SUSE SLED15 / SLES15 Security Update : dbus-1 (SUSE-SU-2019:1595-1)

This update for dbus-1 fixes the following issues : Security issue fixed : CVE-2019-12749: Fixed an implementation flaw in DBUSCOOKIESHA1 which could have allowed local attackers to bypass authentication bsc1137832. Note that Tenable Network Security has extracted the preceding description block...

SUSE SLED15 / SLES15 Security Update : SDL2 (SUSE-SU-2019:1605-1)

This update for SDL2 fixes the following issues : Remove the fix for CVE-2019-7637, the modification of function SDLCalculatePitch is only suited for SDL not SDL2, and breaks SDL2 software. bsc1134135 Note that Tenable Network Security has extracted the preceding description block directly from t...

SUSE SLED15 / SLES15 Security Update : Recommended update for evince (SUSE-SU-2019:1648-1)

This update for evince provides the following fixes : Security issue fixed : CVE-2019-11459: Fixed an improper error handling in which could have led to use of unitialized use of memory bsc1133037. Other issue addressed: Removed Supplements from psdocument package, so that it isn't pulled in by...

SUSE SLED15 / SLES15 Security Update : exempi (SUSE-SU-2019:1603-1)

This update for exempi fixes the following issues : CVE-2018-12648: Fixed a NULL pointer dereference crash issue when processing webp files bsc1098946. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted ...

SUSE SLED15 / SLES15 Security Update : MozillaFirefox (SUSE-SU-2019:1629-1)

This update for MozillaFirefox to version 60.7.1 fixes the following issues : Security issue fixed : CVE-2019-11707: Fixed a type confusion vulnerability in Arrary.pop bsc1138614 Other issues addressed: Added the new Mozilla's GPG key expiring on 2021-05-29 to the mozilla.keyring file Fixed broke...

SUSE SLED15 / SLES15 Security Update : glib2 (SUSE-SU-2019:1594-1)

This update for glib2 fixes the following issues : Security issue fixed : CVE-2019-12450: Fixed an improper file permission when copy operation takes place bsc1137001. Other issue addressed: glib2 was handling an UNKNOWN connectivity state from NetworkManager as if there was a connection thus...

SUSE SLED15 / SLES15 Security Update : wireshark (SUSE-SU-2019:1607-1)

This update for wireshark to version 2.4.15 fixes the following issues : Security issue fixed : Fixed a denial of service in the dissection engine bsc1136021. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

SUSE SLED15 / SLES15 Security Update : samba (SUSE-SU-2019:1574-1)

"This update for samba fixes the following issues : Security issues fixed : CVE-2019-12435: zone operations can crash rpc server; bso13922 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SUSE update advisory SUSE-SU-2019:1574-1. The text...

SUSE SLED15 / SLES15 Security Update : docker (SUSE-SU-2019:1562-1)

This update for docker fixes the following issues : Security issue fixed : CVE-2018-15664: Fixed an issue which could make docker cp vulnerable to symlink-exchange race attacks bsc1096726. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE...

SUSE SLED15 / SLES15 Security Update : netpbm (SUSE-SU-2019:1525-1)

This update for netpbm fixes the following issues : Security issues fixed : CVE-2017-2579: Fixed out-of-bounds read in expandCodeOntoStack bsc1024288. CVE-2017-2580: Fixed out-of-bounds write of heap data in addPixelToRaster function bsc1024291. create netpbm-vulnerable subpackage and move pstopn...

SUSE SLED15 / SLES15 Security Update : dbus-1 (SUSE-SU-2019:1521-1)

This update for dbus-1 fixes the following issues : Security issue fixed : CVE-2019-12749: Fixed an implementation flaw in DBUSCOOKIESHA1 which could have allowed local attackers to bypass authentication bsc1137832. Fixes in spec file : - fix warning and error messages. - fix licensing directory...

SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2019:1535-1) (SACK Panic) (SACK Slowness)

The SUSE Linux Enterprise 15 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2019-11477: A sequence of SACKs may have been crafted such that one can trigger an integer overflow, leading to a kernel panic. CVE-2019-11478: It was...

SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2019:1529-1) (SACK Panic) (SACK Slowness)

The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2019-11477: A sequence of SACKs may have been crafted such that one can trigger an integer overflow, leading to a kernel panic. CVE-2019-11478: It was possible to...

SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2019:1523-1)

This update for ImageMagick fixes the following issues : Security issues fixed : CVE-2019-11472: Fixed a denial-of-service in ReadXWDImage bsc1133204. CVE-2019-11470: Fixed a denial-of-service in ReadCINImage bsc1133205. CVE-2019-11506: Fixed a heap-based buffer overflow in the WriteMATLABImage...

SUSE SLED15 / SLES15 Security Update : libvirt (SUSE-SU-2019:1490-1) (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)

This update for libvirt fixes the following issues : Four new speculative execution information leak issues have been identified in Intel CPUs. bsc1111331 CVE-2018-12126: Microarchitectural Store Buffer Data Sampling MSBDS CVE-2018-12127: Microarchitectural Fill Buffer Data Sampling MFBDS...

SUSE SLED15 / SLES15 Security Update : containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork (SUSE-SU-2019:1234-2)

This update for containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork fixes the following issues : Security issues fixed : CVE-2019-5736: containerd: Fixing container breakout vulnerability bsc1121967. CVE-2019-6486: go security release, fixing crypto/elliptic CPU D...

SUSE SLED15 / SLES15 Security Update : elfutils (SUSE-SU-2019:1486-1)

This update for elfutils fixes the following issues : Security issues fixed : CVE-2017-7607: Fixed a heap-based buffer overflow in handlegnuhash bsc1033084 CVE-2017-7608: Fixed a heap-based buffer overflow in eblobjectnotetypename bsc1033085 CVE-2017-7609: Fixed a memory allocation failure in...

SUSE SLED15 / SLES15 Security Update : sssd (SUSE-SU-2019:1476-1)

This update for sssd fixes the following issues : Security issue fixed : CVE-2018-16838: Fixed an authentication bypass related to the Group Policy Objects implementation bsc1124194. Non-security issues fixed: Allow defaults sudoRole without sudoUser attribute bsc1135247 Missing GPOs directory...

SUSE SLED15 / SLES15 Security Update : gnome-shell (SUSE-SU-2019:1459-1)

This update for gnome-shell fixes the following issues : Security issue fixed : CVE-2019-3820: Fixed a partial lock screen bypass bsc1124493. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLED15 / SLES15 Security Update : php7 (SUSE-SU-2019:1461-1)

This update for php7 fixes the following issues : Security issues fixed : CVE-2019-9637: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension bsc1128892. CVE-2019-9675: Fixed improper implementation of rename function and multiple invalid memory...