SUSE SLED12 / SLES12 Security Update : avahi (SUSE-SU-2019:0179-1)

This update for avahi fixes the following issues : Security issue fixed : CVE-2018-1000845: Fixed DNS amplification and reflection to spoofed addresses DOS bsc1120281 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable...

SUSE SLED12 / SLES12 Security Update : ghostscript (SUSE-SU-2019:0144-1)

This update for ghostscript to version 9.26a fixes the following issues : Security issue fixed : CVE-2019-6116: subroutines within pseudo-operators must themselves be pseudo-operators bsc1122319 Note that Tenable Network Security has extracted the preceding description block directly from the SUS...

SUSE SLED12 / SLES12 Security Update : webkit2gtk3 (SUSE-SU-2019:0146-1)

This update for webkit2gtk3 to version 2.22.5 fixes the following issues : Security issues fixed : CVE-2018-4438: Fixed a logic issue which lead to memory corruption bsc1119554 CVE-2018-4437, CVE-2018-4441, CVE-2018-4442, CVE-2018-4443, CVE-2018-4464: Fixed multiple memory corruption issues with...

SUSE SLED12 / SLES12 Security Update : systemd (SUSE-SU-2019:0135-1)

This update for systemd provides the following fixes : Security issues fixed : CVE-2018-16864, CVE-2018-16865: Fixed two memory corruptions through attacker-controlled allocas bsc1120323 CVE-2018-16866: Fixed an information leak in journald bsc1120323 Fixed an issue during system startup in...

SUSE SLED12 / SLES12 Security Update : PackageKit (SUSE-SU-2019:0128-1)

This update for PackageKit fixes the following issues : Fixed displaying the license agreement pop up window during package update bsc1038425. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLED12 Security Update : libraw (SUSE-SU-2019:0127-1)

This update for libraw fixes the following issues : Security issues fixed : CVE-2018-20365: Fixed a heap-based buffer overflow in the raw2image function of librawcxx.cpp bsc1120500 CVE-2018-20364: Fixed a NULL pointer dereference in the copybayer function of librawcxx.cpp bsc1120499 CVE-2018-2036...

SUSE SLED12 Security Update : freerdp (SUSE-SU-2019:0134-1)

This update for freerdp fixes the following issues : Security issues fixed : CVE-2018-0886: Fix a remote code execution vulnerability CredSSP bsc1085416, bsc1087240, bsc1104918 CVE-2018-8789: Fix several denial of service vulnerabilities in the in the NTLM Authentication module bsc1117965...

SUSE SLED12 / SLES12 Security Update : mariadb (SUSE-SU-2019:0119-1)

This update for mariadb to version 10.2.19 fixes the following issues: bsc1116686 Security issues fixed : CVE-2016-9843: Big-endian out-of-bounds pointer bsc1013882 CVE-2018-3282, CVE-2018-3174, CVE-2018-3143, CVE-2018-3156, CVE-2018-3251, CVE-2018-3185, CVE-2018-3277, CVE-2018-3162, CVE-2018-317...

SUSE SLED12 / SLES12 Security Update : wireshark (SUSE-SU-2019:0138-1)

This update for wireshark to version 2.4.12 fixes the following issues : Security issues fixed : CVE-2019-5717: Fixed a denial of service in the PMUL dissector bsc1121232 CVE-2019-5718: Fixed a denial of service in the RTSE dissector and other dissectors bsc1121233 CVE-2019-5719: Fixed a denial o...

SUSE SLED12 / SLES12 Security Update : soundtouch (SUSE-SU-2019:0096-1)

This update for soundtouch fixes the following issues : Security issues fixed : CVE-2018-17098: Fixed a heap corruption from size inconsistency, which allowed remote attackers to cause a denial of service or possibly have other unspecified impact bsc1108632 CVE-2018-17097: Fixed a double free,...

