569: Fixed a potential local code execution by loading plugins from CWD bsc1161167. Other issue fixed : Fixed comboboxes not showing in correct location bsc1158667. Note that Tenable Network Security has...

SUSE SLED15 / SLES15 Security Update : libqt5-qtbase (SUSE-SU-2020:0349-1)

This update for libqt5-qtbase fixes the following issues : CVE-2020-0569: Fixed a potential local code execution by loading plugins from CWD bsc1161167. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted...

SUSE SLED15 / SLES15 Security Update : wicked (SUSE-SU-2020:0347-1)

This update for wicked fixes the following issues : CVE-2019-18903: Fixed a use-after-free when receiving invalid DHCP6 IAPD option bsc1160904. CVE-2020-7217: Fixed a memory leak in DHCP4 fsm when processing packets for other client ids bsc1160906. Note that Tenable Network Security has extracted...

SUSE SLES15 Security Update : nginx (SUSE-SU-2020:0348-1)

This update for nginx fixes the following issues : CVE-2019-20372: Fixed an HTTP request smuggling with certain errorpage configurations which could have allowed unauthorized web page reads bsc1160682. Note that Tenable Network Security has extracted the preceding description block directly from...

SUSE SLES15 Security Update : rmt-server (SUSE-SU-2020:0278-1)

This update for rmt-server to version 2.5.2 fixes the following issues : Security issue fixed : CVE-2019-18904: Fixed a denial of service in the offline migration bsc1160922. Non-security issue fixed : Relaxed systemd units dependencies bsc1160673 Added more verbose error reporting for SCC API...

SUSE SLED15 / SLES15 Security Update : ceph (SUSE-SU-2020:0296-1)

This update for ceph fixes the following issues : CVE-2020-1700: Fixed a denial of service against the RGW server via connection leakage bsc1161312. CVE-2020-1699: Fixed a information disclosure by improper URL checking bsc1161074. Note that Tenable Network Security has extracted the preceding...

SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2020:0275-1)

This update for ImageMagick fixes the following issues : Security issue fixed : CVE-2019-19948: Fixed a heap-based buffer overflow in WriteSGIImage bsc1159861. CVE-2019-19949: Fixed a heap-based buffer over-read in WritePNGImage bsc1160369. Non-security issue fixed : Fixed an issue where converti...

SUSE SLED15 / SLES15 Security Update : e2fsprogs (SUSE-SU-2020:0265-1)

This update for e2fsprogs fixes the following issues : CVE-2019-5188: Fixed a code execution vulnerability in the directory rehashing functionality bsc1160571. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

SUSE SLED15 / SLES15 Security Update : wicked (SUSE-SU-2020:0263-1)

This update for wicked fixes the following issues : CVE-2019-18902: Fixed a use-after-free when receiving invalid DHCP6 client options bsc1160903. CVE-2020-7216: Fixed a potential denial of service via a memory leak when processing packets with missing message type option in DHCP4 bsc1160905. Not...

SUSE SLED15 / SLES15 Security Update : glibc (SUSE-SU-2020:0262-1)

This update for glibc fixes the following issues : Security issue fixed : CVE-2019-19126: Fixed to ignore the LDPREFERMAP32BITEXEC environment variable during program execution after a security transition bsc1157292. Bug fixes : Fixed z15 s390x strstr implementation that can return incorrect...

SUSE SLED15 / SLES15 Security Update : wicked (SUSE-SU-2020:0264-1)

This update for wicked fixes the following issues : CVE-2019-18902: Fixed a use-after-free when receiving invalid DHCP6 client options bsc1160903. CVE-2020-7216: Fixed a potential denial of service via a memory leak when processing packets with missing message type option in DHCP4 bsc1160905. Not...

SUSE SLES15 Security Update : rmt-server (SUSE-SU-2020:0260-1)

This update for rmt-server to version 2.5.2 fixes the following issues : Security issue fixed : CVE-2019-18904: Fixed a denial of service in the offline migration bsc1160922. Non-security issue fixed : Relaxed systemd units dependencies bsc1160673 Added more verbose error reporting for SCC API...