SUSE SLED12 / SLES12 Security Update : libsolv, libzypp, zypper (SUSE-SU-2019:1972-1)

This update for libsolv, libzypp and zypper fixes the following issues : libsolv was updated to version 0.6.36 fixes the following issues : Security issues fixed : CVE-2018-20532: Fixed a NULL pointer dereference in testcaseread bsc1120629. CVE-2018-20533: Fixed a NULL pointer dereference in...

SUSE SLED12 / SLES12 Security Update : cronie (SUSE-SU-2019:1990-1)

This update for cronie fixes the following issues : Security issues fixed : CVE-2019-9704: Fixed an insufficient check in the return value of calloc which could allow a local user to create Denial of Service by crashing the deamon bsc1128937. CVE-2019-9705: Fixed an implementation vulnerability...

SUSE SLED12 / SLES12 Security Update : openexr (SUSE-SU-2019:1962-1)

This update for openexr fixes the following issues : Security issue fixed : CVE-2017-9111: Fixed an invalid write of size 8 in the storeSSE function in ImfOptimizedPixelReading.h bsc1040109. CVE-2017-9113: Fixed an invalid write of size 1 in the bufferedReadPixels function in ImfInputFile.cpp...

SUSE SLED12 / SLES12 Security Update : spamassassin (SUSE-SU-2019:1961-1)

This update for spamassassin to version 3.4.2 fixes the following issues : Security issues fixed : CVE-2017-15705: Fixed denial of service via unclosed tags in crafted emails bsc1108745. CVE-2018-11781: Fixed a code injection in the meta rule syntax by local users bsc1108748. CVE-2018-11780: Fixe...

SUSE SLED12 / SLES12 Security Update : bzip2 (SUSE-SU-2019:1955-1)

This update for bzip2 fixes the following issues : Security issue fixed : CVE-2019-12900: Fixed an out-of-bounds write in decompress.c with many selectors bsc1139083. CVE-2016-3189: Fixed a use-after-free in bzip2recover bsc985657. Note that Tenable Network Security has extracted the preceding...

SUSE SLED12 / SLES12 Security Update : ucode-intel (SUSE-SU-2019:1954-1) (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)

This update for ucode-intel fixes the following issues : This update contains the Intel QSR 2019.1 Microcode release bsc1111331 Four new speculative execution information leak issues have been identified in Intel CPUs. bsc1111331 CVE-2018-12126: Microarchitectural Store Buffer Data Sampling MSBDS...

SUSE SLED12 / SLES12 Security Update : libxslt (SUSE-SU-2019:1867-1)

This update for libxslt fixes the following issues : Security issues fixed : CVE-2019-13118: Fixed a read of uninitialized stack data bsc1140101. CVE-2019-13117: Fixed a uninitialized read which allowed to discern whether a byte on the stack contains certain special characters bsc1140095. Note th...

SUSE SLED12 / SLES12 Security Update : libxml2 (SUSE-SU-2019:1896-1)

This update for libxml2 fixes the following issues : Issue fixed : Fixed a bug related to the fix for CVE-2016-9318 which allowed xsltproc to access the internet even when --nonet was given and also was making docbook-xsl-stylesheets to have incomplete xml catalog file bsc1010675, bsc1126613 and...

SUSE SLED12 / SLES12 Security Update : xrdp (SUSE-SU-2019:1847-1)

This update for xrdp fixes the following issues : These security issues were fixed : CVE-2013-1430: When successfully logging in using RDP into an xrdp session, the file /.vnc/sesman$usernamepasswd was created. Its content was the equivalent of the user's cleartext password, DES encrypted with a...

SUSE SLED12 / SLES12 Security Update : webkit2gtk3 (SUSE-SU-2019:1850-1)

This update for webkit2gtk3 to version 2.24.2 fixes the following issues : Security issues fixed : CVE-2019-6237, CVE-2019-8571, CVE-2019-8583, CVE-2019-8584, CVE-2019-8586, CVE-2019-8587, CVE-2019-8594, CVE-2019-8595, CVE-2019-8596, CVE-2019-8597, CVE-2019-8601, CVE-2019-8607, CVE-2019-8608,...

