SUSE SLED12 / SLES12 Security Update : ipmitool (SUSE-SU-2020:0630-1)

This update for ipmitool fixes the following issues : CVE-2020-5208: Fixed multiple remote code executtion vulnerabilities bsc1163026. picmg discover messages are now DEBUG and not INFO messages bsc1085469. Note that Tenable Network Security has extracted the preceding description block directly...

SUSE SLED12 / SLES12 Security Update : gd (SUSE-SU-2020:0623-1)

This update for gd fixes the following issues : CVE-2017-7890: Fixed a buffer over-read into uninitialized memory bsc1050241. CVE-2018-14553: Fixed a NULL pointer dereference in gdImageClone bsc1165471. CVE-2019-11038: Fixed a information disclosure in gdImageCreateFromXbm bsc1140120. Note that...

SUSE SLED12 Security Update : gimp (SUSE-SU-2020:0601-1)

This update for gimp fixes the following issues : Fix for crashing due to segmentation fault caused by importing ghostscript files. bsc1161998 Security issues fixed: CVE-2017-17785: Fixed an heap-based buffer overflow in FLI import bsc1073625 CVE-2017-17786: Fixed an out-of-bounds read in TGA...

SUSE SLED12 / SLES12 Security Update : ppp (SUSE-SU-2020:0490-1)

This update for ppp fixes the following security issue : CVE-2020-8597: Fixed a buffer overflow in the eaprequest and eapresponse functions bsc1162610. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted ...

SUSE SLED12 / SLES12 Security Update : python3 (SUSE-SU-2020:0497-1)

This update for python3 fixes the following issues : Update to 3.4.10 jscSLE-9427, bsc1159208 from 3.4.6 : Security issues fixed : Update expat copy from 2.1.1 to 2.2.0 to fix the following issues: CVE-2012-0876, CVE-2016-0718, CVE-2016-4472, CVE-2017-9233, CVE-2016-9063 CVE-2017-1000158: Fix an...

SUSE SLED12 / SLES12 Security Update : libexif (SUSE-SU-2020:0457-1)

This update for libexif fixes the following issues : CVE-2019-9278: Fixed an integer overflow bsc1160770. CVE-2018-20030: Fixed a denial of service by endless recursion bsc1120943. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

SUSE SLED12 / SLES12 Security Update : sudo (SUSE-SU-2020:0406-1)

This update for sudo fixes the following issues : Security issue fixed : CVE-2019-18634: Fixed a buffer overflow in the passphrase prompt that could occur when pwfeedback was enabled in /etc/sudoers bsc1162202. Non-security issue fixed: Fixed an issue where sudo -l would ask for a password even...

SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2020:0411-1)

This update for ImageMagick fixes the following issues : Security issue fixed : CVE-2019-19948: Fixed a heap-based buffer overflow in WriteSGIImage bsc1159861. CVE-2019-19949: Fixed a heap-based buffer over-read in WritePNGImage bsc1160369. Non-security issue fixed: Fixed an issue where convertin...

SUSE SLED12 / SLES12 Security Update : dnsmasq (SUSE-SU-2020:0419-1)

This update for dnsmasq fixes the following issues : Security issue fixed : CVE-2019-14834: Fixed a memory leak which could have allowed to remote attackers to cause denial of service via DHCP response creation bsc1154849 Other issue addressed: Removed cache size limit bsc1138743. Note that Tenab...

SUSE SLED12 / SLES12 Security Update : wicked (SUSE-SU-2020:0369-1)

This update for wicked fixes the following issues : CVE-2019-18902: Fixed a use-after-free when receiving invalid DHCP6 client options bsc1160903. CVE-2019-18903: Fixed a use-after-free when receiving invalid DHCP6 IAPD option bsc1160904. CVE-2020-7216: Fixed a potential denial of service via a...

SUSE SLED12 / SLES12 Security Update : e2fsprogs (SUSE-SU-2020:0360-1)

This update for e2fsprogs fixes the following issues : CVE-2019-5188: Fixed a code execution vulnerability in the directory rehashing functionality bsc1160571. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

SUSE SLED12 / SLES12 Security Update : systemd (SUSE-SU-2020:0331-1)

This update for systemd fixes the following issues : CVE-2020-1712 bscbsc1162108 Fix a heap use-after-free vulnerability, when asynchronous Polkit queries were performed while handling Dbus messages. A local unprivileged attacker could have abused this flaw to crash systemd services or potentiall...

SUSE SLED12 / SLES12 Security Update : libqt5-qtbase (SUSE-SU-2020:0317-1)

This update for libqt5-qtbase fixes the following issues : Security issues fixed : CVE-2020-0569: Fixed a potential local code execution by loading plugins from CWD bsc1161167. CVE-2018-19870: Fixed an improper check in QImage allocation which could allow Denial of Service when opening crafted gi...

SUSE SLED12 / SLES12 Security Update : java-1_8_0-openjdk (SUSE-SU-2020:0261-1)

This update for java-180-openjdk fixes the following issues : Update java-180-openjdk to version jdk8u242 icedtea 3.15.0 January 2020 CPU, bsc1160968 : CVE-2020-2583: Unlink Set of LinkedHashSets CVE-2020-2590: Improve Kerberos interop capabilities CVE-2020-2593: Normalize normalization for all...

SUSE SLED12 / SLES12 Security Update : samba (SUSE-SU-2020:0233-1)

This update for samba fixes the following issues : CVE-2019-14907: Fixed a Server-side crash after charset conversion failure during NTLMSSP processing bsc1160888. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable ha...

SUSE SLED12 / SLES12 Security Update : Mesa (SUSE-SU-2020:0145-1)

This update for Mesa fixes the following issues : Security issue fixed : CVE-2019-5068: Fixed exploitable shared memory permissions vulnerability bsc1156015. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

SUSE SLED12 / SLES12 Security Update : libssh (SUSE-SU-2020:0139-1)

This update for libssh fixes the following issues : CVE-2019-14889: Fixed an unwanted command execution in scp caused by unsanitized location bsc1158095. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempte...

SUSE SLED12 / SLES12 Security Update : libzypp (SUSE-SU-2020:0079-1)

This update for libzypp fixes the following issues : Security issue fixed : CVE-2019-18900: Fixed assert cookie file that was world readable bsc1158763. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted...

SUSE SLED12 / SLES12 Security Update : openssl-1_1 (SUSE-SU-2020:0099-1)

This update for openssl-11 fixes the following issues : Security issue fixed : CVE-2019-1551: Fixed an overflow bug in the x6464 Montgomery squaring procedure used in exponentiation with 512-bit moduli bsc1158809. CVE-2019-1563: Fixed bleichenbacher attack against cms/pkcs7 encryptioon transporte...

SUSE SLED12 / SLES12 Security Update : mozilla-nspr, mozilla-nss (SUSE-SU-2020:0088-1)

This update for mozilla-nspr, mozilla-nss fixes the following issues : mozilla-nss was updated to NSS 3.47.1 : Security issues fixed : CVE-2019-17006: Added length checks for cryptographic primitives bsc1159819. CVE-2019-11745: EncryptUpdate should use maxout, not block size bsc1158527...