OPENSUSE-SU-2019:1225-1 Security update for flac

This update for flac fixes the following issues: - CVE-2017-6888: An error in the 'readmetadatavorbiscomment' function could be exploited to cause a memory leak via a specially crafted FLAC file bsc1091045. This update was imported from the SUSE:SLE-15:Update update project...

Security update for blktrace (low)

openSUSE Security Update: Security update for blktrace Announcement ID: openSUSE-SU-2019:1224-1 Rating: low References: 1091942 Cross-References: CVE-2018-10689 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for blktrace fix...

Security update for lxc, lxcfs (important)

openSUSE Security Update: Security update for lxc, lxcfs Announcement ID: openSUSE-SU-2019:1227-1 Rating: important References: 1122185 1131762 988348 Cross-References: CVE-2018-6556 CVE-2019-5736 Affected Products: openSUSE Backports SLE-15 An update that solves two vulnerabilities and has one...

openSUSE Security Update : gd (openSUSE-2019-1148)

This update for gd fixes the following issues : Security issues fixed : - CVE-2019-6977: Fixed a heap-based buffer overflow the GD Graphics Library used in the imagecolormatch function bsc1123361. - CVE-2019-6978: Fixed a double free in the gdImagePtr functions bsc1123522. This update was importe...

Security update for openssl-1_1 (moderate)

openSUSE Security Update: Security update for openssl-11 Announcement ID: openSUSE-SU-2019:1147-1 Rating: moderate References: 1116833 1125494 1128189 Cross-References: CVE-2019-1543 Affected Products: openSUSE Leap 15.0 An update that solves one vulnerability and has two fixes is now available...

openSUSE Security Update : libssh2_org (openSUSE-2019-1109)

This update for libssh2org fixes the following issues : Security issues fixed: - CVE-2019-3861: Fixed Out-of-bounds reads with specially crafted SSH packets bsc1128490. - CVE-2019-3862: Fixed Out-of-bounds memory comparison with specially crafted message channel request packet bsc1128492. -...

openSUSE: Security Advisory for phpMyAdmin (openSUSE-SU-2019:0194-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2019:1121-1 Security update for ghostscript

This update for ghostscript fixes the following issue: Security issue fixed: - CVE-2019-3838: Fixed a vulnerability which made forceput operator in DefineResource to be still accessible which could allow access to file system outside of the constraints of -dSAFER bsc1129186. This update was...

OPENSUSE-SU-2019:1115-1 Security update for libqt5-qtimageformats

This update for libqt5-qtimageformats fixes the following issues: Security issues fixed: - CVE-2018-19871: Fixed CPU exhaustion in QTgaFile bsc1118598 This update was imported from the SUSE:SLE-15:Update update project...

Security update for python-Flask (low)

openSUSE Security Update: Security update for python-Flask Announcement ID: openSUSE-SU-2019:1112-1 Rating: low References: 1106279 Cross-References: CVE-2018-1000656 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for...

openSUSE Security Update : libssh2_org (openSUSE-2019-1075)

This update for libssh2org fixes the following issues : Security issues fixed: - CVE-2019-3861: Fixed Out-of-bounds reads with specially crafted SSH packets bsc1128490. - CVE-2019-3862: Fixed Out-of-bounds memory comparison with specially crafted message channel request packet bsc1128492. -...

openSUSE Security Update : ImageMagick (openSUSE-2019-639)

This update for ImageMagick fixes the following issues : Security issues fixed : - CVE-2018-14434: A memory leak for a colormap in WriteMPCImage incoders/mpc.c was fixed. bsc1102003 - CVE-2018-14435: A memory leak in DecodeImage in coders/pcd.c was fixed. bsc1102007 - CVE-2018-14436: A memory lea...

openSUSE Security Update : samba (openSUSE-2019-617)

This update for samba fixes the following issues : The following security vulnerabilities were fixed : - CVE-2018-1139: Disable NTLMv1 auth if smb.conf doesn't allow it; bsc1095048 - CVE-2018-1140: ldbsearch 'distinguishedName=abc' and DNS query with escapes crashes; bsc1095056 - CVE-2018-10919:...

openSUSE Security Update : mercurial (openSUSE-2019-864)

This update for mercurial fixes the following issues : - CVE-2018-17983: Fix an out-of-bounds read during parsing of a malformed manifest entry bsc1110899. This update was imported from the SUSE:SLE-15:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive tex...

openSUSE Security Update : apache-pdfbox (openSUSE-2019-670)

This update for apache-pdfbox fixes the following issues : Security issue fixed : - CVE-2018-8036: Fix infinite loop while parsing files that leads to an out of memory issue bsc1099721. This update was imported from the SUSE:SLE-15:Update update project. %NASLMINLEVEL 70300 C Tenable Network...

openSUSE Security Update : gdm (openSUSE-2019-708)

This update for gdm provides the following fixes : This security issue was fixed : - CVE-2018-14424: The daemon in GDM did not properly unexport display objects from its D-Bus interface when they are destroyed, which allowed a local attacker to trigger a use-after-free via a specially crafted...

openSUSE Security Update : systemd (openSUSE-2019-909)

This update for systemd fixes the following issues : Security issues fixed : - CVE-2018-15688: A buffer overflow vulnerability in the dhcp6 client of systemd allowed a malicious dhcp6 server to overwrite heap memory in systemd-networkd. bsc1113632 - CVE-2018-15686: A vulnerability in...

SUSE-SU-2019:0761-1 Security update for the Linux Kernel (Live Patch 23 for SLE 12 SP3)

This update for the Linux Kernel 4.4.175-9479 fixes one issue. The following security issue was fixed: - CVE-2019-9213: Expanddownwards in mm/mmap.c lacked a check for the mmap minimum address, which made it easier for attackers to exploit kernel NULL pointer dereferences on non-SMAP platforms...

OPENSUSE-SU-2019:0232-1 Security update for build

This update for build version 20190128 fixes the following issues: Security issue fixed: - CVE-2017-14804: Improve file name check extractbuild bsc1069904 Non-security issue fixed: - Add initial SLE 15 SP1 config bsc1122895 This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2019:0252-1 Security update for docker-runc

This update for docker-runc fixes the following issues: Security issue fixed: - CVE-2019-5736: Effectively copying /proc/self/exe during re-exec to avoid write attacks to the host runc binary, which could lead to a container breakout bsc1121967 This update was imported from the SUSE:SLE-15:Update...