Security update for zziplib (moderate)

openSUSE Security Update: Security update for zziplib Announcement ID: openSUSE-SU-2019:2394-1 Rating: moderate References: 1107424 1129403 Cross-References: CVE-2018-16548 Affected Products: openSUSE Leap 15.0 An update that solves one vulnerability and has one errata is now available...

Security update for zziplib (moderate)

openSUSE Security Update: Security update for zziplib Announcement ID: openSUSE-SU-2019:2396-1 Rating: moderate References: 1107424 1129403 Cross-References: CVE-2018-16548 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and has one errata is now available...

SUSE SLED15 / SLES15 Security Update : ffmpeg (SUSE-SU-2019:1299-2)

This update for ffmpeg fixes the following issues : Security issue fixed : CVE-2018-14395: Fixed a divide-by-zero error in libavformat/movenc.c that allowed attackers to cause a DoS bsc1101889 CVE-2018-14394: Fixed a divide-by-zero error in libavformat/movenc.c that allowed attackers to cause a D...

SUSE SLED12 / SLES12 Security Update : MozillaFirefox (SUSE-SU-2019:2620-1)

This update for MozillaFirefox fixes the following issues : Updated to new ESR version 68.1 bsc1149323. In addition to the already fixed vulnerabilities released in previous ESR updates, the following were also fixed: CVE-2019-11751, CVE-2019-11736, CVE-2019-9812, CVE-2019-11748, CVE-2019-11749,...

SUSE SLED15 / SLES15 Security Update : bind (SUSE-SU-2019:2550-1)

This update for bind fixes the following issues : Security issue fixed : CVE-2019-6471: Fixed a reachable assert in dispatch.c. bsc1138687 Non-security issue fixed: bind will no longer rely on /etc/insserv.conf bsc1118367, bsc1118368 Note that Tenable Network Security has extracted the preceding...

openSUSE Security Update : nghttp2 (openSUSE-2019-2234) (Data Dribble) (Resource Loop)

This update for nghttp2 fixes the following issues : Security issues fixed : - CVE-2019-9513: Fixed HTTP/2 implementation that is vulnerable to resource loops, potentially leading to a denial of service bsc1146184. - CVE-2019-9511: Fixed HTTP/2 implementations that are vulnerable to window size...

SUSE SLED12 / SLES12 Security Update : openssl-1_0_0 (SUSE-SU-2019:2504-1)

This update for openssl-100 fixes the following issues : OpenSSL Security Advisory 10 September 2019 CVE-2019-1547: Added ECGROUPsetgenerator side channel attack avoidance. bsc1150003 CVE-2019-1563: Fixed Bleichenbacher attack against cms/pkcs7 encryption transported key bsc1150250 In addition...

SUSE SLED15 / SLES15 Security Update : php7 (SUSE-SU-2019:2503-1)

This update for php7 fixes the following issues : Security issues fixed : CVE-2019-11041: Fixed heap buffer over-read in exifscanthumbnail bsc1146360. CVE-2019-11042: Fixed heap buffer over-read in exifprocessusercomment bsc1145095. Non-security issue fixed: Drop -n from php invocation from pecl...

SUSE SLED15 / SLES15 Security Update : webkit2gtk3 (SUSE-SU-2019:2428-1)

This update for webkit2gtk3 fixes the following issues : Security issues fixed : CVE-2019-8673, CVE-2019-8678, CVE-2019-8686, CVE-2019-8683, CVE-2019-8671, CVE-2019-8595, CVE-2019-8684, CVE-2019-8681, CVE-2019-8615, CVE-2019-8689, CVE-2019-8680, CVE-2019-8672, CVE-2019-8676, CVE-2019-8666,...

Security update for samba (moderate)

openSUSE Security Update: Security update for samba Announcement ID: openSUSE-SU-2019:2142-1 Rating: moderate References: 1141267 1144059 Cross-References: CVE-2019-10197 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and has one errata is now available. Description...

