SUSE SLED15 / SLES15 Security Update : python (SUSE-SU-2019:0972-1)

This update for python fixes the following issues : Security issues fixed : CVE-2019-9948: Fixed a 'file:' blacklist bypass in URIs by using the 'local-file:' scheme instead bsc1130847. CVE-2019-9636: Fixed an information disclosure because of incorrect handling of Unicode encoding during NFKC...

SUSE SLED15 / SLES15 Security Update : xerces-c (SUSE-SU-2019:0977-1)

This update for xerces-c fixes the following issue : CVE-2017-12627: Processing of external DTD paths could have resulted in a NULL pointer dereference under certain conditions bsc1083630 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE...

SUSE SLED15 / SLES15 Security Update : python3 (SUSE-SU-2019:0971-1)

This update for python3 fixes the following issues : Security issue fixed : CVE-2019-9636: Fixed an information disclosure because of incorrect handling of Unicode encoding during NFKC normalization bsc1129346. Note that Tenable Network Security has extracted the preceding description block...

SUSE SLED15 / SLES15 Security Update : slurm (SUSE-SU-2019:0960-1)

This update for slurm to version 17.11.13 fixes the following issues : Security issue fixed : CVE-2019-6438: Fixed a heap overflow on 32-bit systems in xmalloc bsc1123304. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE SLED15 / SLES15 Security Update : openexr (SUSE-SU-2019:0954-1)

This update for openexr fixes the following issues : Security issue fixed : CVE-2018-18444: Fixed Out-of-bounds write in makeMultiView.cpp bsc1113455. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted t...

SUSE SLED15 / SLES15 Security Update : SDL2 (SUSE-SU-2019:0950-1)

This update for SDL2 fixes the following issues : Security issues fixed : CVE-2019-7572: Fixed a buffer over-read in IMAADPCMnibble in audio/SDLwave.c.bsc1124806. CVE-2019-7578: Fixed a heap-based buffer over-read in InitIMAADPCM in audio/SDLwave.c bsc1125099. CVE-2019-7576: Fixed heap-based buff...

SUSE SLED15 / SLES15 Security Update : libvirt (SUSE-SU-2019:0936-1)

This update for libvirt provides the following fixes : Security issue fixed : CVE-2019-3840: Fixed a NULL pointer dereference vulnerability in virJSONValueObjectHasKey function which could have resulted in a remote denial of service via the guest agent bsc1127458. Other issues addressed: apparmor...

SUSE SLED15 / SLES15 Security Update : audiofile (SUSE-SU-2019:0940-1)

This update for audiofile fixes the following issues : Security issue fixed : CVE-2018-13440: Return AFFAIL instead of causing NULL pointer dereferences later bsc1100523. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE SLED15 / SLES15 Security Update : wget (SUSE-SU-2019:0925-1)

This update for wget fixes the following issues : Security issue fixed : CVE-2019-5953: Fixed a buffer overflow vulnerability which might cause code execution bsc1131493. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE SLED15 / SLES15 Security Update : tar (SUSE-SU-2019:0926-1)

This update for tar fixes the following issues : Security issues fixed : CVE-2019-9923: Fixed a denial of service while parsing certain archives with malformed extended headers in paxdecodeheader bsc1130496. CVE-2018-20482: Fixed a denial of service when the '--sparse' option mishandles file...

SUSE SLED15 / SLES15 Security Update : libqt5-qtbase (SUSE-SU-2019:0927-1)

This update for libqt5-qtbase fixes the following issues : Security issues fixed : CVE-2018-19872: Fixed an issue which could allow a division by zero leading to crash bsc1130246. CVE-2018-19870: Fixed an improper check in QImage allocation which could allow Denial of Service when opening crafted...

SUSE SLES15 Security Update : xmltooling (SUSE-SU-2019:0929-1)

This update for xmltooling fixes the following issues : Security issue fixed : CVE-2019-9628: Fixed an improper handling of exception in XMLTooling library which could result in denial of service against the application using XMLTooling bsc1129537. Note that Tenable Network Security has extracted...

SUSE SLED15 / SLES15 Security Update : flac (SUSE-SU-2019:0920-1)

This update for flac fixes the following issues : CVE-2017-6888: An error in the 'readmetadatavorbiscomment' function could be exploited to cause a memory leak via a specially crafted FLAC file bsc1091045. Note that Tenable Network Security has extracted the preceding description block directly...

SUSE SLED15 / SLES15 Security Update : blktrace (SUSE-SU-2019:0919-1)

This update for blktrace fixes the following issues : CVE-2018-10689: Prevent buffer overflow in the devmapread function because the device and devno arrays were too small bsc1091942 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

SUSE SLED15 / SLES15 Security Update : glibc (SUSE-SU-2019:0903-1)

This update for glibc fixes the following issues : Security issue fixed : CVE-2016-10739: Fixed an improper implementation of getaddrinfo function which could allow applications to incorrectly assume that had parsed a valid string, without the possibility of embedded HTTP headers or other...

SUSE SLES15 Security Update : gnuplot (SUSE-SU-2019:0904-1)

This update for gnuplot fixes the following issues : Security issues fixed : CVE-2018-19492: Fixed a buffer overflow in cairotrmoptions function bsc1117463 CVE-2018-19491: Fixed a buffer overlow in the PSoptions function bsc1117464 CVE-2018-19490: Fixed a heap-based buffer overflow in the...

SUSE SLED15 / SLES15 Security Update : webkit2gtk3 (SUSE-SU-2019:0890-1)

This update for webkit2gtk3 to version 2.24.0 fixes the following issue : Security issue fixed : CVE-2019-8375: Fixed an issue in UIProcess subsystem which could allow the script dialog size to exceed the web view size leading to Buffer Overflow or other unspecified impact bsc1126768. Note that...

SUSE SLED15 / SLES15 Security Update : MozillaFirefox (SUSE-SU-2019:0871-1)

This update for MozillaFirefox to version ESR 60.6.1 fixes the following issues : Security issuess addressed : update to Firefox ESR 60.6.1 bsc1130262 : CVE-2019-9813: Fixed Ionmonkey type confusion with proto mutations CVE-2019-9810: Fixed IonMonkey MArraySlice incorrect alias information Update...

SUSE SLES15 Security Update : dovecot23 (SUSE-SU-2019:0876-1)

This update for dovecot23 fixes the following issue : Security issue fixed : CVE-2019-7524: Fixed an improper file handling which could result in stack oveflow allowing local root escalation bsc1130116. Note that Tenable Network Security has extracted the preceding description block directly from...

SUSE SLED15 / SLES15 Security Update : apache2 (SUSE-SU-2019:0873-1)

This update for apache2 fixes the following issues : CVE-2019-0211: A flaw in the Apache HTTP Server allowed less-privileged child processes or threads to execute arbitrary code with the privileges of the parent process. Attackers with control over CGI scripts or extension modules run by the serv...