SUSE SLED15 / SLES15 Security Update : expat (SUSE-SU-2019:2429-1)

This update for expat fixes the following issues : Security issues fixed : CVE-2019-15903: Fixed heap-based buffer over-read caused by crafted XML input. bsc1149429 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable h...

SUSE SLED15 / SLES15 Security Update : libopenmpt (SUSE-SU-2019:2435-1)

This update for libopenmpt fixes the following issues : Security issues fixed : CVE-2018-20861: Fixed crash with certain malformed custom tunings in MPTM files bsc1143578. CVE-2018-20860: Fixed crash with malformed MED files bsc1143581. CVE-2019-14383: Fixed J2B that allows an assertion failure...

SUSE SLED15 / SLES15 Security Update : kernel-source-rt (SUSE-SU-2019:2430-1) (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout) (SACK Panic) (SACK Slowness) (Spectre)

The SUSE Linux Enterprise 15 SP1 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2018-12126 CVE-2018-12127 CVE-2018-12130: Microarchitectural Store Buffer Data Sampling MSBDS: Stored buffers on some microprocessors utilizing speculative...

SUSE SLED15 / SLES15 Security Update : nmap (SUSE-SU-2019:2425-1)

This update for nmap fixes the following issues : Security issue fixed : CVE-2017-18594: Fixed a denial of service condition due to a double free when an SSH connection fails. bsc1148742 Non-security issue fixed: Fixed a regression in the version scanner caused, by the fix for CVE-2018-15173...

SUSE SLED15 / SLES15 Security Update : ibus (SUSE-SU-2019:2427-1)

This update for ibus fixes the following issues : CVE-2019-14822: Fixed misconfiguration of the DBus server allows to unprivileged user could monitor and send method calls to the ibus bus of another user bsc1150011. Note that Tenable Network Security has extracted the preceding description block...

SUSE SLED15 / SLES15 Security Update : openssl-1_1 (SUSE-SU-2019:2410-1)

This update for openssl-11 fixes the following issues : OpenSSL Security Advisory 10 September 2019 CVE-2019-1547: Added ECGROUPsetgenerator side channel attack avoidance. bsc1150003 CVE-2019-1563: Fixed Bleichenbacher attack against cms/pkcs7 encryption transported key bsc1150250 Note that Tenab...

SUSE SLED15 / SLES15 Security Update : python-SQLAlchemy (SUSE-SU-2019:2253-2)

This update for python-SQLAlchemy fixes the following issues : Security issues fixed : CVE-2019-7164: Fixed SQL Injection via the orderby parameter bsc1124593. CVE-2019-7548: Fixed SQL Injection via the groupby parameter bsc1124593. Note that Tenable Network Security has extracted the preceding...

SUSE SLED15 / SLES15 Security Update : openldap2 (SUSE-SU-2019:2395-1)

This update for openldap2 fixes the following issues : Security issue fixed : CVE-2019-13565: Fixed an authentication bypass when using SASL authentication and session encryption bsc1143194. CVE-2019-13057: Fixed an issue with delegated database admin privileges bsc1143273. CVE-2017-17740: When...

SUSE SLED15 / SLES15 Security Update : openssl-1_1 (SUSE-SU-2019:2403-1)

This update for openssl-11 fixes the following issues : OpenSSL Security Advisory 10 September 2019 CVE-2019-1547: Added ECGROUPsetgenerator side channel attack avoidance. bsc1150003 CVE-2019-1563: Fixed Bleichenbacher attack against cms/pkcs7 encryption transported key bsc1150250 Note that Tenab...

SUSE SLED15 / SLES15 Security Update : libreoffice (SUSE-SU-2019:2402-1)

This update for libreoffice fixes the following issues : Updated to version 6.2.7.1. Security issues fixed : CVE-2019-9849: Disabled fetching remote bullet graphics in 'stealth mode' bsc1141861. CVE-2019-9848: Fixed an arbitrary script execution via LibreLogo bsc1141862. CVE-2019-9851: Fixed...

SUSE SLED15 / SLES15 Security Update : ibus (SUSE-SU-2019:2387-1)

This update for ibus fixes the following issues : Security issue fixed : CVE-2019-14822: Fixed a misconfiguration of the DBus server that allowed an unprivileged user to monitor and send method calls to the ibus bus of another user. bsc1150011 Note that Tenable Network Security has extracted the...

SUSE SLED15 / SLES15 Security Update : util-linux / shadow (SUSE-SU-2019:2392-1)

This update for util-linux and shadow fixes the following issues : util-linux : Fixed an issue where PATH settings in /etc/default/su being ignored bsc1121197 Prevent outdated pam files bsc1082293. Do not trim read-only volumes bsc1106214. Integrate pamkeyinit pam module to login bsc1081947...

SUSE SLED15 / SLES15 Security Update : curl (SUSE-SU-2019:2373-1)

This update for curl fixes the following issues : Security issues fixed : CVE-2019-5481: Fixed FTP-KRB double-free during kerberos FTP data transfer bsc1149495. CVE-2019-5482: Fixed TFTP small blocksize heap buffer overflow bsc1149496. Note that Tenable Network Security has extracted the precedin...

SUSE SLES15 Security Update : podman (SUSE-SU-2019:2346-1)

This update for podman fixes the following issues : Security issue fixed : CVE-2019-10214: Fixed missing enforcement of TLS connections. bsc1144065 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLED15 / SLES15 Security Update : ghostscript (SUSE-SU-2019:2348-1)

This update for ghostscript fixes the following issues : Security issue fixed : CVE-2019-10216: Fix privilege escalation via specially crafted PostScript file bsc1144621. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE SLES15 Security Update : skopeo (SUSE-SU-2019:2340-1)

This update for skopeo fixes the following issues : Security issues fixed : CVE-2019-10214: Fixed missing enforcement of TLS connections bsc1144065. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLED15 / SLES15 Security Update : libgcrypt (SUSE-SU-2019:2349-1)

This update for libgcrypt fixes the following issues : Security issues fixed : CVE-2019-13627: Mitigated ECDSA timing attack. bsc1148987 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automaticall...

SUSE SLES15 Security Update : buildah (SUSE-SU-2019:2341-1)

This update for buildah fixes the following issues : Security issue fixed : CVE-2019-10214: Fixed missing enforcement of TLS connections. bsc1144065 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLES15 Security Update : nginx (SUSE-SU-2019:2309-1) (0-Length Headers Leak) (Data Dribble) (Resource Loop)

This update for nginx fixes the following issues : Security issues fixed : CVE-2019-9511: Fixed a denial of service by manipulating the window size and stream prioritization bsc1145579. CVE-2019-9513: Fixed a denial of service caused by resource loops bsc1145580. CVE-2019-9516: Fixed a denial of...

SUSE SLED15 / SLES15 Security Update : java-1_8_0-ibm (SUSE-SU-2019:2291-1)

This update for java-180-ibm fixes the following issues : Update to Java 8.0 Service Refresh 5 Fix Pack 40. Security issues fixed : CVE-2019-11771: IBM Security Update July 2019 bsc1147021 CVE-2019-11772: IBM Security Update July 2019 bsc1147021 CVE-2019-11775: IBM Security Update July 2019...