Fedora 32 : resteasy (2020-239503f5fa)

Security fix for CVE-2020-1695 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

RHEL 7 : mariadb-galera (RHSA-2020:5379)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:5379 advisory. MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. Galera is a synchronous multi-master cluster for...

SUSE SLES12 Security Update : php7 (SUSE-SU-2020:2920-1)

This update for php7 fixes the following issues : CVE-2020-7070: Fixed an issue where percent-encoded cookies could have been used to overwrite existing prefixed cookie names bsc1177352. Added tmpfiles.d for php-fpm to provide a base for a socket bsc1173786 Note that Tenable Network Security has...

SUSE SLES12 Security Update : xen (SUSE-SU-2020:3050-1)

This update for xen fixes the following issues : bsc1177409 - VUL-0: CVE-2020-27673: xen: x86 PV guest INVLPG-like flushes may leave stale TLB entries XSA-286 bsc1177412 - VUL-0: CVE-2020-27672: xen: Race condition in Xen mapping code XSA-345 bsc1177413 - VUL-0: CVE-2020-27671: xen: undue deferra...

SUSE SLES15 Security Update : kernel (SUSE-SU-2020:2631-1)

The SUSE Linux Enterprise 15 SP1 realtime kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-14314: Fixed a potential negative array index in dosplit bsc1173798. CVE-2020-14356: Fixed a NULL pointer dereference in cgroupv2 subsystem whic...

SUSE SLED15 / SLES15 Security Update : hunspell (SUSE-SU-2020:2966-1)

This update for hunspell fixes the following issues : CVE-2019-16707: Fixed an invalid read in SuggestMgr:leftcommonsubstring bsc1151867. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatical...

SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2020:3164-1)

This update for ImageMagick fixes the following issues : CVE-2020-27560: Fixed potential denial of service in OptimizeLayerFrames function in MagickCore/layer.c bsc1178067. Fixed greyish image produced by incorrect colorspace bsc1106272. Note that Tenable Network Security has extracted the...

SUSE SLES12 Security Update : xen (SUSE-SU-2020:3415-1)

This update for xen fixes the following issues : Security issue fixed : CVE-2020-28368: Fixed the Intel RAPL sidechannel attack, aka PLATYPUS attack, aka XSA-351 bsc1178591. Non-security issue fixed : Adjusted help for --maxiters, default is 5 bsc1177950. Note that Tenable Network Security has...

SUSE SLES12 Security Update : xen (SUSE-SU-2020:2822-1)

This update for xen fixes the following issues : CVE-2020-25604: Fixed a race condition when migrating timers between x86 HVM vCPU-s bsc1176343,XSA-336 CVE-2020-25595: Fixed an issue where PCI passthrough code was reading back hardware registers bsc1176344,XSA-337 CVE-2020-25597: Fixed an issue...

SUSE SLED15 / SLES15 Security Update : dpdk (SUSE-SU-2020:2770-1)

This update for dpdk fixes the following issues : dpdk was updated to 19.11.4 CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,CVE-2020-14377,CVE-2020-1 4378: Fixed multiple issues where a malicious guest could harm the host using vhost crypto, including executing code in host VM Escape, reading host...

SUSE SLED15 / SLES15 Security Update : samba (SUSE-SU-2020:3092-1)

This update for samba fixes the following issues : CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records bsc1177613. CVE-2020-14323: Unprivileged user can crash winbind bsc1173994. CVE-2020-14318: Missing permissions check in SMB1/2/3 ChangeNotify bsc1173902...

SUSE SLED15 / SLES15 Security Update : MozillaFirefox (SUSE-SU-2020:3383-1)

This update for MozillaFirefox fixes the following issues : Firefox Extended Support Release 78.5.0 ESR bsc1178824 - CVE-2020-26951: Parsing mismatches could confuse and bypass security sanitizer for chrome privileged code - CVE-2020-16012: Variable time processing of cross-origin images during...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:3225-1)

This update for the Linux Kernel 4.4.180-94107 fixes several issues. The following security issues were fixed : CVE-2020-0429: In l2tpsessiondelete and related functions of l2tpcore.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege wi...

SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2020:3122-1)

The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-25285: A race condition between hugetlb sysctl handlers in mm/hugetlb.c could be used by local attackers to corrupt memory, cause a NULL pointer...

SUSE SLES12 Security Update : xen (SUSE-SU-2020:3088-1)

This update for xen fixes the following issues : bsc1177409 - VUL-0: CVE-2020-27673: xen: x86 PV guest INVLPG-like flushes may leave stale TLB entries XSA-286 bsc1177412 - VUL-0: CVE-2020-27672: xen: Race condition in Xen mapping code XSA-345 bsc1177413 - VUL-0: CVE-2020-27671: xen: undue deferra...

SUSE SLED15 / SLES15 Security Update : libxml2 (SUSE-SU-2020:2612-1)

This update for libxml2 fixes the following issues : CVE-2020-24977: Fixed a global-buffer-overflow in xmlEncodeEntitiesInternal bsc1176179. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLES12 Security Update : freetype2 (SUSE-SU-2020:2998-1)

This update for freetype2 fixes the following issues : CVE-2020-15999: fixed a heap buffer overflow found in the handling of embedded PNG bitmaps bsc1177914. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

SUSE SLED15 / SLES15 Security Update : xen (SUSE-SU-2020:3413-1)

This update for xen fixes the following issues : Security issue fixed : CVE-2020-28368: Fixed the Intel RAPL sidechannel attack, aka PLATYPUS attack, aka XSA-351 bsc1178591. Non-security issues fixed : Updated to Xen 4.12.4 bug fix release bsc1027519. Fixed a panic during MSI cleanup on AMD...

SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2020:3273-1)

The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bug fixes. The following security bugs were fixed : CVE-2020-25656: Fixed a concurrency use-after-free in vtdokdgkbioctl bnc1177766. CVE-2020-8694: Restricted energy meter to root access bsc1170415. The update...

SUSE SLED15 / SLES15 Security Update : xen (SUSE-SU-2020:3412-1)

This update for xen fixes the following issues : Security issue fixed : CVE-2020-28368: Fixed the Intel RAPL sidechannel attack, aka PLATYPUS attack, aka XSA-351 bsc1178591. Non-security issues fixed : Updated to Xen 4.13.2 bug fix release bsc1027519. Fixed a panic during MSI cleanup on AMD...