SUSE SLED12 / SLES12 Security Update : sssd (SUSE-SU-2019:0081-1)

This update for sssd provides the following fixes : This security issue was fixed : CVE-2018-10852: Set stricter permissions on /var/lib/sss/pipes/sudo to prevent the disclosure of sudo rules for arbitrary users bsc1098377 The update package also includes non-security fixes. See advisory for...

SUSE SLED12 / SLES12 Security Update : webkit2gtk3 (SUSE-SU-2019:0059-1)

This update for webkit2gtk3 to version 2.22.4 fixes the following issues : Security issues fixed : CVE-2018-4191, CVE-2018-4197, CVE-2018-4299, CVE-2018-4306, CVE-2018-4309, CVE-2018-4392, CVE-2018-4312, CVE-2018-4314, CVE-2018-4315, CVE-2018-4316, CVE-2018-4317, CVE-2018-4318, CVE-2018-4319,...

SUSE SLED12 / SLES12 Security Update : java-1_8_0-openjdk (SUSE-SU-2019:0057-1)

This update for java-180-openjdk to version 8u191 fixes the following issues : Security issues fixed : CVE-2018-3136: Manifest better support bsc1112142 CVE-2018-3139: Better HTTP Redirection bsc1112143 CVE-2018-3149: Enhance JNDI lookups bsc1112144 CVE-2018-3169: Improve field accesses bsc111214...

SUSE SLED12 / SLES12 Security Update : java-1_7_0-openjdk (SUSE-SU-2019:0049-1) (Spectre)

This update for java-170-openjdk to version 7u201 fixes the following issues : Security issues fixed : CVE-2018-3136: Manifest better support bsc1112142 CVE-2018-3139: Better HTTP Redirection bsc1112143 CVE-2018-3149: Enhance JNDI lookups bsc1112144 CVE-2018-3169: Improve field accesses bsc111214...

SUSE SLED12 / SLES12 Security Update : polkit (SUSE-SU-2019:0019-1)

This update for polkit fixes the following issues : Security issue fixed : CVE-2018-19788: Fixed handling of UIDs over MAXUINT bsc1118277 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatical...

SUSE SLED12 Security Update : libraw (SUSE-SU-2019:0002-1)

This update for libraw fixes the following issues : Security issues fixed : CVE-2018-5808: Fixed a stack-based buffer overflow and code execution vulnerability in findgreen function internal/dcrawcommon.cpp bsc1118894. CVE-2018-5805: Fixed a boundary error within the quicktake100loadraw function...

SUSE SLED12 / SLES12 Security Update : wireshark (SUSE-SU-2018:4298-1)

This update for wireshark fixes the following issues : Update to Wireshark 2.4.11 bsc1117740. Security issues fixed : CVE-2018-19625: The Wireshark dissection engine could crash wnpa-sec-2018-51 CVE-2018-19626: The DCOM dissector could crash wnpa-sec-2018-52 CVE-2018-19623: The LBMPDM dissector...

SUSE SLED12 Security Update : netatalk (SUSE-SU-2018:4217-1)

This update for netatalk fixes the following issues : Security issue fixed : CVE-2018-1160 Fixed a missing bounds check in the handling of the DSI OPEN SESSION request, which allowed an unauthenticated to overwrite memory with data of their choice leading to arbitrary code execution with root...

SUSE SLED12 / SLES12 Security Update : mariadb (SUSE-SU-2018:4211-1)

This update for mariadb fixes the following issues : Update to MariaDB 10.0.37 GA bsc1116686. Security issues fixed : CVE-2018-3282: Server Storage Engines unspecified vulnerability CPU Oct 2018 bsc1112432 CVE-2018-3251: InnoDB unspecified vulnerability CPU Oct 2018 bsc1112397 CVE-2018-3174: Clie...

SUSE SLED12 / SLES12 Security Update : bluez (SUSE-SU-2018:4188-1)

This update for bluez fixes the following issues : Security issues fixed : CVE-2016-9800: Fixed a buffer overflow in the pincodereplydump function bsc1013721 CVE-2016-9801: Fixed a buffer overflow in the setextctrl function bsc1013732 Note that Tenable Network Security has extracted the preceding...