SUSE SLED12 / SLES12 Security Update : cups (SUSE-SU-2019:3057-1)

This update for cups fixes the following issues : CVE-2019-8675: Fixed a stack-based buffer overflow in libcups's asn1gettype functionbsc1146358. CVE-2019-8696: Fixed a stack-based buffer overflow in libcups's asn1getpacked function bsc1146359. Note that Tenable Network Security has extracted the...

SUSE SLED12 / SLES12 Security Update : sqlite3 (SUSE-SU-2019:3050-1)

This update for sqlite3 fixes the following issues : CVE-2017-2518: Fixed a use-after-free vulnerability which could have led to buffer overflow via a crafted SQL statement bsc1155787. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

SUSE SLED12 / SLES12 Security Update : tiff (SUSE-SU-2019:3058-1)

This update for tiff fixes the following issues : Security issues fixed : CVE-2019-14973: Fixed an improper check which was depended on the compiler which could have led to integer overflow bsc1146608. CVE-2016-5102: Fixed a buffer overflow in readgifimage bsc983268 CVE-2018-17000: Fixed a NULL...

SUSE SLED12 / SLES12 Security Update : cpio (SUSE-SU-2019:3064-1)

This update for cpio fixes the following issues : CVE-2019-14866: Fixed an improper validation of the values written in the header of a TAR file through the tooct function which could have led to unexpected TAR generation bsc1155199. Note that Tenable Network Security has extracted the preceding...

SUSE SLED12 / SLES12 Security Update : libpng16 (SUSE-SU-2019:3060-1)

This update for libpng16 fixes the following issues : Security issues fixed : CVE-2019-7317: Fixed a use-after-free vulnerability, triggered when pngimagefree was called under pngsafeexecute bsc1124211. CVE-2017-12652: Fixed an Input Validation Error related to the length of chunks bsc1141493. No...

SUSE SLED12 / SLES12 Security Update : aspell (SUSE-SU-2019:3034-1)

This update for aspell fixes the following issues : CVE-2019-17544: Fixed a stack-based buffer over-read in acommon:unescape in common/getdata.cpp via an isolated backslash bsc1153892. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

SUSE SLED12 / SLES12 Security Update : ucode-intel (SUSE-SU-2019:2988-1)

This update for ucode-intel fixes the following issues : Updated to 20191112 official security release bsc1155988 Includes security fixes for : - CVE-2019-11135: Added feature allowing to disable TSX RTM bsc1139073 - CVE-2019-11139: A CPU microcode only fix for Voltage modulation issues bsc114103...

SUSE SLED12 / SLES12 Security Update : ghostscript (SUSE-SU-2019:2983-1)

This update for ghostscript fixes the following issue : CVE-2019-14869: Fixed a possible dSAFER escape which could have allowed an attacker to gain high privileges by a specially crafted Postscript code bsc1156275. Note that Tenable Network Security has extracted the preceding description block...

SUSE SLED12 / SLES12 Security Update : libjpeg-turbo (SUSE-SU-2019:2972-1)

This update for libjpeg-turbo fixes the following issues : CVE-2019-2201: Several integer overflow issues and subsequent segfaults occurred in libjpeg-turbo, when attempting to compress or decompress gigapixel images. bsc1156402 Note that Tenable Network Security has extracted the preceding...

SUSE SLED12 / SLES12 Security Update : ucode-intel (SUSE-SU-2019:2959-1)

This update for ucode-intel fixes the following issues : Updated to 20191112 security release bsc1155988 - Processor Identifier Version Products - Model Stepping F-MO-S/PI Old-New - ---- new platforms ---------------------------------------- - CML-U62 A0 6-a6-0/80 000000c6 Core Gen10 Mobile - CNL...

SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2019:2948-1)

The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2018-12207: Untrusted virtual machines on Intel CPUs could exploit a race condition in the Instruction Fetch Unit of the Intel CPU to cause a Machine...

SUSE SLED12 / SLES12 Security Update : qemu (SUSE-SU-2019:2956-1)

This update for qemu fixes the following issues : Remove a backslash '' escape character from 80-qemu-ga.rules bsc1153358 Unlike sles 15 or newer guests, The udev rule file of qemu guest agent in sles 12 sp4 or newer guest only needs one escape character. Fix use-after-free in slirp CVE-2018-2012...

SUSE SLED12 / SLES12 Security Update : libssh2_org (SUSE-SU-2019:2936-1)

This update for libssh2org fixes the following issue : CVE-2019-17498: Fixed an integer overflow in a bounds check that might have led to the disclosure of sensitive information or a denial of service bsc1154862. Note that Tenable Network Security has extracted the preceding description block...

SUSE SLED12 / SLES12 Security Update : gdb (SUSE-SU-2019:2916-1)

This update for gdb fixes the following issues : Update to gdb 8.3.1: jscECO-368 Security issues fixed : CVE-2019-1010180: Fixed a potential buffer overflow when loading ELF sections larger than the file. bsc1142772 Upgrade libipt from v2.0 to v2.0.1. Enable librpm for version librpm.so.3...

SUSE SLED12 / SLES12 Security Update : bluez (SUSE-SU-2019:2915-1)

This update for bluez fixes the following issue : CVE-2016-9798: Fixed a use-after-free in confopt bsc1013712. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as...

SUSE SLED12 / SLES12 Security Update : MozillaFirefox (SUSE-SU-2019:2872-1)

This update for MozillaFirefox to 68.2.0 ESR fixes the following issues : Mozilla Firefox was updated to version 68.2.0 ESR bsc1154738. Security issues fixed : CVE-2019-15903: Fixed a heap overflow in the expat library bsc1149429. CVE-2019-11757: Fixed a use-after-free when creating index updates...

SUSE SLED12 / SLES12 Security Update : dbus-1 (SUSE-SU-2019:2820-1)

This update for dbus-1 fixes the following issues : Security issue fixed : CVE-2019-12749: Fixed an implementation flaw in DBUSCOOKIESHA1 which could have allowed local attackers to bypass authentication bsc1137832. Note that Tenable Network Security has extracted the preceding description block...

SUSE SLED12 / SLES12 Security Update : nfs-utils (SUSE-SU-2019:2781-1)

This update for nfs-utils fixes the following issues : CVE-2019-3689: Fixed root-owned files stored in insecure /var/lib/nfs. bsc1150733 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automaticall...

SUSE SLED12 / SLES12 Security Update : accountsservice (SUSE-SU-2019:2778-1)

This update for accountsservice fixes the following issues : Security issue fixed : CVE-2018-14036: Prevent directory traversal caused by an insufficient path check in userchangeiconfileauthorizedcb bsc1099699. Non-security issue fixed: Improved wtmp io performance bsc1139487. Note that Tenable...

SUSE SLED12 / SLES12 Security Update : sysstat (SUSE-SU-2019:2752-1)

This update for sysstat fixes the following issue : CVE-2019-16167: Fixed a memory corruption due to an integer overflow. bsc1150114 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically...