SUSE SLED15 / SLES15 Security Update : python-reportlab (SUSE-SU-2020:0255-1)

This update for python-reportlab fixes the following issues : CVE-2019-17626: Fixed a potential remote code execution because of the lack of input sanitization in toColor bsc1154370. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

SUSE SLED15 / SLES15 Security Update : java-1_8_0-openjdk (SUSE-SU-2020:0231-1)

This update for java-180-openjdk fixes the following issues : Update java-180-openjdk to version jdk8u242 icedtea 3.15.0 January 2020 CPU, bsc1160968 : CVE-2020-2583: Unlink Set of LinkedHashSets CVE-2020-2590: Improve Kerberos interop capabilities CVE-2020-2593: Normalize normalization for all...

SUSE SLED15 / SLES15 Security Update : samba (SUSE-SU-2020:0224-1)

This update for samba fixes the following issues : CVE-2019-14902: Fixed an issue where automatic replication of ACLs down subtree on AD Directory is not working bsc1160850. CVE-2019-14907: Fixed a Server-side crash after charset conversion failure during NTLMSSP processing bsc1160888. Note that...

SUSE SLED15 / SLES15 Security Update : slurm (SUSE-SU-2020:0228-1)

This update for slurm fixes the following issues : CVE-2019-19727: Fix permissions of configuration file 'slurmdbd.conf' bsc1155784. Fix ownership of /var/spool/slurm on new installations and upgrade bsc1158696. Fix '%posttrans' macro to cope with added newline bsc1153259. Note that Tenable Netwo...

SUSE SLED15 / SLES15 Security Update : python (SUSE-SU-2020:0234-1) (BEAST) (httpoxy)

This update for python fixes the following issues : Updated to version 2.7.17 to unify packages among openSUSE:Factory and SLE versions bsc1159035. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLED15 / SLES15 Security Update : samba (SUSE-SU-2020:0223-1)

This update for samba fixes the following issues : Security issues fixed : CVE-2019-14907: Fixed a Server-side crash after charset conversion failure during NTLMSSP processing bsc1160888. CVE-2019-14902: Fixed an issue where automatic replication of ACLs down subtree on AD Directory is not workin...

SUSE SLED15 / SLES15 Security Update : java-11-openjdk (SUSE-SU-2020:0213-1)

This update for java-11-openjdk fixes the following issues : Update to version jdk-11.0.6-10 January 2020 CPU, bsc1160968 Fixing these security related issues : CVE-2020-2583: Unlink Set of LinkedHashSets CVE-2020-2590: Improve Kerberos interop capabilities CVE-2020-2593: Normalize normalization...

SUSE SLED15 / SLES15 Security Update : Mesa (SUSE-SU-2020:0132-1)

This update for Mesa fixes the following issues : Security issue fixed : CVE-2019-5068: Fixed exploitable shared memory permissions vulnerability bsc1156015. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

SUSE SLED15 / SLES15 Security Update : libssh (SUSE-SU-2020:0130-1)

This update for libssh fixes the following issues : CVE-2019-14889: Fixed an unwanted command execution in scp caused by unsanitized location bsc1158095. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempte...

SUSE SLED15 / SLES15 Security Update : libssh (SUSE-SU-2020:0129-1)

This update for libssh fixes the following issues : CVE-2019-14889: Fixed an unwanted command execution in scp caused by unsanitized location bsc1158095. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempte...

SUSE SLED15 / SLES15 Security Update : libvpx (SUSE-SU-2020:0143-1)

This update for libvpx fixes the following issues : CVE-2019-2126: Fixed a double free in ParseContentEncodingEntry bsc1160611. CVE-2019-9325: Fixed an out-of-bounds read bsc1160612. CVE-2019-9232: Fixed an out-of-bounds memory access on fuzzed data bsc1160613. CVE-2019-9433: Fixed a use-after-fr...

SUSE SLED15 / SLES15 Security Update : LibreOffice (SUSE-SU-2020:0121-1)

This update libreoffice to version 6.3.3 fixes the following issues : LibreOffice was updated to 6.3.3 jscSLE-8705, bringing many bug and stability fixes. More information for the 6.3 release at: https://wiki.documentfoundation.org/ReleaseNotes/6.3 Security issue fixed : CVE-2019-9853: Fixed an...

SUSE SLED15 / SLES15 Security Update : Mesa (SUSE-SU-2020:0111-1)

This update for Mesa fixes the following issues : Security issue fixed : CVE-2019-5068: Fixed exploitable shared memory permissions vulnerability bsc1156015. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

SUSE SLED15 / SLES15 Security Update : slurm (SUSE-SU-2020:0110-1)

This update for slurm to version 18.08.9 fixes the following issues : Security issues fixed : CVE-2019-19728: Fixed a privilege escalation with srun, where --uid might have unintended side effects bsc1159692. CVE-2019-12838: Fixed SchedMD Slurm SQL Injection issue bnc1140709. CVE-2019-19727: Fixe...

SUSE SLED15 / SLES15 Security Update : fontforge (SUSE-SU-2020:0118-1)

This update for fontforge fixes the following issues : CVE-2020-5395: Fixed a use-after-free in SFDGetFontMetaData bsc1160220. CVE-2020-5496: Fixed a heap-based buffer overflow in Type2NotDefSplines bsc1160236. Note that Tenable Network Security has extracted the preceding description block...

SUSE SLED15 / SLES15 Security Update : tigervnc (SUSE-SU-2020:0113-1)

This update for tigervnc fixes the following issues : CVE-2019-15691: Fixed a use-after-return due to incorrect usage of stack memory in ZRLEDecoder bsc1159856. CVE-2019-15692: Fixed a heap-based buffer overflow in CopyRectDecode bsc1160250. CVE-2019-15693: Fixed a heap-based buffer overflow in...

SUSE SLES15 Security Update : nodejs10 (SUSE-SU-2020:0104-1)

This update for nodejs10 to version 10.18.0 fixes the following issues : Security issues fixed : CVE-2019-16777, CVE-2019-16776, CVE-2019-16775: Updated npm to 6.13.4, fixing an arbitrary path overwrite and access via 'bin' field bsc1159352. Added support for chacha20-poly1305 for Authenticated...

SUSE SLED15 / SLES15 Security Update : php7 (SUSE-SU-2020:0101-1)

This update for php7 fixes the following issues : CVE-2019-11045: Fixed an issue with improper input validation in the filename handling of the DirectoryIterator class bsc1159923. CVE-2019-11046: Fixed an information leak in bcshiftaddsub bsc1159924. CVE-2019-11047, CVE-2019-11050: Fixed multiple...

SUSE SLED15 / SLES15 Security Update : libsolv, libzypp, zypper (SUSE-SU-2020:0087-1)

This update for libsolv, libzypp, zypper fixes the following issues : Security issue fixed : CVE-2019-18900: Fixed assert cookie file that was world readable bsc1158763. Bug fixes Fixed removing orphaned packages dropped by to-be-installed products bsc1155819. Adds libzypp API to mark all obsolet...

SUSE SLED15 / SLES15 Security Update : openssl-1_0_0 (SUSE-SU-2020:0064-1)

This update for openssl-100 fixes the following issues : Security issue fixed : CVE-2019-1551: Fixed an overflow bug in the x6464 Montgomery squaring procedure used in exponentiation with 512-bit moduli bsc1158809. Note that Tenable Network Security has extracted the preceding description block...