SUSE SLED12 / SLES12 Security Update : sysstat (SUSE-SU-2019:2752-1)

This update for sysstat fixes the following issue : CVE-2019-16167: Fixed a memory corruption due to an integer overflow. bsc1150114 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically...

SUSE SLED12 / SLES12 Security Update : python (SUSE-SU-2019:2748-1)

This update for python fixes the following issues : Security issue fixed : CVE-2019-16056: Fixed a parser issue in the email module bsc1149955. CVE-2019-16935: Fixed a reflected XSS in python/Lib/DocXMLRPCServer.py bsc1153238. Note that Tenable Network Security has extracted the preceding...

SUSE SLED12 / SLES12 Security Update : dhcp (SUSE-SU-2019:2727-1)

This update for dhcp fixes the following issues : Secuirty issue fixed : CVE-2019-6470: Fixed DHCPv6 server crashes bsc1134078. Bug fixes: Add compile option --enable-secs-byteorder to avoid duplicate lease warnings bsc1089524. Use IPv6 when called as dhclient6, dhcpd6, and dhcrelay6 bsc1136572...

SUSE SLED12 / SLES12 Security Update : mariadb-100 (SUSE-SU-2019:2687-1)

This update for mariadb-100 fixes the following issues : Updated to MariaDB 10.0.40-1. Security issues fixed : CVE-2019-2805, CVE-2019-2740, CVE-2019-2739, CVE-2019-2737, CVE-2019-2614, CVE-2019-2627. bsc1132826 bsc1141798. Note that Tenable Network Security has extracted the preceding descriptio...

SUSE SLED12 / SLES12 Security Update : sudo (SUSE-SU-2019:2666-1)

This update for sudo fixes the following issues : Security issue fixed : CVE-2019-14287: Fixed an issue where a user with sudo privileges that allowed them to run commands with an arbitrary uid, could run commands as root, despite being forbidden to do so in sudoers bsc1153674. Note that Tenable...

SUSE SLED12 / SLES12 Security Update : compat-openssl098 (SUSE-SU-2019:2558-1)

This update for compat-openssl098 fixes the following issues : OpenSSL Security Advisory 10 September 2019 CVE-2019-1547: Added ECGROUPsetgenerator side channel attack avoidance bsc1150003. CVE-2019-1563: Fixed Bleichenbacher attack against cms/pkcs7 encryption transported key bsc1150250. Note th...

SUSE SLED12 / SLES12 Security Update : sqlite3 (SUSE-SU-2019:2536-1)

This update for sqlite3 fixes the following issues : Security issue fixed : CVE-2019-16168: Fixed improper validation of sqlitestat1 field that could lead to denial of service bsc1150137. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE...

SUSE SLED12 / SLES12 Security Update : jasper (SUSE-SU-2019:2513-1)

This update for jasper fixes the following issues : Security issues fixed : CVE-2018-19540: Fixed a heap based overflow in jasicctxtdescinput bsc1117508. CVE-2018-19541: Fix heap based overread in jasimagedepalettize bsc1117507. CVE-2018-19542: Fixed a denial of service in jp2decode bsc1117505...

SUSE SLED12 / SLES12 Security Update : openssl-1_0_0 (SUSE-SU-2019:2504-1)

This update for openssl-100 fixes the following issues : OpenSSL Security Advisory 10 September 2019 CVE-2019-1547: Added ECGROUPsetgenerator side channel attack avoidance. bsc1150003 CVE-2019-1563: Fixed Bleichenbacher attack against cms/pkcs7 encryption transported key bsc1150250 In addition...

SUSE SLED12 / SLES12 Security Update : bind (SUSE-SU-2019:2502-1)

This update for bind fixes the following issues : Security issues fixed : CVE-2019-6465: Fixed an issue where controls for zone transfers may not be properly applied to Dynamically Loadable Zones bsc1126069. CVE-2019-6471: Fixed a reachable assert in dispatch.c. bsc1138687 CVE-2018-5745: Fixed a...

