SUSE SLED12 / SLES12 Security Update : java-1_8_0-openjdk (SUSE-SU-2020:0025-1)

This update for java-180-openjdk fixes the following issues : Update to version jdk8u232 icedtea 3.14.0 October 2019 CPU, bsc1154212 Security issues fixed : CVE-2019-2933: Windows file handling redux CVE-2019-2945: Better socket support CVE-2019-2949: Better Kerberos ccache handling CVE-2019-2958...

SUSE SLED12 / SLES12 Security Update : sysstat (SUSE-SU-2020:0026-1)

This update for sysstat fixes the following issues : Security issue fixed : CVE-2019-19725: Fixed double free in checkfileactlst in sacommon.c bsc1159104. Bug fixes: Enable log information of starting/stoping services. bsc1144923, jscSLE-5958 Note that Tenable Network Security has extracted the...

SUSE SLED12 / SLES12 Security Update : virglrenderer (SUSE-SU-2020:0016-1)

This update for virglrenderer fixes the following issues : CVE-2019-18388: Fixed a NULL pointer dereference which could have led to denial of service bsc1159479. CVE-2019-18390: Fixed an out of bound read which could have led to denial of service bsc1159478. CVE-2019-18389: Fixed a heap buffer...

SUSE SLED12 / SLES12 Security Update : openssl-1_0_0 (SUSE-SU-2020:0028-1)

This update for openssl-100 fixes the following issues : Security issue fixed : CVE-2019-1551: Fixed an overflow bug in the x6464 Montgomery squaring procedure used in exponentiation with 512-bit moduli bsc1158809. Note that Tenable Network Security has extracted the preceding description block...

SUSE SLED12 Security Update : dia (SUSE-SU-2019:3390-1)

This update for dia fixes the following issue : CVE-2019-19451: Fixed an endless loop on filenames with invalid encoding bsc1158194. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically...

SUSE SLED12 / SLES12 Security Update : mariadb (SUSE-SU-2019:3369-1)

This update for mariadb to version 10.2.29 fixes the following issues : MariaDB was updated to 10.2.29 bsc1156669 Security issues fixed : CVE-2019-2737: Fixed an issue where could lead a remote attacker to cause denial of service CVE-2019-2938: Fixed an issue where could lead a remote attacker to...

SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2019:3371-1)

The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2019-14895: A heap-based buffer overflow was discovered in the Linux kernel in Marvell WiFi chip driver. The flaw could occur when the station attempts a...

SUSE SLED12 / SLES12 Security Update : mariadb-100 (SUSE-SU-2019:3370-1)

This update for mariadb-100 fixes the following issues : Security issue fixed : CVE-2019-2974: Fixed Server Optimizer bsc1154162. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean...

SUSE SLED12 Security Update : zziplib (SUSE-SU-2019:3341-1)

This update for zziplib fixes the following issues : Security issues fixed : CVE-2018-16548: Avoid a memory leak from zzipparserootdirectory which could lead to denial of service. bsc1107424 CVE-2018-7727: Fixed a memory leak in unzzipcat bsc1084515. Non-security issue fixed: Prevented division b...

SUSE SLED12 / SLES12 Security Update : libssh (SUSE-SU-2019:3308-1)

This update for libssh fixes the following issues : CVE-2019-14889: Fixed an arbitrary command execution bsc1158095. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format i...

SUSE SLED12 / SLES12 Security Update : xen (SUSE-SU-2019:3310-1)

This update for xen fixes the following issues : CVE-2019-19581: Fixed a potential out of bounds on 32-bit Arm bsc1158003 XSA-307. CVE-2019-19582: Fixed a potential infinite loop when x86 accesses to bitmaps with a compile time known size of 64 bsc1158003 XSA-307. CVE-2019-19583: Fixed improper...

SUSE SLED12 / SLES12 Security Update : strongswan (SUSE-SU-2019:3266-1)

This update for strongswan provides the following fixes : Security issues fixed : CVE-2018-5388: Fixed a buffer underflow which may allow to a remote attacker with local user credentials to resource exhaustion and denial of service while reading from the socket bsc1094462. CVE-2018-10811: Fixed a...

SUSE SLED12 / SLES12 Security Update : clamav (SUSE-SU-2019:3177-1)

This update for clamav fixes the following issues : CVE-2019-15961: Fixed a denial of service which might occur when scanning a specially crafted email file as bsc1157763. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE SLED12 / SLES12 Security Update : permissions (SUSE-SU-2019:3183-1)

This update for permissions fixes the following issues : Security issues fixed : CVE-2019-3688: Changed wrong ownership in /usr/sbin/pinger to root:squid which could have allowed a squid user to gain persistence by changing the binary bsc1093414. CVE-2019-3690: Fixed a privilege escalation throug...

SUSE SLED12 / SLES12 Security Update : libarchive (SUSE-SU-2019:3092-1)

This update for libarchive fixes the following issues : Security issues fixed : CVE-2018-1000877: Fixed a double free vulnerability in RAR decoder bsc1120653. CVE-2018-1000878: Fixed a Use-After-Free vulnerability in RAR decoder bsc1120654. CVE-2019-1000019: Fixed an Out-Of-Bounds Read...

SUSE SLED12 Security Update : libtomcrypt (SUSE-SU-2019:3095-1)

This update for libtomcrypt fixes the following issues : CVE-2019-17362: Fixed an improper detection of invalid UTF-8 sequences that could have led to DoS or information disclosure via crafted DER-encoded data bsc1153433. Note that Tenable Network Security has extracted the preceding description...

SUSE SLED12 / SLES12 Security Update : libxml2 (SUSE-SU-2019:3085-1)

This update for libxml2 doesn't fix any additional security issues, but correct the rpm changelog to reflect all CVEs that have been fixed over the past. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempte...

SUSE SLED12 / SLES12 Security Update : ncurses (SUSE-SU-2019:3094-1)

This update for ncurses fixes the following issues : Security issue fixed : CVE-2018-10754: Fixed a denial of service caused by a NULL pointer Dereference in the ncparseentry bsc1131830. CVE-2019-17594: Fixed a heap-based buffer over-read in ncfindentry function in tinfo/comphash.c bsc1154036...

SUSE SLED12 / SLES12 Security Update : clamav (SUSE-SU-2019:3066-1)

This update for clamav fixes the following issues : Security issue fixed : CVE-2019-12625: Fixed a ZIP bomb issue by adding detection and heuristics for zips with overlapping files bsc1144504. CVE-2019-12900: Fixed an out-of-bounds write in decompress.c with many selectors bsc1149458. Non-securit...

SUSE SLED12 Security Update : freerdp (SUSE-SU-2019:3077-1)

This update for freerdp fixes the following issues : CVE-2019-17177: Fixed multiple memory leaks in libfreerdp/codec/region.c bsc1153163. CVE-2019-17178: Fixed a memory leak in HuffmanTreemakeFromFrequencies bsc1153164. Note that Tenable Network Security has extracted the preceding description...