SUSE SLED15 / SLES15 Security Update : python3 (SUSE-SU-2019:2802-1)

This update for python3 to 3.6.9 fixes the following issues : Security issues fixed : CVE-2019-16056: Fixed a parser issue in the email module. bsc1149955 CVE-2019-16935: Fixed a reflected XSS in python/Lib/DocXMLRPCServer.py bsc1153238. Non-security issues fixed: Fixed regression of OpenSSL...

SUSE SLED15 / SLES15 Security Update : nfs-utils (SUSE-SU-2019:2782-1)

This update for nfs-utils fixes the following issues : CVE-2019-3689: Fixed root-owned files stored in insecure /var/lib/nfs. bsc1150733 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automaticall...

SUSE SLED15 / SLES15 Security Update : binutils (SUSE-SU-2019:2780-1)

This update for binutils fixes the following issues : binutils was updated to current 2.32 branch jscECO-368. Includes following security fixes : CVE-2018-17358: Fixed invalid memory access in bfdstabsectionfindnearestline in syms.c bsc1109412 CVE-2018-17359: Fixed invalid memory access exists in...

SUSE SLED15 / SLES15 Security Update : docker-runc (SUSE-SU-2019:2786-1)

This update for docker-runc fixes the following issues : CVE-2019-16884: Fixed an LSM bypass via malicious Docker images that mount over a /proc directory. bsc1152308 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable...

SUSE SLED15 / SLES15 Security Update : nfs-utils (SUSE-SU-2019:2776-1)

This update for nfs-utils fixes the following issues : CVE-2019-3689: Fixed root-owned files stored in insecure /var/lib/nfs. bsc1150733 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automaticall...

SUSE SLED15 / SLES15 Security Update : lz4 (SUSE-SU-2019:2757-1)

This update for lz4 fixes the following issues : CVE-2019-17543: Fixed a heap-based buffer overflow in LZ4write32 bsc1153936. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and...

SUSE SLED15 / SLES15 Security Update : zziplib (SUSE-SU-2019:2750-1)

This update for zziplib fixes the following issues : Security issue fixed : CVE-2018-16548: Prevented memory leak from zzipparserootdirectory. Free allocated structure if its address is not passed back. bsc1107424 Other issue addressed: Prevented a division by zero bsc1129403. Note that Tenable...

SUSE SLED15 / SLES15 Security Update : rust (SUSE-SU-2019:2755-1)

This update for rust fixes the following issues : Rust was updated to version 1.36.0. Security issues fixed : CVE-2019-12083: a standard method can be overridden violating Rust's safety guarantees and causing memory unsafety bsc1134978 CVE-2018-1000622: rustdoc loads plugins from world-writable...

SUSE SLED15 / SLES15 Security Update : sysstat (SUSE-SU-2019:2749-1)

This update for sysstat fixes the following issue : CVE-2019-16167: Fixed a memory corruption due to an integer overflow. bsc1150114 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically...

SUSE SLED15 / SLES15 Security Update : ceph, ceph-iscsi, ses-manual_en (SUSE-SU-2019:2736-1)

This update for ceph, ceph-iscsi and ses-manualen fixes the following issues : Security issues fixed : CVE-2019-10222: Fixed RGW crash caused by unauthenticated clients. bsc1145093 Non-security issues-fixed: ceph-volume: prints errors to stdout with --format json bsc1132767 mgr/dashboard: Changin...

SUSE SLED15 / SLES15 Security Update : openconnect (SUSE-SU-2019:2737-1)

This update for openconnect fixes the following issues : CVE-2019-16239: Fixed a buffer overflow when a malicious server uses HTTP chunked encoding with crafted chunk sizes. bsc1151178 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

SUSE SLED15 / SLES15 Security Update : python (SUSE-SU-2019:2743-1)

This update for python fixes the following issues : Security issues fixed : CVE-2019-9947: Fixed an insufficient validation of URL paths with embedded whitespace or control characters that could allow HTTP header injections. bsc1130840 CVE-2019-16056: Fixed a parser issue in the email module...

SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2019:2738-1)

The SUSE Linux Enterprise 15 SP1 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2019-14835: A buffer overflow flaw was found in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer...

SUSE SLED15 / SLES15 Security Update : procps (SUSE-SU-2019:2730-1)

This update for procps fixes the following issues : procps was updated to 3.3.15. bsc1092100 Following security issues were fixed : CVE-2018-1122: Prevent local privilege escalation in top. If a user ran top with HOME unset in an attacker-controlled directory, the attacker could have achieved...

SUSE SLED15 / SLES15 Security Update : bluez (SUSE-SU-2019:1353-2)

This update for bluez fixes the following issues : Security issues fixed : CVE-2016-9797: Fixed a buffer over-read in l2capdump bsc1013708. CVE-2016-9798: Fixed a use-after-free in confopt bsc1013712. CVE-2016-9917: Fixed a heap-based buffer overflow in readn bsc1015171. CVE-2016-9802: Fixed a...

SUSE SLED15 / SLES15 Security Update : python-numpy (SUSE-SU-2019:2462-2)

This update for python-numpy fixes the following issues : Non-security issues fixed : Updated to upstream version 1.16.1. bsc1149203 jscSLE-8532 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLED15 / SLES15 Security Update : postgresql10 (SUSE-SU-2019:2707-1)

This update for postgresql10 fixes the following issues : Security issue fixed : CVE-2019-10208: Fixed arbitrary SQL execution via suitable SECURITY DEFINER function under the identity of the function owner bsc1145092. Note that Tenable Network Security has extracted the preceding description blo...

SUSE SLED15 / SLES15 Security Update : gcc7 (SUSE-SU-2019:2702-1)

This update for gcc7 to r275405 fixes the following issues : Security issues fixed : CVE-2019-14250: Fixed an integer overflow in binutils bsc1142649. CVE-2019-15847: Fixed an optimization in the POWER9 backend of gcc that could reduce the entropy of the random number generator bsc1149145...

SUSE SLED15 / SLES15 Security Update : libpcap (SUSE-SU-2019:2673-1)

This update for libpcap fixes the following issues : CVE-2019-15165: Added sanity checks for PHB header length before allocating memory bsc1153332. CVE-2018-16301: Fixed a buffer overflow bsc1153332. Note that Tenable Network Security has extracted the preceding description block directly from th...

SUSE SLED15 / SLES15 Security Update : tcpdump (SUSE-SU-2019:2674-1)

This update for tcpdump fixes the following issues : CVE-2017-16808: Fixed a heap-based buffer over-read related to aoeprint and lookupemem bsc1068716 bsc1153098. CVE-2018-10103: Fixed a mishandling of the printing of SMB data bsc1153098. CVE-2018-10105: Fixed a mishandling of the printing of SMB...