SUSE SLED15 / SLES15 Security Update : openssl-1_1 (SUSE-SU-2019:0197-1)

This update for openssl-11 fixes the following issues : Security issues fixed : The 9 Lives of Bleichenbacher's CAT: Cache Attacks on TLS Implementations bsc1117951 Fix FIPS RSA generator bsc1118913 Note that Tenable Network Security has extracted the preceding description block directly from the...

SUSE SLED15 / SLES15 Security Update : krb5 (SUSE-SU-2019:0175-1)

This update for krb5 fixes the following issues : Security issues fixed : CVE-2018-5729, CVE-2018-5730: Fixed multiple flaws in LDAP DN checking bsc1083926, bsc1083927 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenabl...

SUSE SLED15 / SLES15 Security Update : ghostscript (SUSE-SU-2019:0145-1)

This update for ghostscript version 9.26a fixes the following issues : Security issue fixed : CVE-2019-6116: subroutines within pseudo-operators must themselves be pseudo-operators bsc1122319 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE...

SUSE SLED15 / SLES15 Security Update : openssh (SUSE-SU-2019:0126-1)

This update for openssh fixes the following issues : Security issues fixed : CVE-2018-20685: Fixed an issue where scp client allows remote SSH servers to bypass intended access restrictions bsc1121571 CVE-2019-6109: Fixed an issue where the scp client would allow malicious remote SSH servers to...

SUSE SLES15 Security Update : nodejs8 (SUSE-SU-2019:0118-1)

This update for nodejs8 to version 8.15.0 fixes the following issues : Security issues fixed : CVE-2018-12121: Fixed a Denial of Service with large HTTP headers bsc1117626 CVE-2018-12122: Fixed the 'Slowloris' HTTP Denial of Service bsc1117627 CVE-2018-12116: Fixed HTTP request splitting bsc11176...

SUSE SLED15 / SLES15 Security Update : wireshark (SUSE-SU-2019:0130-1)

This update for wireshark to version 2.4.12 fixes the following issues : Security issues fixed : CVE-2019-5717: Fixed a denial of service in the PMUL dissector bsc1121232 CVE-2019-5718: Fixed a denial of service in the RTSE dissector and other dissectors bsc1121233 CVE-2019-5719: Fixed a denial o...

SUSE SLED15 / SLES15 Security Update : systemd (SUSE-SU-2019:0137-1)

This update for systemd provides the following fixes : Security issues fixed : CVE-2018-16864, CVE-2018-16865: Fixed two memory corruptions through attacker-controlled allocas bsc1120323 CVE-2018-16866: Fixed an information leak in journald bsc1120323 CVE-2018-6954: Fix mishandling of symlinks...

SUSE SLED15 / SLES15 Security Update : libraw (SUSE-SU-2019:0133-1)

This update for libraw fixes the following issues : Security issues fixed : CVE-2018-20337: Fixed a stack-based buffer overflow in the parsemakernote function of dcrawcommon.cpp bsc1120519 CVE-2018-20365: Fixed a heap-based buffer overflow in the raw2image function of librawcxx.cpp bsc1120500...

SUSE SLED15 / SLES15 Security Update : zeromq (SUSE-SU-2019:0110-1)

This update for zeromq fixes the following issues : Security issue fixed : CVE-2019-6250: fix a remote execution vulnerability due to pointer arithmetic overflow bsc1121717 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE SLED15 / SLES15 Security Update : soundtouch (SUSE-SU-2019:0112-1)

This update for soundtouch fixes the following issues : Security issues fixed : CVE-2018-17098: Fixed a heap corruption from size inconsistency, which allowed remote attackers to cause a denial of service or possibly have other unspecified impact bsc1108632 CVE-2018-17097: Fixed a double free,...

SUSE SLED15 / SLES15 Security Update : webkit2gtk3 (SUSE-SU-2019:0092-1)

This update for webkit2gtk3 to version 2.22.5 fixes the following issues : Security issues fixed : CVE-2018-4372, CVE-2018-4345, CVE-2018-4386, CVE-2018-4375, CVE-2018-4376, CVE-2018-4378, CVE-2018-4382, CVE-2018-4392, CVE-2018-4416, CVE-2018-4191, CVE-2018-4197, CVE-2018-4299, CVE-2018-4306,...

SUSE SLED15 / SLES15 Security Update : wget (SUSE-SU-2019:0093-1)

This update for wget fixes the following issues : Security issue fixed : CVE-2018-20483: Fixed an information disclosure through file metadata bsc1120382 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempte...

SUSE SLED15 / SLES15 Security Update : java-1_8_0-openjdk (SUSE-SU-2019:0058-1)

This update for java-180-openjdk to version 8u191 fixes the following issues : Security issues fixed : CVE-2018-3136: Manifest better support bsc1112142 CVE-2018-3139: Better HTTP Redirection bsc1112143 CVE-2018-3149: Enhance JNDI lookups bsc1112144 CVE-2018-3169: Improve field accesses bsc111214...

SUSE SLES15 Security Update : helm-mirror (SUSE-SU-2019:0048-1)

This update for helm-mirror to version 0.2.1 fixes the following issues : Security issues fixed : CVE-2018-16873: Fixed a remote command execution bsc1118897 CVE-2018-16874: Fixed a directory traversal in 'go get' via curly braces in import path bsc1118898 CVE-2018-16875: Fixed a CPU denial of...

SUSE SLED15 / SLES15 Security Update : gpg2 (SUSE-SU-2019:0023-1)

This update for gpg2 fixes the following issue : Security issue fixed : CVE-2018-1000858: Fixed a Cross Site Request ForgeryCSRF vulnerability in dirmngr that can result in Attacker controlled CSRF bsc1120346. Note that Tenable Network Security has extracted the preceding description block direct...

SUSE SLED15 / SLES15 Security Update : libraw (SUSE-SU-2019:0005-1)

This update for libraw fixes the following issues : Security issues fixed : The following security vulnerabilities were addressed : CVE-2018-5813: Fixed an error within the 'parseminolta' function dcraw/dcraw.c that could be exploited to trigger an infinite loop via a specially crafted file. This...

SUSE SLED15 / SLES15 Security Update : polkit (SUSE-SU-2019:0015-1)

This update for polkit fixes the following issues : Security issue fixed : CVE-2018-19788: Fixed handling of UIDs over MAXUINT bsc1118277 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatical...

SUSE SLED15 / SLES15 Security Update : python-cryptography (SUSE-SU-2018:3392-1)

This update for python-cryptography fixes the following issues : CVE-2018-10903: The finalizewithtag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalizewithtag an attacker could craft an invalid payload with a shortened tag e.g. 1...

SUSE SLED15 / SLES15 Security Update : openssl-1_1 (SUSE-SU-2018:2036-1)

This update for openssl-11 fixes the following issues : - CVE-2018-0732: During key agreement in a TLS handshake using a DHE based ciphersuite a malicious server could have sent a very large prime value to the client. This caused the client to spend an unreasonably long period of time generating ...

SUSE SLED15 / SLES15 Security Update : qemu (SUSE-SU-2018:2340-1) (Spectre)

This update for qemu to version 2.11.2 fixes the following issues: Security issue fixed : - CVE-2018-11806: Fix heap buffer overflow issue that can happen while reassembling fragmented datagrams bsc1096223. - CVE-2018-3639: Mitigation functionality for Speculative Store Bypass issue in x86...