SUSE SLED15 / SLES15 Security Update : libtasn1 (SUSE-SU-2019:1372-2)

This update for libtasn1 fixes the following issues : Security issue fixed : CVE-2018-1000654: Fixed a denial of service in the asn1 parser bsc1105435. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted ...

SUSE SLED15 / SLES15 Security Update : cronie (SUSE-SU-2019:1389-2)

This update for cronie fixes the following issues : Security issues fixed : CVE-2019-9704: Fixed an insufficient check in the return value of calloc which could allow a local user to create Denial of Service by crashing the daemon bsc1128937. CVE-2019-9705: Fixed an implementation vulnerability...

SUSE SLES15 Security Update : helm-mirror (SUSE-SU-2019:0048-2)

This update for helm-mirror to version 0.2.1 fixes the following issues : Security issues fixed : CVE-2018-16873: Fixed a remote command execution bsc1118897 CVE-2018-16874: Fixed a directory traversal in 'go get' via curly braces in import path bsc1118898 CVE-2018-16875: Fixed a CPU denial of...

SUSE SLED15 / SLES15 Security Update : libu2f-host, pam_u2f (SUSE-SU-2019:1750-1)

This update for libu2f-host and pamu2f to version 1.0.8 fixes the following issues : Security issues fixed for libu2f-host : CVE-2019-9578: Fixed a memory leak due to a wrong parse of init's response bsc1128140. Security issues fixed for pamu2f: CVE-2019-12209: Fixed an issue where symlinks in th...

SUSE SLED15 / SLES15 Security Update : python-Twisted (SUSE-SU-2019:1731-1)

This update for python-Twisted fixes the following issue : Security issue fixed : CVE-2019-12387: Fixed an improper sanitization of URIs or HTTP which could have allowed attackers to perfrom CRLF attacks bsc1137825. Note that Tenable Network Security has extracted the preceding description block...

SUSE SLED15 / SLES15 Security Update : nmap (SUSE-SU-2019:1290-2)

This update for nmap fixes the following issues : Security issue fixed : CVE-2018-15173: Fixed a remote denial of service attack via a crafted TCP-based service bsc1104139. Non-security issue fixed: Add missing runtime dependency python-xml which prevented zenmap from starting bsc1133512. Note th...

SUSE SLED15 / SLES15 Security Update : bzip2 (SUSE-SU-2019:1206-2)

This update for bzip2 fixes the following issues : Security issue fixed : CVE-2016-3189: Fixed a use-after-free in bzip2recover bsc985657. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLED15 / SLES15 Security Update : taglib (SUSE-SU-2019:1374-2)

This update for taglib fixes the following issues : CVE-2018-11439: The TagLib::Ogg::FLAC::File::scan function allowed remote attackers to cause information disclosure heap-based buffer over-read via a crafted audio file bsc1096180 Note that Tenable Network Security has extracted the preceding...

SUSE SLED15 / SLES15 Security Update : evolution (SUSE-SU-2019:1266-2)

This update for evolution fixes the following issues : Security issue fixed : CVE-2018-15587: Fixed an issue with spoofed pgp signatures by using specially crafted emails bsc1125230. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

SUSE SLED15 / SLES15 Security Update : graphviz (SUSE-SU-2019:1267-2)

This update for graphviz fixes the following issues : Security issue fixed : CVE-2019-11023: Fixed a denial of service vulnerability, which was caused by a NULL pointer dereference in agroot bsc1132091. Note that Tenable Network Security has extracted the preceding description block directly from...

SUSE SLED15 / SLES15 Security Update : gvfs (SUSE-SU-2019:1717-1)

This update for gvfs fixes the following issues : Security issues fixed : CVE-2019-12795: Fixed a vulnerability which could have allowed attacks via local D-Bus method calls bsc1137930. CVE-2019-12447: Fixed an improper handling of file ownership in daemon/gvfsbackendadmin.c due to no use of...

SUSE SLED15 / SLES15 Security Update : gnutls (SUSE-SU-2019:1351-2)

This update for gnutls fixes the following issues : Security issue fixed : CVE-2018-16868: Fixed Bleichenbacher-like side channel leakage in PKCS1 v1.5 verification bsc1118087. Non-security issue fixed: Explicitly require libnettle 3.4.1 to prevent missing symbol errors bsc1134856. Note that...

SUSE SLED15 / SLES15 Security Update : 389-ds (SUSE-SU-2019:1207-2)

This update for 389-ds fixes the following issues : The following security vulnerabilities were addressed : CVE-2018-10850: Fixed a race condition on reference counter that would lead to a denial of service using persistent search bsc1096368 CVE-2017-15134: Fixed a remote denial of service via...

SUSE SLED15 / SLES15 Security Update : libxslt (SUSE-SU-2019:1221-2)

This update for libxslt fixes the following issues : Security issue fixed : CVE-2019-11068: Fixed a protection mechanism bypass where callers of xsltCheckRead and xsltCheckWrite would permit access upon receiving an error bsc1132160. Note that Tenable Network Security has extracted the preceding...

SUSE SLED15 / SLES15 Security Update : curl (SUSE-SU-2019:1357-2)

This update for curl fixes the following issues : Security issue fixed : CVE-2019-5436: Fixed a heap buffer overflow exists in tftpreceivepacket that receives data from a TFTP server bsc1135170. Note that Tenable Network Security has extracted the preceding description block directly from the SUS...

SUSE SLED15 / SLES15 Security Update : java-1_8_0-ibm (SUSE-SU-2019:1308-2)

This update for java-180-ibm fixes the following issues : Update to Java 8.0 Service Refresh 5 Fix Pack 35. Security issues fixed : CVE-2019-10245: Fixed Java bytecode verifier issue causing crashes bsc1134718. CVE-2019-2698: Fixed out of bounds access flaw in the 2D component bsc1132729...

SUSE SLED15 / SLES15 Security Update : libvirt (SUSE-SU-2019:1643-1)

This update for libvirt fixes the following issues : Security issues fixed : CVE-2019-10161: Fixed virDomainSaveImageGetXMLDesc API which could accept a path parameter pointing anywhere on the system and potentially leading to execution of a malicious file with root privileges by libvirtd...

SUSE SLED15 / SLES15 Security Update : dbus-1 (SUSE-SU-2019:1595-1)

This update for dbus-1 fixes the following issues : Security issue fixed : CVE-2019-12749: Fixed an implementation flaw in DBUSCOOKIESHA1 which could have allowed local attackers to bypass authentication bsc1137832. Note that Tenable Network Security has extracted the preceding description block...

SUSE SLED15 / SLES15 Security Update : libvirt (SUSE-SU-2019:1637-1)

This update for libvirt fixes the following issues : Security issues fixed : CVE-2019-10161: Fixed virDomainSaveImageGetXMLDesc API which could accept a path parameter pointing anywhere on the system and potentially leading to execution of a malicious file with root privileges by libvirtd...

SUSE SLED15 / SLES15 Security Update : dbus-1 (SUSE-SU-2019:1597-1)

This update for dbus-1 fixes the following issue : Security issue fixed : CVE-2019-12749: Fixed an implementation flaw in DBUSCOOKIESHA1 which could have allowed local attackers to bypass authentication bsc1137832. Note that Tenable Network Security has extracted the preceding description block...