SUSE SLES15 Security Update : buildah (SUSE-SU-2019:2341-1)

This update for buildah fixes the following issues : Security issue fixed : CVE-2019-10214: Fixed missing enforcement of TLS connections. bsc1144065 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLED12 / SLES12 Security Update : mariadb, mariadb-connector-c (SUSE-SU-2019:2330-1)

This update for mariadb and mariadb-connector-c fixes the following issues : mariadb : Update to version 10.2.25 bsc1136035 CVE-2019-2628: Fixed a remote denial of service by an privileged attacker bsc1136035. CVE-2019-2627: Fixed another remote denial of service by an privileged attacker...

SUSE SLES12 Security Update : libvirt (SUSE-SU-2019:2227-1)

This update for libvirt fixes the following issues : Security issues fixed : CVE-2019-10161: Fixed virDomainSaveImageGetXMLDesc API which could accept a path parameter pointing anywhere on the system and potentially leading to execution of a malicious file with root privileges by libvirtd...

SUSE SLED15 / SLES15 Security Update : zypper, libzypp / libsolv (SUSE-SU-2019:2030-1)

This update for libzypp and libsolv fixes the following issues : Security issues fixed : CVE-2018-20532: Fixed NULL pointer dereference at ext/testcase.c function testcaseread bsc1120629. CVE-2018-20533: Fixed NULL pointer dereference at ext/testcase.c function testcasestr2depcomplex in...

SUSE SLED12 / SLES12 Security Update : evince (SUSE-SU-2019:2080-1)

This update for evince fixes the following issues : Security issues fixed : CVE-2019-11459: Fixed an improper error handling in which could have led to use of uninitialized use of memory bsc1133037. CVE-2019-1010006: Fixed a buffer overflow in backend/tiff/tiff-document.c bsc1141619. Note that...

SUSE SLED15 / SLES15 Security Update : mariadb, mariadb-connector-c (SUSE-SU-2019:2020-1)

This update for mariadb and mariadb-connector-c fixes the following issues : mariadb : Update to version 10.2.25 bsc1136035 CVE-2019-2628: Fixed a remote denial of service by an privileged attacker bsc1136035. CVE-2019-2627: Fixed another remote denial of service by an privileged attacker...

SUSE SLES15 Security Update : nodejs10 (SUSE-SU-2019:2081-1)

This update for nodejs10 to version 10.16.0 fixes the following issues : Security issue fixed : CVE-2019-13173: Fixed a potential file overwrite via hardlink in fstream.DirWriter bsc1140290. Non-security issue fixed: Update to new upstream LTS version 10.16.0, including npm version 6.9.0 and...

SUSE SLED12 / SLES12 Security Update : python3 (SUSE-SU-2019:2053-1)

This update for python3 fixes the following issues : CVE-2019-10160: Fixed a regression in urlparse and urlsplit introduced by the fix for CVE-2019-9636 bsc1138459. CVE-2018-14647: Fixed a denial of service vulnerability caused by a crafted XML document bsc1109847. CVE-2018-1000802: Fixed a comma...

SUSE SLED12 / SLES12 Security Update : libsolv, libzypp, zypper (SUSE-SU-2019:1972-1)

This update for libsolv, libzypp and zypper fixes the following issues : libsolv was updated to version 0.6.36 fixes the following issues : Security issues fixed : CVE-2018-20532: Fixed a NULL pointer dereference in testcaseread bsc1120629. CVE-2018-20533: Fixed a NULL pointer dereference in...

SUSE SLED12 / SLES12 Security Update : cronie (SUSE-SU-2019:1990-1)

This update for cronie fixes the following issues : Security issues fixed : CVE-2019-9704: Fixed an insufficient check in the return value of calloc which could allow a local user to create Denial of Service by crashing the deamon bsc1128937. CVE-2019-9705: Fixed an implementation vulnerability...