SUSE SLES12 Security Update : qemu (SUSE-SU-2019:1272-1) (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)

This update for qemu fixes the following issues : Security issues fixed : CVE-2019-9824: Fixed an information leak in slirp bsc1129622 CVE-2018-20815: Fix DOS possibility in device tree processing bsc1130675 CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091: Added x86 cpu feature...

SUSE SLED12 / SLES12 Security Update : mutt (SUSE-SU-2019:1196-1)

This update for mutt fixes the following issues : Security issues fixed : bsc1101428: Mutt 1.10.1 security release update. CVE-2018-14351: Fix imap/command.c that mishandles long IMAP status mailbox literal count size bsc1101583. CVE-2018-14353: Fix imapquotestring in imap/util.c that has an...

openSUSE Security Update : hostinfo / supportutils (openSUSE-2019-1351)

This update for hostinfo, supportutils fixes the following issues: Security issues fixed for supportutils : - CVE-2018-19640: Fixed an issue where users could kill arbitrary processes bsc1118463. - CVE-2018-19638: Fixed an issue where users could overwrite arbitrary log files bsc1118460. -...

SUSE SLES12 Security Update : ovmf (SUSE-SU-2019:1157-1)

This update for ovmf fixes the following issues : Security issue fixed : CVE-2019-0161: Fixed a stack overflow in UsbBusDxe and UsbBusPei, which could potentially be triggered by a local unauthenticated user bsc1131361. Note that Tenable Network Security has extracted the preceding description...

SUSE SLED12 / SLES12 Security Update : webkit2gtk3 (SUSE-SU-2019:1155-1)

This update for webkit2gtk3 to version 2.24.1 fixes the following issues : Security issues fixed : CVE-2019-6201, CVE-2019-6251, CVE-2019-7285, CVE-2019-7292, CVE-2019-8503, CVE-2019-8506, CVE-2019-8515, CVE-2019-8524, CVE-2019-8535, CVE-2019-8536, CVE-2019-8544, CVE-2019-8551, CVE-2019-8558,...

SUSE SLED15 / SLES15 Security Update : webkit2gtk3 (SUSE-SU-2019:1137-1)

This update for webkit2gtk3 to version 2.24.1 fixes the following issues : Security issues fixed : CVE-2019-6201, CVE-2019-6251, CVE-2019-7285, CVE-2019-7292, CVE-2019-8503, CVE-2019-8506, CVE-2019-8515, CVE-2019-8518, CVE-2019-8523, CVE-2019-8524, CVE-2019-8535, CVE-2019-8536, CVE-2019-8544,...

SUSE SLED12 / SLES12 Security Update : atftp (SUSE-SU-2019:1091-1)

This update for atftp fixes the following issues : Security issues fixed : CVE-2019-11366: Fixed a denial of service caused by a NULL pointer dereference because threadlistmutex was not locked bsc1133145. CVE-2019-11365: Fixed a buffer overflow which could lead to remote code execution caused by ...

SUSE SLED12 / SLES12 Security Update : wpa_supplicant (SUSE-SU-2019:1088-1)

This update for wpasupplicant fixes the following issues : This security issue was fixed : CVE-2018-14526: Under certain conditions, the integrity of EAPOL-Key messages was not checked, leading to a decryption oracle. An attacker within range of the Access Point and client could have abused the...

openSUSE Security Update : sssd (openSUSE-2019-1174)

This update for adcli and sssd provides the following improvement : Security vulnerability fixed : - CVE-2019-3811: Fix fallbackhomedir returning '/' for empty home directories bsc1121759 Other fixes : - Add an option to disable checking for trusted domains in the subdomains provider bsc1125617 -...

