SUSE SLED15 / SLES15 Security Update : containerd, docker, docker-runc, golang-github-docker-libnetwork, runc (SUSE-SU-2019:0495-1)

This update for containerd, docker, docker-runc, golang-github-docker-libnetwork, runc fixes the following issues : Security issues fixed : CVE-2018-16875: Fixed a CPU Denial of Service bsc1118899. CVE-2018-16874: Fixed a vulnerabity in go get command which could allow directory traversal in GOPA...

SUSE SLED15 / SLES15 Security Update : gvfs (SUSE-SU-2019:0438-1)

This update for gvfs fixes the following issues : Security vulnerability fixed : CVE-2019-3827: Fixed an issue whereby an unprivileged user was not prompted to give a password when acessing root owned files. bsc1125084 Note that Tenable Network Security has extracted the preceding description blo...

SUSE SLED15 / SLES15 Security Update : libqt5-qtbase (SUSE-SU-2019:0447-1)

This update for libqt5-qtbase provides the following fixes : Security issues fixed : CVE-2018-15518: Fixed double free in QXmlStreamReader bsc1118595 CVE-2018-19873: Fixed Denial of Service on malformed BMP file in QBmpHandler bsc1118596 Non-security issues fixed: Fix dynamic loading of libGL...

SUSE SLED15 / SLES15 Security Update : qemu (SUSE-SU-2019:0423-1)

This update for qemu fixes the following issues : Security issues fixed : CVE-2019-6778: Fixed a heap buffer overflow issue in the SLiRP networking implementation bsc1123156. CVE-2018-16872: Fixed a host security vulnerability related to handling symlinks in usb-mtp bsc1119493. CVE-2018-19489:...

SUSE SLES15 Security Update : dovecot23 (SUSE-SU-2019:0414-1)

This update for dovecot23 fixes the following issues : dovecot was updated to 2.3.3 release, bringing lots of bugfixes bsc1124356. Also the following security issue was fixed : CVE-2019-3814: A vulnerability in Dovecot related to SSL client certificate authentication was fixed bsc1123022 The...

SUSE SLED15 / SLES15 Security Update : python-numpy (SUSE-SU-2019:0418-1)

This update for python-numpy fixes the following issue : Security issue fixed : CVE-2019-6446: Set allowpickle to false by default to restrict loading untrusted content bsc1122208. With this update we decrease the possibility of allowing remote attackers to execute arbitrary code by misusing...

SUSE SLED15 / SLES15 Security Update : systemd (SUSE-SU-2019:0426-1)

This update for systemd fixes the following issues : CVE-2019-6454: Overlong DBUS messages could be used to crash systemd bsc1125352 units: make sure initrd-cleanup.service terminates before switching to rootfs bsc1123333 logind: fix bad error propagation login: log session state 'closing' as wel...

SUSE SLES15 Security Update : docker-runc (SUSE-SU-2019:0362-1)

This update for docker-runc fixes the following issues : Security issue fixed : CVE-2019-5736: Effectively copying /proc/self/exe during re-exec to avoid write attacks to the host runc binary, which could lead to a container breakout bsc1121967 Note that Tenable Network Security has extracted the...

SUSE SLED15 / SLES15 Security Update : docker (SUSE-SU-2019:0286-1)

This update for containerd, docker, docker-runc and golang-github-docker-libnetwork fixes the following issues : Security issues fixed for containerd, docker, docker-runc and golang-github-docker-libnetwork : CVE-2018-16873: cmd/go: remote command execution during 'go get -u' bsc1118897...

SUSE SLED15 / SLES15 Security Update : LibVNCServer (SUSE-SU-2019:0283-1)

This update for LibVNCServer fixes the following issues : Security issues fixed : CVE-2018-20749: Fixed a heap out of bounds write vulnerability in rfbserver.c bsc1123828 CVE-2018-20750: Fixed a heap out of bounds write vulnerability in rfbserver.c bsc1123832 CVE-2018-20748: Fixed multiple heap...

SUSE SLED15 / SLES15 Security Update : avahi (SUSE-SU-2019:0285-1)

This update for avahi fixes the following issues : Security issue fixed : CVE-2018-1000845: Fixed DNS amplification and reflection to spoofed addresses DOS bsc1120281 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable...

SUSE SLES15 Security Update : rmt-server (SUSE-SU-2019:0272-1)

This update for rmt-server to version 1.1.1 fixes the following issues : The following issues have been fixed : Fixed migration problems which caused some extensions / modules to be dropped bsc1118584, bsc1118579 Fixed listing of mirrored products bsc1102193 Include online migration paths into...

SUSE SLED15 / SLES15 Security Update : python (SUSE-SU-2019:0271-1)

This update for python fixes the following issues : Security issue fixed : CVE-2019-5010: Fixed a denial-of-service vulnerability in the X509 certificate parser bsc1122191 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE SLED15 / SLES15 Security Update : MozillaFirefox (SUSE-SU-2019:0273-1)

This update for MozillaFirefox, mozilla-nss fixes the following issues : Security issues fixed : CVE-2018-18500: Fixed a use-after-free parsing HTML5 stream bsc1122983. CVE-2018-18501: Fixed multiple memory safety bugs bsc1122983. CVE-2018-18505: Fixed a privilege escalation through IPC channel...

SUSE SLED15 / SLES15 Security Update : lua53 (SUSE-SU-2019:0247-1)

This update for lua53 fixes the following issues : Security issue fixed : CVE-2019-6706: Fixed a use-after-free bug in the luaupvaluejoin function of lapi.c bsc1123043 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenabl...

SUSE SLES15 Security Update : spice (SUSE-SU-2019:0242-1)

This update for spice fixes the following issues : Security issue fixed : CVE-2019-3813: Fixed a out-of-bounds read in the memslotgetvirt function that could lead to denial-of-service or code-execution bsc1122706. Non-security issue fixed: Include spice-server tweak to compensate for performance...

SUSE SLED15 / SLES15 Security Update : uriparser (SUSE-SU-2019:0228-1)

This update for uriparser fixes the following issues : Security issues fixed : CVE-2018-20721: Fixed an out-of-bounds read for incomplete URIs with IPv6 addresses with embedded IPv4 address bsc1122193. CVE-2018-19198: Fixed an out-of-bounds write that was possible via the uriComposeQuery or...

SUSE SLED15 / SLES15 Security Update : curl (SUSE-SU-2019:0248-1)

This update for curl fixes the following issues : Security issues fixed : CVE-2019-3823: Fixed a heap out-of-bounds read in the code handling the end-of-response for SMTP bsc1123378. CVE-2019-3822: Fixed a stack-based buffer overflow in the function creating an outgoing NTLM type-3 message...

SUSE SLED15 / SLES15 Security Update : python3 (SUSE-SU-2019:0215-1)

This update for python3 fixes the following issues : Security issue fixed : CVE-2019-5010: Fixed a denial-of-service vulnerability in the X509 certificate parser bsc1122191 CVE-2018-20406: Fixed a integer overflow via a large LONGBINPUT bsc1120644 Note that Tenable Network Security has extracted...

SUSE SLED15 / SLES15 Security Update : subversion (SUSE-SU-2019:0195-1)

This update for subversion fixes the following issues : Security issue fixed : CVE-2018-11803: Fixed a vulnerability that allowed malicious SVN clients to trigger a crash in moddavsvn by omitting the root path from a recursive directory listing request bsc1122842 Note that Tenable Network Securit...