openSUSE: Security Advisory for pcp (openSUSE-SU-2020:0213-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE SLED15 / SLES15 Security Update : pcp (SUSE-SU-2020:0357-1)

This update for pcp fixes the following issues : Security issue fixed : CVE-2019-3696: Fixed a local privilege escalation in migratetempdirs bsc1153921. CVE-2019-3695: Fixed a local privilege escalation of the pcp user during package update bsc1152763. Non-security issue fixed : Fixed an dependen...

SUSE SLED15 / SLES15 Security Update : pcp (SUSE-SU-2020:0355-1)

This update for pcp fixes the following issues : Security issue fixed : CVE-2019-3695: Fixed a local privilege escalation of the pcp user during package update bsc1152763. Non-security issue fixed : Fixed an dependency issue with pcp2csv bsc1129991. Note that Tenable Network Security has extracte...

SUSE SLES15 Security Update : rmt-server (SUSE-SU-2020:0278-1)

This update for rmt-server to version 2.5.2 fixes the following issues : Security issue fixed : CVE-2019-18904: Fixed a denial of service in the offline migration bsc1160922. Non-security issue fixed : Relaxed systemd units dependencies bsc1160673 Added more verbose error reporting for SCC API...

SUSE SLED15 / SLES15 Security Update : wicked (SUSE-SU-2020:0264-1)

This update for wicked fixes the following issues : CVE-2019-18902: Fixed a use-after-free when receiving invalid DHCP6 client options bsc1160903. CVE-2020-7216: Fixed a potential denial of service via a memory leak when processing packets with missing message type option in DHCP4 bsc1160905. Not...

SUSE SLED15 / SLES15 Security Update : python (SUSE-SU-2020:0234-1) (BEAST) (httpoxy)

This update for python fixes the following issues : Updated to version 2.7.17 to unify packages among openSUSE:Factory and SLE versions bsc1159035. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLED15 / SLES15 Security Update : libsolv, libzypp, zypper (SUSE-SU-2020:0087-1)

This update for libsolv, libzypp, zypper fixes the following issues : Security issue fixed : CVE-2019-18900: Fixed assert cookie file that was world readable bsc1158763. Bug fixes Fixed removing orphaned packages dropped by to-be-installed products bsc1155819. Adds libzypp API to mark all obsolet...

openSUSE: Security Advisory for MozillaThunderbird (openSUSE-SU-2020:0003-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE SLED15 / SLES15 Security Update : containerd, docker, docker-runc, golang-github-docker-libnetwork (SUSE-SU-2020:0035-1)

This update for containerd, docker, docker-runc, golang-github-docker-libnetwork fixes the following issues : Security issue fixed : CVE-2019-16884: Fixed incomplete patch for LSM bypass via malicious Docker image that mount over a /proc directory bsc1152308. Bug fixes: Update to Docker 19.03.5-c...

SUSE SLED12 Security Update : zziplib (SUSE-SU-2019:3341-1)

This update for zziplib fixes the following issues : Security issues fixed : CVE-2018-16548: Avoid a memory leak from zzipparserootdirectory which could lead to denial of service. bsc1107424 CVE-2018-7727: Fixed a memory leak in unzzipcat bsc1084515. Non-security issue fixed: Prevented division b...

SUSE SLED15 / SLES15 Security Update : spectre-meltdown-checker (SUSE-SU-2019:3348-1)

This update for spectre-meltdown-checker fixes the following issues : - feat: implement TAA detection CVE-2019-11135 bsc1139073 - feat: implement MCEPSC / iTLB Multihit detection CVE-2018-12207 bsc1117665 - feat: taa: add TSXCTRL MSR detection in hardware info - feat: fwdb: use both Intel GitHub...

SUSE SLES12 Security Update : kernel (SUSE-SU-2019:3230-1)

This update for the Linux Kernel 4.4.180-94103 fixes several issues. The following security issues were fixed : CVE-2019-13272: Fixed a privilege escalation from user to root due to improper handling of credentials by leveraging certain scenarios with a parent-child process relationship bsc115632...

SUSE SLED15 / SLES15 Security Update : cloud-init (SUSE-SU-2019:3097-1)

This update for cloud-init to version 19.2 fixes the following issues : Security issue fixed : CVE-2019-0816: Fixed the unnecessary extra ssh keys that were added to authorizedkeys bsc1129124. Non-security issues fixed: Short circuit the conditional for identifying the sysconfig renderer...

SUSE SLED15 / SLES15 Security Update : ucode-intel (SUSE-SU-2019:3089-1)

This update for ucode-intel fixes the following issues : Updated to 20191115 security release bsc1157004 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as...

SUSE SLED15 / SLES15 Security Update : gcc9 (SUSE-SU-2019:3061-1)

This update includes the GNU Compiler Collection 9. A full changelog is provided by the GCC team on : https://www.gnu.org/software/gcc/gcc-9/changes.html The base system compiler libraries libgccs1, libstdc++6 and others are now built by the gcc 9 packages. To use it, install 'gcc9' or 'gcc9-c++'...

SUSE SLED15 / SLES15 Security Update : webkit2gtk3 (SUSE-SU-2019:3044-1)

This update for webkit2gtk3 to version 2.26.2 fixes the following issues : Webkit2gtk3 was updated to version 2.26.2 WSA-2019-0005 and WSA-2019-0006, bsc1155321 bsc1156318 Security issues addressed : CVE-2019-8625: Fixed a logic issue where by processing maliciously crafted web content may lead t...

SUSE SLED15 / SLES15 Security Update : ncurses (SUSE-SU-2019:2997-1)

This update for ncurses fixes the following issues : Security issues fixed : CVE-2019-17594: Fixed a heap-based buffer over-read in the ncfindentry function bsc1154036. CVE-2019-17595: Fixed a heap-based buffer over-read in the fmtentry function bsc1154037. Non-security issue fixed: Removed...

openSUSE Security Update : MozillaThunderbird (openSUSE-2019-2464)

This update for MozillaThunderbird to version 68.2.1 provides the following fixes : - Security issues fixed bsc1154738 : - CVE-2019-15903: Fixed a heap overflow in the expat library bsc1149429. - CVE-2019-11757: Fixed a use-after-free when creating index updates in IndexedDB bsc1154738. -...

SUSE SLES12 Security Update : php72 (SUSE-SU-2019:2909-1)

This update for php72 fixes the following issues : Security issue fixed : CVE-2019-11043: Fixed possible remote code execution via envpathinfo underflow in fpmmain.c bsc1154999. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

SUSE SLED15 / SLES15 Security Update : samba (SUSE-SU-2019:2868-1)

This update for samba fixes the following issues : Security issues fixed : CVE-2019-14847: User with 'get changes' permission can crash AD DC LDAP server via dirsync bsc1154598. CVE-2019-10218: Client code can return filenames containing path separators bsc1144902. CVE-2019-14833: Fixed Accent wi...