SUSE SLES12 Security Update : apache2 (SUSE-SU-2019:0888-1)

This update for apache2 fixes the following issues : CVE-2018-17199: A bug in Apache's 'modsessioncookie' lead to an issue where the module did not respect a cookie's expiry time. bsc1122839 CVE-2019-0220: The Apache HTTP server did not use a consistent strategy for URL normalization throughout a...

openSUSE Security Update : python-cryptography / python-pyOpenSSL (openSUSE-2019-1104)

This update for python-cryptography, python-pyOpenSSL fixes the following issues : Security issues fixed : - CVE-2018-1000808: A memory leak due to missing reference checking in PKCS12 store handling was fixed bsc1111634 - CVE-2018-1000807: A use-after-free in X509 object handling was fixed...

openSUSE Security Update : qemu (openSUSE-2019-1074)

This update for qemu fixes the following issues : Security vulnerabilities addressed : - CVE-2019-6778: Fixed an out-of-bounds access in slirp bsc1123156 - CVE-2018-16872: Fixed a host security vulnerability related to handling symlinks in usb-mtp bsc1119493 - CVE-2018-19489: Fixed a...

Security update for qemu (important)

openSUSE Security Update: Security update for qemu Announcement ID: openSUSE-SU-2019:1074-1 Rating: important References: 1056334 1056386 1084604 1113231 1114957 1116717 1117275 1119493 1121600 1123156 Cross-References: CVE-2017-13672 CVE-2017-13673 CVE-2018-16872 CVE-2018-18954 CVE-2018-19364...

SUSE SLES11 Security Update : grub2 (SUSE-SU-2019:13989-1)

This update for grub2 fixes the following issues : Security issue fixed : CVE-2017-9763: Fixed a memory leak in grubext2readblock bsc1045063 Other issues addressed: Added support for tftp block counter roll-over and backported support for efinetSNP open bsc1124662. Note that Tenable Network...

openSUSE Security Update : mariadb (openSUSE-2019-427)

This update for mariadb to version 10.2.15 fixes the following issues : These security issues were fixed : - CVE-2018-2767: Enforse use of SSL/TLS in embedded server library Return of BACKRONYM bsc1088681. - CVE-2018-2786: Vulnerability in the MySQL Server component of Oracle MySQL subcomponent:...

openSUSE Security Update : mutt (openSUSE-2019-569)

This update for mutt fixes the following issues : Security issues fixed : - bsc1101428: Mutt 1.10.1 security release update. - CVE-2018-14351: Fix imap/command.c that mishandles long IMAP status mailbox literal count size bsc1101583. - CVE-2018-14353: Fix imapquotestring in imap/util.c that has a...

SUSE SLED15 / SLES15 Security Update : openssl-1_1 (SUSE-SU-2019:0678-1)

This update for openssl-11 OpenSSL Security Advisory 6 March 2019 fixes the following issues : Security issue fixed : CVE-2019-1543: Fixed an implementation error in ChaCha20-Poly1305 where it was allowed to set IV with more than 12 bytes bsc1128189. Other issues addressed: Fixed a segfault in...

SUSE SLED12 / SLES12 Security Update : openwsman (SUSE-SU-2019:0656-1)

This update for openwsman fixes the following issues : Security issues fixed : CVE-2019-3816: Fixed a vulnerability in openwsmand deamon which could lead to arbitary file disclosure bsc1122623. CVE-2019-3833: Fixed a vulnerability in processconnection which could allow an attacker to trigger an...

SUSE SLED15 / SLES15 Security Update : lftp (SUSE-SU-2019:0643-1)

This update for lftp fixes the following issues: Security issue fixed : CVE-2018-10916: Fixed an improper file name sanitization which could lead to loss of integrity of the local system bsc1103367. Other issue addressed: The SSH login handling code detects password prompts more reliably...

SUSE SLED15 / SLES15 Security Update : go1.11 (SUSE-SU-2019:0651-1)

This update for go1.11 to version 1.11.5 fixes the following issues : Security issue fixed : CVE-2019-6486: Fixed a CPU Denial-of-Service vulnerability affecting crypto/ellpitic related to P-521 and P-384 bsc1123013 go29903. Other bug fixes and changes made: Fix erroneous trailing backslash in...