Security update for tomcat (moderate)

openSUSE Security Update: Security update for tomcat Announcement ID: openSUSE-SU-2019:1723-1 Rating: moderate References: 1139924 Cross-References: CVE-2019-0199 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for tomcat to...

SUSE-SU-2019:1888-1 Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP1)

This update for the Linux Kernel 4.12.14-1977 fixes one issue. The following security issue was fixed: This update contains a regression fix for CVE-2019-11477 and CVE-2019-11478 bsc1140747...

SUSE SLED12 / SLES12 Security Update : Test update for SUSE:SLE-12-SP5:Update (security) (SUSE-SU-2019:1838-1)

This is a security test update for SUSE:SLE-12-SP5:Update Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

openSUSE Security Update : postgresql10 (openSUSE-2019-1578)

This update for postgresql10 fixes the following issues : Security issue fixed : - CVE-2019-10130: Prevent row-level security policies from being bypassed via selectivity estimators bsc1134689. Bug fixes : - For a complete list of fixes check the release notes. -...

openSUSE Security Update : MozillaThunderbird (openSUSE-2019-1583)

This update for MozillaThunderbird fixes the following security issues : - CVE-2019-11703: Fixed a heap-based buffer overflow in icalmemorystrdupanddequote bsc1137595. - CVE-2019-11704: Fixed a heap-based buffer overflow in parsergetnextchar bsc1137595. - CVE-2019-11705: Fixed a stack-based buffe...

openSUSE Security Update : php7 (openSUSE-2019-1572)

This update for php7 fixes the following issues : Security issues fixed : - CVE-2019-9637: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension bsc1128892. - CVE-2019-9675: Fixed improper implementation of rename function and multiple invalid memor...

OPENSUSE-SU-2019:1561-1 Security update for vim

This update for vim fixes the following issue: Security issue fixed: - CVE-2019-12735: Fixed a potential arbitrary code execution vulnerability in getchar.c bsc1137443. This update was imported from the SUSE:SLE-15:Update update project...

SUSE-SU-2019:1489-1 Security update for the Linux Kernel (Live Patch 0 for SLE 15)

This update for the Linux Kernel 4.12.14-23 fixes one issue. The following security issue was fixed: - CVE-2018-14734: drivers/infiniband/core/ucma.c allowed ucmaleavemulticast to access a certain data structure after a cleanup step in ucmaprocessjoin, which allows attackers to cause a denial of...

openSUSE Security Update : rmt-server (openSUSE-2019-1527)

This update for rmt-server to version 2.1.4 fixes the following issues : - Fix duplicate nginx location in rmt-server-pubcloud bsc1135222 - Mirror additional repos that were enabled during mirroring bsc1132690 - Make service IDs consistent across different RMT instances bsc1134428 - Make SMT data...

Security update for bind (important)

openSUSE Security Update: Security update for bind Announcement ID: openSUSE-SU-2019:1532-1 Rating: important References: 1104129 1126068 1126069 1133185 Cross-References: CVE-2018-5740 CVE-2018-5743 CVE-2018-5745 CVE-2019-6465 Affected Products: openSUSE Leap 42.3 An update that fixes four...

SUSE-SU-2019:1425-1 Security update for the Linux Kernel (Live Patch 29 for SLE 12 SP2)

This update for the Linux Kernel 4.4.121-92109 fixes one issue. The following security issue was fixed: - CVE-2018-5390: The Linux kernel could be forced to make very expensive calls to tcpcollapseofoqueue and tcppruneofoqueue for every incoming packet which can lead to a denial of service...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2019:1488-1 Rating: important References: 1134218 Cross-References: CVE-2019-5824 CVE-2019-5827 Affected Products: openSUSE Backports SLE-15 An update that fixes two vulnerabilities is now available. Description:...

OPENSUSE-SU-2019:1459-1 Security update for graphviz

This update for graphviz fixes the following issues: Security issue fixed: - CVE-2019-11023: Fixed a denial of service vulnerability, which was caused by a NULL pointer dereference in agroot bsc1132091. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2019:1431-1 Security update for evolution

This update for evolution fixes the following issues: Security issue fixed: - CVE-2018-15587: Fixed an issue with spoofed pgp signatures by using specially crafted emails bsc1125230. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2019:1398-1 Security update for bzip2

This update for bzip2 fixes the following issues: Security issue fixed: - CVE-2016-3189: Fixed a use-after-free in bzip2recover bsc985657. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2019:1327-1 Security update for java-11-openjdk

This update for java-11-openjdk to version 11.0.3+7 fixes the following issues: Security issues fixed: - CVE-2019-2602: Fixed excessive use of CPU time in the BigDecimal implementation bsc1132728. - CVE-2019-2684: Fixed a flaw in the RMI registry implementation which could lead to selection of an...

openSUSE Security Update : php7 (openSUSE-2019-1293)

This update for php7 fixes the following issues: Security issues fixed: - CVE-2019-9637: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension bsc1128892. - CVE-2019-9675: Fixed improper implementation of rename function and multiple invalid memory...

Security update for kauth (moderate)

openSUSE Security Update: Security update for kauth Announcement ID: openSUSE-SU-2019:1277-1 Rating: moderate References: 1124863 Cross-References: CVE-2019-7443 Affected Products: openSUSE Backports SLE-15 An update that fixes one vulnerability is now available. Description: This update for kaut...

OPENSUSE-SU-2019:1264-1 Security update for slurm

This update for slurm to version 17.11.13 fixes the following issues: Security issue fixed: - CVE-2019-6438: Fixed a heap overflow on 32-bit systems in xmalloc bsc1123304. This update was imported from the SUSE:SLE-15:Update update project...

Security update for openexr (low)

openSUSE Security Update: Security update for openexr Announcement ID: openSUSE-SU-2019:1265-1 Rating: low References: 1113455 Cross-References: CVE-2018-18444 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for openexr fixes...