SUSE SLED12 Security Update : podofo (SUSE-SU-2019:1849-1)

This update for podofo fixes the following issues : Security issues fixed : CVE-2017-8054: Fixed a vulnerability in PdfPagesTree::GetPageNodeFromArray function which could allow remote attackers to cause Denial of Service bsc1035596. CVE-2018-5783: Fixed an uncontrolled memory allocation in...

SUSE SLED12 / SLES12 Security Update : expat (SUSE-SU-2019:1834-1)

This update for expat fixes the following issues : Security issue fixed : CVE-2018-20843: Fixed a denial of service triggered by high resource consumption in the XML parser when XML names contain a large amount of colons bsc1139937. Note that Tenable Network Security has extracted the preceding...

SUSE SLED12 / SLES12 Security Update : Test update for SUSE:SLE-12-SP5:Update (security) (SUSE-SU-2019:1793-1)

This is a security test update for SUSE:SLE-12-SP5:Update Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

SUSE SLED12 / SLES12 Security Update : glib2 (SUSE-SU-2019:1830-1)

This update for glib2 fixes the following issues : Security issue fixed : CVE-2019-13012: Fixed improper restriction of file permissions when creating directories bsc1139959. Non-security issue fixed: Added explicit requires between libglib2 and libgio2 bsc1140122. Note that Tenable Network...

SUSE SLED12 Security Update : zeromq (SUSE-SU-2019:1785-1)

This update for zeromq fixes the following issues : - CVE-2019-13132: An unauthenticated remote attacker could have exploited a stack overflow vulnerability on a server that is supposed to be protected by encryption and authentication to potentially gain a remote code execution. bsc1140255 Note...

SUSE SLED12 / SLES12 Security Update : postgresql10 (SUSE-SU-2019:1783-1)

This update for postgresql10 to version 10.9 fixes the following issue : Security issue fixed : CVE-2019-10164: Fixed buffer-overflow vulnerabilities in SCRAM verifier parsing bsc1138034. More information at https://www.postgresql.org/docs/10/release-10-9.html Note that Tenable Network Security h...

SUSE SLED12 / SLES12 Security Update : libu2f-host (SUSE-SU-2019:1749-1)

This update for libu2f-host and pamu2f to version 1.0.8 fixes the following issues : Security issues fixed for libu2f-host : CVE-2019-9578: Fixed a memory leak due to a wrong parse of init's response bsc1128140. CVE-2018-20340: Fixed an unchecked buffer, which could allow a buffer overflow with a...

SUSE SLED12 / SLES12 Security Update : dnsmasq (SUSE-SU-2019:1721-1)

This update for dnsmasq fixes the following issues : Security issue fixed : CVE-2017-15107: Fixed a vulnerability in DNSSEC implementation. Processing of wildcard synthesized NSEC records may result improper validation for non-existance. bsc1076958 Non-security issue fixed: Reload system dbus to...

SUSE SLED12 / SLES12 Security Update : glib2 (SUSE-SU-2019:1722-1)

This update for glib2 provides the following fix : Security issues fixed : CVE-2019-12450: Fixed an improper file permission when copy operation takes place bsc1137001. CVE-2018-16428: Avoid a NULL pointer dereference that could crash glib2 users in markup processing bnc1107121. CVE-2018-16429:...

SUSE SLED12 / SLES12 Security Update : glibc (SUSE-SU-2019:1716-1)

This update for glibc fixes the following issues : Security issue fixed : CVE-2015-5180: Fixed a NULL pointer dereference with internal QTYPE bsc941234. Feature work: IBM zSeries arch13 hardware support in glibc added fate327072, bsc1132678 Other issue addressed: Fixed a concurrency issue with...