SUSE SLES12 Security Update : perl (SUSE-SU-2020:1662-1)

This update for perl fixes the following issues : CVE-2020-10543: Fixed a heap buffer overflow in regular expression compiler which could have allowed overwriting of allocated memory with attacker's data bsc1171863. CVE-2020-10878: Fixed multiple integer overflows which could have allowed the...

SUSE SLES12 Security Update : texlive (SUSE-SU-2020:1581-1)

This update for texlive fixes the following issues : Security issues fixed : CVE-2020-8016: Fixed a race condition in the spec file bsc1159740. CVE-2020-8017: Fixed a race condition on a cron job bsc1158910. Fixed an issue where pstopdf was crashing bsc1138793. Note that Tenable Network Security...

SUSE SLES15 Security Update : java-1_8_0-openjdk (SUSE-SU-2020:1569-1)

This update for java-180-openjdk to version jdk8u252 fixes the following issues : CVE-2020-2754: Forward references to Nashorn bsc1169511 CVE-2020-2755: Improve Nashorn matching bsc1169511 CVE-2020-2756: Better mapping of serial ENUMs bsc1169511 CVE-2020-2757: Less Blocking Array Queues bsc116951...

SUSE SLES12 Security Update : nodejs6 (SUSE-SU-2020:1623-1)

This update for nodejs6 fixes the following issues : CVE-2020-8174: Fixed multiple memory corruption in napigetvaluestring bsc1172443. CVE-2020-7598: Fixed an issue which could have tricked minimist into adding or modifying properties of Object.prototype bsc1166916. Note that Tenable Network...

SUSE SLES12 Security Update : adns (SUSE-SU-2020:1612-1)

This update for adns fixes the following issues : CVE-2017-9103,CVE-2017-9104,CVE-2017-9105,CVE-2017-9109: Fixed an issue in local recursive resolver which could have led to remote code execution bsc1172265. CVE-2017-9106: Fixed an issue with upstream DNS data sources which could have led to deni...

SUSE SLED15 / SLES15 Security Update : qemu (SUSE-SU-2020:1502-1)

This update for qemu fixes the following issues : Security issue fixed : CVE-2020-1983: Fixed a use-after-free in the ipreass function of slirp bsc1170940. Non-security issues fixed : Fixed an issue where limiting the memory bandwidth was not possible bsc1167816. Fixed the issue that s390x could...

SUSE SLES12 Security Update : mariadb-connector-c (SUSE-SU-2020:1431-1)

This update for mariadb-connector-c fixes the following issues : Security issue fixed : CVE-2020-13249: Fixed an improper validation of OK packets received from clients bsc1171550. Non-security issues fixed : Update to release 3.1.8 bsc1171550 - CONC-304: Rename the static library to libmariadb.a...

SUSE SLED15 / SLES15 Security Update : openexr (SUSE-SU-2020:1293-1)

This update for openexr provides the following fix : Security issues fixed : CVE-2020-11765: Fixed an off-by-one error in use of the ImfXdr.h read function by DwaCompressor:Classifier:Classifier bsc1169575. CVE-2020-11764: Fixed an out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp...

SUSE SLED15 / SLES15 Security Update : rpmlint (SUSE-SU-2020:1338-1)

This update for rpmlint fixes the following issues : whitelist certmonger bsc1169365, bsc1129452 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possibl...

SUSE SLED15 / SLES15 Security Update : gstreamer-plugins-base (SUSE-SU-2020:1300-1)

This update for gstreamer-plugins-base fixes the following issue : Security issue fixed : CVE-2019-9928: Fixed a heap-based overflow in the rtsp connection parser bsc1133375. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE SLES15 Security Update : rpmlint (SUSE-SU-2020:1177-1)

This update for rpmlint fixes the following issues : whitelist certmonger bsc1169365, bsc1129452 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possibl...

Security update for git (moderate)

openSUSE Security Update: Security update for git Announcement ID: openSUSE-SU-2020:0598-1 Rating: moderate References: 1063412 1095218 1095219 1110949 1112230 1114225 1132350 1149792 1156651 1158785 1158787 1158788 1158789 1158790 1158791 1158792 1158793 1158795 1167890 1168930 1169605 1169786...

SUSE SLED15 / SLES15 Security Update : spamassassin (SUSE-SU-2020:0811-1)

This update for spamassassin fixes the following issues : Security issues fixed : CVE-2018-11805: Fixed an issue with delimiter handling in rule files related to isregexpvalid bsc1118987. CVE-2020-1930: Fixed an issue with rule configuration .cf files which can be configured to run system command...

SUSE SLES12 Security Update : MozillaFirefox (SUSE-SU-2020:0717-1)

This update for MozillaFirefox fixes the following issues : Mozilla Firefox was updated to 68.6.0 ESR MFSA 2020-09 bsc1132665 bsc1166238 CVE-2020-6805: Fixed a use-after-free when removing data about origins CVE-2020-6806: Fixed improper protections against state confusion CVE-2020-6807: Fixed a...

SUSE SLED12 Security Update : gimp (SUSE-SU-2020:0601-1)

This update for gimp fixes the following issues : Fix for crashing due to segmentation fault caused by importing ghostscript files. bsc1161998 Security issues fixed: CVE-2017-17785: Fixed an heap-based buffer overflow in FLI import bsc1073625 CVE-2017-17786: Fixed an out-of-bounds read in TGA...

SUSE SLED15 / SLES15 Security Update : cloud-init (SUSE-SU-2020:0585-1)

This update for cloud-init fixes the following security issues : CVE-2020-8631: Replaced the theoretically predictable deterministic RNG with the system RNG bsc1162937. CVE-2020-8632: Increased the default random password length from 9 to 20 bsc1162936. Note that Tenable Network Security has...

openSUSE: Security Advisory for python3 (openSUSE-SU-2020:0274-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE SLES12 Security Update : openssl (SUSE-SU-2020:0516-1)

This update for openssl fixes the following issues : Add missing commits fixing the security issue called 'The 9 Lives of Bleichenbacher's CAT'. bsc1117951 Fix a memory leak problem in function 'BNcopy'. bsc1160163 Note that Tenable Network Security has extracted the preceding description block...

SUSE SLES12 Security Update : rsyslog (SUSE-SU-2020:0424-1)

This update for rsyslog fixes the following issues : Security issues fixed : CVE-2019-17041: Fixed a heap overflow in the parser for AIX log messages bsc1153451. CVE-2019-17042: Fixed a heap overflow in the parser for Cisco log messages bsc1153459. Non-security issues fixed: Handle multiline...

SUSE SLES12 Security Update : dpdk (SUSE-SU-2020:0412-1)

This update for dpdk to version 18.11.3 fixes the following issues : dpdk was updated to 18.11.3 Security issue fixed : CVE-2019-14818: Fixed a memory leak vulnerability caused by a malicious container may lead to to denial of service bsc1156146. Other issues addressed: Changed to multibuild...