SUSE SLED12 / SLES12 Security Update : libvirt (SUSE-SU-2019:1042-1)

This update for libvirt fixes the following issues : Security issues fixed : CVE-2019-3840: Fixed a NULL pointer dereference vulnerability in virJSONValueObjectHasKey function which could have resulted in a remote denial of service via the guest agent bsc1127458. CVE-2019-3886: Fixed an informati...

SUSE SLED12 / SLES12 Security Update : wireshark (SUSE-SU-2019:1038-1)

This update for wireshark to version 2.4.14 fixes the following issues : Security issues fixed : CVE-2019-10895: NetScaler file parser crash. CVE-2019-10899: SRVLOC dissector crash. CVE-2019-10894: GSS-API dissector crash. CVE-2019-10896: DOF dissector crash. CVE-2019-10901: LDSS dissector crash...

SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2019:1033-1)

This update for ImageMagick fixes the following issues : Security issues fixed : CVE-2019-9956: Fixed a stack-based buffer overflow in PopHexPixel bsc1130330. CVE-2019-10650: Fixed a heap-based buffer over-read in WriteTIFFImage bsc1131317. CVE-2019-7175: Fixed multiple memory leaks in DecodeImag...

SUSE SLED12 / SLES12 Security Update : samba (SUSE-SU-2019:1037-1)

This update for samba fixes the following issues : Security issue fixed : CVE-2019-3880: Fixed a path/symlink traversal vulnerability, which allowed an unprivileged user to save registry files outside a share bsc1131060. Non-security issues fixed: Fix vfsceph ftruncate and fallocate handling...

SUSE SLED12 / SLES12 Security Update : webkit2gtk3 (SUSE-SU-2019:1030-1)

This update for webkit2gtk3 fixes the following issues : Security issue fixed : CVE-2019-8375: Fixed an issue in UIProcess subsystem which could allow the script dialog size to exceed the web view size leading to Buffer Overflow or other unspecified impact bsc1126768. Note that Tenable Network...

SUSE SLED12 Security Update : ntfs-3g_ntfsprogs (SUSE-SU-2019:1000-1)

This update for ntfs-3gntfsprogs fixes the following issues : Security issues fixed : CVE-2019-9755: Fixed a heap-based buffer overflow which could lead to local privilege escalation bsc1130165. Note that Tenable Network Security has extracted the preceding description block directly from the SUS...

SUSE SLED12 / SLES12 Security Update : curl (SUSE-SU-2019:0996-1)

This update for curl fixes the following issues : Security issue fixed : CVE-2018-16839: Fixed a buffer overflow in the SASL authentication code bsc1112758. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

SUSE SLED12 / SLES12 Security Update : python3 (SUSE-SU-2019:0961-1)

This update for python3 fixes the following issues : Security issue fixed : CVE-2019-9636: Fixed an information disclosure because of incorrect handling of Unicode encoding during NFKC normalization bsc1129346. Note that Tenable Network Security has extracted the preceding description block...

SUSE SLED12 / SLES12 Security Update : wget (SUSE-SU-2019:0956-1)

This update for wget fixes the following issues : Security issue fixed : CVE-2019-5953: Fixed a buffer overflow vulnerability which might cause code execution bsc1131493. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE SLED12 / SLES12 Security Update : libvirt (SUSE-SU-2019:0948-1)

This update for libvirt fixes the following issues : Security issue fixed : CVE-2019-3840: Fixed a NULL pointer dereference vulnerability in virJSONValueObjectHasKey function which could have resulted in a remote denial of service via the guest agent bsc1127458. CVE-2019-3886: Fixed an informatio...

SUSE SLED12 / SLES12 Security Update : sqlite3 (SUSE-SU-2019:0913-1)

This update for sqlite3 fixes the following issues : Security issues fixed : CVE-2018-20346: Fixed a remote code execution vulnerability in FTS3 Magellan bsc1119687. CVE-2018-20506: Fixed an integer overflow when FTS3 extension is enabled bsc1131576. Note that Tenable Network Security has extract...

SUSE SLED12 / SLES12 Security Update : MozillaFirefox (SUSE-SU-2019:0852-1)

This update for MozillaFirefox fixes the following issues : Security issuess addressed : update to Firefox ESR 60.6.1 bsc1130262 : CVE-2019-9813: Fixed Ionmonkey type confusion with proto mutations CVE-2019-9810: Fixed IonMonkey MArraySlice incorrect alias information Update to Firefox ESR 60.6...

SUSE SLED12 / SLES12 Security Update : bash (SUSE-SU-2019:0838-1)

This update for bash fixes the following issues : Security issue fixed : CVE-2019-9924: Fixed a vulnerability in which shell did not prevent user BASHCMDS allowing the user to execute any command with the permissions of the shell bsc1130324. Note that Tenable Network Security has extracted the...

SUSE SLED12 / SLES12 Security Update : file (SUSE-SU-2019:0839-1)

This update for file fixes the following issues : The following security vulnerabilities were addressed : Fixed an out-of-bounds read in the function docorenote in readelf.c, which allowed remote attackers to cause a denial of service application crash via a crafted ELF file bsc1096974...

SUSE SLED12 / SLES12 Security Update : Recommended update for adcli, sssd (SUSE-SU-2019:0805-1)

This update for adcli and sssd provides the following improvement : Security vulnerability fixed : CVE-2019-3811: Fix fallbackhomedir returning '/' for empty home directories bsc1121759 Other fixes: Add an option to disable checking for trusted domains in the subdomains provider bsc1125617 Clear...

SUSE SLED12 / SLES12 Security Update : openssl (SUSE-SU-2019:0803-1)

This update for openssl fixes the following issues : Security issues fixed : The 9 Lives of Bleichenbacher's CAT: Cache Attacks on TLS Implementations bsc1117951 CVE-2019-1559: Fixed OpenSSL 0-byte Record Padding Oracle which under certain circumstances a TLS server can be forced to respond...

SUSE SLED12 / SLES12 Security Update : ntp (SUSE-SU-2019:0789-1)

This update for ntp fixes the following issues : Security issue fixed : CVE-2019-8936: Fixed a NULL pointer exception which could allow an authenticated attcker to cause segmentation fault to ntpd bsc1128525. Other isses addressed: Fixed an issue which caused openSSL mismatch bsc1125401 Fixed...

SUSE SLED12 / SLES12 Security Update : openssl-1_1 (SUSE-SU-2019:0787-1)

This update for openssl-11 OpenSSL Security Advisory 6 March 2019 fixes the following issues : Security issue fixed : CVE-2019-1543: Fixed an implementation error in ChaCha20-Poly1305 where it was allowed to set IV with more than 12 bytes bsc1128189. Note that Tenable Network Security has extract...

SUSE SLED12 / SLES12 Security Update : w3m (SUSE-SU-2019:0776-1)

This update for w3m fixes several issues. These security issues were fixed : CVE-2018-6196: Prevent infinite recursion in HTMLlineproc0 caused by the feedtableblocktag function which did not prevent a negative indent value bsc1077559 CVE-2018-6197: Prevent NULL pointer dereference in...

SUSE SLED12 / SLES12 Security Update : gd (SUSE-SU-2019:0747-1)

This update for gd fixes the following issues : Security issues fixed : CVE-2019-6977: Fixed a heap-based buffer overflow the GD Graphics Library used in the imagecolormatch function bsc1123361. CVE-2019-6978: Fixed a double free in the gdImagePtr functions bsc1123522. Note that Tenable Network...