SUSE SLED12 / SLES12 Security Update : libgcrypt (SUSE-SU-2019:2510-1)

This update for libgcrypt fixes the following issues : Security issues fixed : CVE-2019-13627: Mitigated ECDSA timing attack. bsc1148987 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automaticall...

SUSE SLED12 / SLES12 Security Update : gpg2 (SUSE-SU-2019:2480-1)

This update for gpg2 fixes the following issues : Security issue fixed : CVE-2019-13050: Fixed denial-of-service attacks via big keys. bsc1141093 Non-security issue fixed: Allow coredumps in X11 desktop sessions bsc1124847. Note that Tenable Network Security has extracted the preceding descriptio...

SUSE SLED12 / SLES12 Security Update : djvulibre (SUSE-SU-2019:2444-1)

This update for djvulibre fixes the following issues : Security issues fixed : CVE-2019-15142: Fixed heap-based buffer over-read bsc1146702. CVE-2019-15143: Fixed resource exhaustion caused by corrupted image files bsc1146569. CVE-2019-15144: Fixed denial-of-service caused by crafted PBM image...

SUSE SLED12 / SLES12 Security Update : expat (SUSE-SU-2019:2440-1)

This update for expat fixes the following issues : Security issue fixed : CVE-2019-15903: Fixed a heap-based buffer over-read caused by crafted XML documents. bsc1149429 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE SLED12 Security Update : libreoffice (SUSE-SU-2019:2401-1)

This update for libreoffice to version 6.2.7.1 fixes the following issues : Security issues fixed : CVE-2019-9849: Disabled fetching remote bullet graphics in 'stealth mode' bsc1141861. CVE-2019-9848: Fixed an arbitrary script execution via LibreLogo bsc1141862. CVE-2019-9851: Fixed LibreLogo...

SUSE SLED12 / SLES12 Security Update : ibus (SUSE-SU-2019:2389-1)

This update for ibus fixes the following issues : Security issue fixed : CVE-2019-14822: Fixed a misconfiguration of the DBus server that allowed an unprivileged user to monitor and send method calls to the ibus bus of another user. bsc1150011 Note that Tenable Network Security has extracted the...

SUSE SLED12 / SLES12 Security Update : openldap2 (SUSE-SU-2019:2390-1)

This update for openldap2 fixes the following issues : Security issues fixed : CVE-2019-13565: Fixed ssf memory reuse that leads to incorrect authorization of another connection, granting excess connection rights ssf bsc1143194. CVE-2019-13057: Fixed rootDN of a backend that may proxyauth...

SUSE SLED12 / SLES12 Security Update : ceph (SUSE-SU-2019:2364-1)

This update for ceph to version 12.2.12-594-g02236657ca fixes the following issues : Security issues fixed : CVE-2018-16889: Fixed missing sanitation of customer encryption keys from log output in v4 auth. bsc1121567 Note that Tenable Network Security has extracted the preceding description block...

SUSE SLED12 / SLES12 Security Update : qemu (SUSE-SU-2019:2353-1)

This update for qemu fixes the following issues : Security issues fixed : CVE-2019-14378: Security fix for heap overflow in ipreass on big packet input bsc1143794. CVE-2019-12155: Security fix for NULL pointer dereference while releasing spice resources bsc1135902. CVE-2019-13164: Security fix fo...

SUSE SLED12 / SLES12 Security Update : webkit2gtk3 (SUSE-SU-2019:2345-1)

This update for webkit2gtk3 fixes the following issues : Updated to version 2.24.4 bsc1148931. Security issues fixed : CVE-2019-8644, CVE-2019-8649, CVE-2019-8658, CVE-2019-8669, CVE-2019-8678, CVE-2019-8680, CVE-2019-8683, CVE-2019-8684, CVE-2019-8688, CVE-2019-8595, CVE-2019-8607, CVE-2019-8615...