openSUSE Security Update : openssh (openSUSE-2020-2240)

This update for openssh fixes the following issues : - CVE-2020-14145: Fixed a potential information leak during host key exchange bsc1173513. This update was imported from the SUSE:SLE-15-SP2:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this...

openSUSE Security Update : python-pip (openSUSE-2020-2169)

This update for python-pip fixes the following issues : - Fixed a directory traversal in downloadhttpurl bsc1176262 CVE-2019-20916 This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

openSUSE Security Update : chromium (openSUSE-2020-1831)

This update for chromium fixes the following issues : - Update to 86.0.4240.183 boo1178375 - CVE-2020-16004: Use after free in user interface. - CVE-2020-16005: Insufficient policy enforcement in ANGLE. - CVE-2020-16006: Inappropriate implementation in V8 - CVE-2020-16007: Insufficient data...

openSUSE Security Update : pdns-recursor (openSUSE-2020-1687)

This update for pdns-recursor fixes the following issues : -pdns-recursorwas updated to 4.1.1 and 4.3.5 : - CVE-2020-25829: Fixed a cache pollution related to DNSSEC validation boo1177383 - CVE-2020-14196: Fixed an access restriction bypass with API key and password authentication boo1173302. C...

openSUSE Security Update : icingaweb2 (openSUSE-2020-1674)

This update for icingaweb2 fixes the following issues : - icingaweb2 was updated to 2.7.4 - CVE-2020-24368: Fixed a path Traversal which could have allowed an attacker to access arbitrary files which are readable by the process running boo1175530. C Tenable Network Security, Inc. The descriptive...

openSUSE Security Update : ovmf (openSUSE-2020-1525)

This update for ovmf fixes the following issues : - CVE-2019-14562: Fixed an overflow in DxeImageVerificationHandler bsc1175476. - Support more SCSI drivers PvScsi, MptScsi and LsiScsi. bsc1119454 - Enable LsiScsi explicitly since it's disabled by default This update was imported from the...

openSUSE Security Update : go1.13 (openSUSE-2020-1194)

This update for go1.13 fixes the following issues : - go1.13 was updated to version 1.13.5 - CVE-2020-16845: dUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs bsc1174977. This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Securit...

openSUSE Security Update : libX11 (openSUSE-2020-1162)

This update for libX11 fixes the following issues : - Fixed XIM client heap overflows CVE-2020-14344, bsc1174628 This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUS...

openSUSE Security Update : vino (openSUSE-2020-1071)

This update for vino fixes the following issues : - CVE-2019-15681: Fixed a memory leak which could have allowed to a remote attacker to read stack memory bsc1155419. This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The descriptive text and...

openSUSE Security Update : inn (openSUSE-2020-234)

This update for inn fixes the following issues : - CVE-2019-3692: Fixed a local privilage escalation from user to 'news' bsc1154302. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2020-234. The text...

openSUSE Security Update : rubygem-rack (openSUSE-2020-214)

This update for rubygem-rack to version 2.0.8 fixes the following issues : - CVE-2018-16471: Fixed a cross-site scripting XSS flaw via the scheme method on Rack::Request bsc1116600. - CVE-2019-16782: Fixed a possible information leak and session hijack vulnerability bsc1159548. This update was...

openSUSE Security Update : python-reportlab (openSUSE-2020-160)

This update for python-reportlab fixes the following issues : - CVE-2019-17626: Fixed a potential remote code execution because of the lack of input sanitization in toColor bsc1154370. This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The...

Security update for libredwg (moderate)

openSUSE Security Update: Security update for libredwg Announcement ID: openSUSE-SU-2020:0115-1 Rating: moderate References: 1160520 1160522 1160523 1160524 1160525 1160526 1160527 Cross-References: CVE-2020-6609 CVE-2020-6610 CVE-2020-6611 CVE-2020-6612 CVE-2020-6613 CVE-2020-6614 CVE-2020-6615...

openSUSE Security Update : slurm (openSUSE-2019-2536)

This update for slurm fixes the following issues : Security issue fixed : - CVE-2019-12838: Fixed a SQL injection bsc1140709. Non-security issue fixed : - Added X11-forwarding bsc1153245. - Moved srun from 'slurm' to 'slurm-node': srun is required on the nodes as well so sbatch will work...

openSUSE Security Update : go1.12 (openSUSE-2019-2522)

This update for go1.12 fixes the following issues : Security issues fixed : - CVE-2019-16276: Fixed the handling of invalid HTTP headers, which had allowed request smuggling bsc1152082. - CVE-2019-17596: Fixed a panic in dsa.Verify caused by invalid public keys bsc1154402. Non-security issue fixe...

openSUSE Security Update : python-ecdsa (openSUSE-2019-2472)

This update for python-ecdsa to version 0.13.3 fixes the following issues : Security issues fixed : - CVE-2019-14853: Fixed unexpected exceptions during signature decoding bsc1153165. - CVE-2019-14859: Fixed a signature malleability caused by insufficient checks of DER encoding bsc1154217. This...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2019:2427-1 Rating: important References: 1155643 Cross-References: CVE-2019-13720 CVE-2019-13721 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes two vulnerabilities is now available...

openSUSE Security Update : expat (openSUSE-2019-2205)

This update for expat fixes the following issues : Security issues fixed : - CVE-2019-15903: Fixed heap-based buffer over-read caused by crafted XML input. bsc1149429 This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The descriptive text and...

openSUSE Security Update : libcryptopp (openSUSE-2019-1968)

This update for libcryptopp fixes the following issues : - CVE-2019-14318: Fixed a timing side channel vulnerability in the ECDSA signature generation boo1143532. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : bubblewrap (openSUSE-2019-1535)

This update for bubblewrap to version 0.3.3 fixes the following issue: Security issue fixed : - CVE-2019-12439: Fixed a temporary directory misuse as mount point which could have allowed local user to prevent others from running bubblewrap. C Tenable Network Security, Inc. The descriptive text an...